Privacy Policy

Last updated: April 2026

Welcome to Cre8tive Hands

This Privacy Policy explains how Cre8tive Hands (“we”, “us”, or “our”) collects, uses, stores, and protects personal information when you use our website, digital greeting card service, and related features (the “Service”).

We aim to be clear and transparent about how your information is handled.

Early access notice: Cre8tive Hands is currently in an early access phase. As the Service develops, we may update this Privacy Policy to reflect changes to features, functionality, or legal requirements. Where appropriate, we will notify users of material changes.

By using the Service, you acknowledge this Privacy Policy.

1. Who We Are

Cre8tive Hands is the operator of this digital greeting card service.

For the purposes of UK data protection law, we are the data controller for the personal information described in this Privacy Policy, except where we clearly state otherwise.

If you have questions about this Privacy Policy or how we use personal information, you can contact us through our website contact page.

2. The Information We Collect

Depending on how you use the Service, we may collect and process the following categories of personal information:

Information you provide directly

  • your name or display name;
  • your email address or contact details, if you provide them;
  • card content you create, including personal messages, chosen card designs, selected effects, backgrounds, or music, and related text;
  • sender and recipient names;
  • recipient contact details (such as email addresses) that you enter; and
  • messages or information you send to us for support or enquiries.

Information collected automatically

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • pages visited and actions taken on the website;
  • referring website or source;
  • dates, times, and usage activity; and
  • technical logs used for security, troubleshooting, and service performance.

Cookies and similar technologies

We may use cookies and similar technologies, and we use certain third-party services, for purposes such as:

  • keeping the website working properly;
  • remembering preferences;
  • measuring traffic and usage;
  • improving performance and reliability;
  • detecting and reducing automated abuse (using technical information such as IP address and browser data, in line with this policy); and
  • supporting advertising or ad measurement, where applicable.

Please see the Cookies and Advertising section below for more detail.

3. How We Use Your Information

We use personal information to:

  • provide, operate, and maintain the Service;
  • create, store, display, and deliver digital greeting cards;
  • show card history in My Cards and process scheduled delivery requests;
  • send cards to recipients on your behalf;
  • respond to support requests and enquiries;
  • monitor performance, diagnose technical issues, and improve the Service;
  • detect, prevent, and investigate fraud, abuse, spam, phishing, security incidents, and other misuse;
  • enforce our Terms of Service and other policies;
  • comply with legal obligations; and
  • support the operation of a free, ad-funded service, including showing or measuring advertising where applicable.

We do not sell your personal data to advertisers.

4. Legal Bases for Processing

Under UK data protection law, we rely on one or more of the following legal bases depending on the context:

  • Contract: where processing is necessary to provide the Service you have requested, such as creating, storing, and delivering cards.
  • Legitimate interests: where processing is necessary for the operation, security, improvement, support, fraud prevention, moderation, and ad-funded sustainability of the Service, provided those interests are not overridden by your rights.
  • Legal obligation: where we must process information to comply with applicable laws or lawful requests.
  • Consent: where consent is required by law, such as for certain cookies or similar technologies, or where we specifically ask for it.

Where we rely on consent, you may withdraw it at any time, although this will not affect processing already carried out lawfully before withdrawal.

5. User Content and Private Card Messages

The Service is designed to let you create and send personal digital greeting cards.

We do not routinely read or actively monitor the private messages in your cards.

However, to provide the Service, we must technically store and process content such as:

  • the card design you selected;
  • personal messages written in cards;
  • chosen effects, backgrounds, or music;
  • sender details;
  • recipient details; and
  • related delivery, scheduling, and card-management information.

Because of this, authorised access to relevant content may occur in limited circumstances, including:

  • where you or a recipient report a technical issue and we need to investigate;
  • where we receive a complaint or report of abuse, harassment, threats, harmful content, or misuse;
  • where we reasonably suspect unlawful conduct, fraud, phishing, spam, or a breach of our Terms; or
  • where access is required to comply with law, enforce our rights, or protect users, recipients, or the Service.

Any such access is limited to what is reasonably necessary for those purposes.

We do not use private card content for unrelated marketing.

6. Recipient Information

If you provide recipient details, such as a name or email address, you are responsible for ensuring that you have the right to provide that information and contact the recipient where required by law.

We use recipient information only as reasonably necessary to:

  • create and address the card;
  • send the card immediately or at a scheduled time, or make it available to the intended recipient;
  • support delivery-related functions and show delivery history in My Cards;
  • investigate abuse or delivery problems; and
  • comply with legal obligations.

If you provide inaccurate recipient details, this may result in failed or incorrect delivery.

7. Cookies and Advertising

Cre8tive Hands operates as a free, ad-supported service.

We currently use Google AdSense on selected public pages to serve and measure adverts. Some older placeholder areas may still appear while we finish rebuilding placements across the site.

This means we may use cookies, pixels, scripts, or similar technologies for purposes such as:

  • essential website functionality;
  • security and fraud prevention;
  • analytics and performance measurement;
  • understanding how users interact with the Service; and
  • supporting, serving, measuring, or limiting advertising.

Some of these technologies may be set by us, and some may be set by third-party providers that help us operate analytics, hosting, site functionality, or advertising.

Where required by law, we will request consent before using non-essential cookies or similar technologies. Essential technologies that are necessary for the basic operation or security of the Service may be used without consent where permitted.

You can usually manage cookies through your browser settings and, where available, through our cookie controls.

8. Sharing Your Information

We may share personal information with trusted third parties only where reasonably necessary to run the Service, including:

  • hosting, infrastructure, CDN, and site-security providers;
  • email delivery or communication providers (including Resend);
  • analytics providers (including Google Analytics);
  • security, moderation, and fraud prevention providers;
  • technical support providers; and
  • professional advisers, where necessary.

We may also disclose information:

  • if required by law;
  • in response to lawful requests from courts, regulators, or law enforcement;
  • to establish, exercise, or defend legal claims; or
  • to protect the rights, property, safety, users, recipients, or security of Cre8tive Hands.

We do not share more information than is reasonably necessary for the relevant purpose.

9. Browser Storage (My Cards)

The My Cards dashboard uses your browser’s local storage to save access or recovery codes and a local cache of card history on your own device. This means:

  • clearing your browser data, cache, or “site data” can remove your local My Cards history;
  • switching to a different browser or device means your My Cards history will not carry over; and
  • using private or incognito browsing means nothing is saved between sessions.

Cards themselves — the server-side records behind those shareable links — remain on our servers unless you delete them, move them through the 7-day Trash period, or we remove them for legal, abuse, security, or operational reasons.

If you want to recover cards on another browser or device, keep the access code shown when you create them and re-enter it in My Cards.

10. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain security, resolve disputes, enforce our Terms, and comply with legal obligations.

Unless we need to keep information longer for legal, security, or operational reasons, our general retention approach is as follows:

  • Cards you create remain on our servers until you delete them, unless we need to remove them for legal, abuse, security, or operational reasons.
  • If you move a card to Trash in My Cards, we keep it for up to 7 days so you can restore it before permanent deletion.
  • Recipient email addresses and delivery details remain with the related card record for as long as that card record is kept, so we can support sending, scheduling, My Cards history, and troubleshooting.
  • Browser-based My Cards data lasts until you clear site data, use private browsing, or your browser removes it.
  • Technical, security, and support records may be kept for a reasonable period where needed for troubleshooting, abuse prevention, or compliance.

We may delete or anonymise information when it is no longer needed.

11. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no online system can be guaranteed to be completely secure. You use the Service at your own risk.

12. Advertising

Cre8tive Hands is a free service supported by advertising. We currently use Google AdSense on selected public pages, and some placeholder areas may still appear where ads have not yet been rebuilt.

Placeholder-only areas do not load a third-party ad network until an active ad slot is added. We do not sell your personal data to advertisers.

13. International Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where this happens, we will take reasonable steps to ensure that personal information is protected using appropriate safeguards required by applicable data protection law.

14. Your Data Protection Rights

Depending on your location and the circumstances, you may have the right to:

  • request access to your personal information;
  • request correction of inaccurate information;
  • request deletion of your information;
  • request restriction of processing;
  • object to certain types of processing;
  • request transfer of certain information in a portable format; and
  • withdraw consent where we rely on consent.

These rights are not absolute and may be subject to legal exceptions.

To exercise your rights, please contact us through our website contact page.

You also have the right to complain to the UK Information Commissioner’s Office if you believe your personal information has been handled unlawfully or unfairly.

15. Children’s Privacy

The Service is not intended for use by children without appropriate supervision where required by law.

If we become aware that personal information has been provided inappropriately in relation to a child, we may take steps to delete or restrict that information where appropriate.

16. Third-Party Links and Services

The Service may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices of third parties.

If you leave our Service or interact with a third-party service, their own terms and privacy policies will apply.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we may update the “Last updated” date and, where appropriate, provide notice through the website or through the Service.

Your continued use of the Service after the updated Privacy Policy takes effect means you acknowledge the revised version.

18. Contact Us

If you have questions about this Privacy Policy, your personal information, or your data protection rights, please contact us through our website contact page.

If you are not satisfied with how we handle your concern, you may complain to the UK Information Commissioner’s Office.

← Back to homepage

Feedback