Privacy Policy

99creative.co is operated by GT Media Ltd, trading as 99 Creative ("we", "us", "our"). We are the data controller for the personal information described in this policy. Our full company details are at the end of this page. Contact: info@99creative.co.

This policy explains what we collect, why, who we share it with, and your rights, whether you're a visitor, a prospective customer, or a client.

1. What we collect

Information you give us. Your name and email when you purchase or contact us; your practice details when you complete onboarding — practice name, business type, website, logo, Instagram username, and any design preferences you share.

Payment information. Payments are processed by Stripe. Your card details go directly to Stripe; we never see or store full card numbers. We keep records of transactions (amount, date, product) for accounting.

Social account connections. To publish on your behalf you connect your Facebook Page and Instagram through Meta's official integration. We receive secure access tokens — never your passwords, which you only ever enter on Meta's own pages. You can revoke this access at any time from your Facebook settings.

Technical and usage information. When you visit our sites: IP address, device and browser type, pages viewed, referral source and campaign parameters (e.g. UTM tags), collected via the cookies and similar technologies described in our Cookie Policy.

Prospective-customer information. If we contact your business, we hold business contact details (name, business email, practice name, website, publicly visible social presence) obtained from public sources such as your website or business listings.

2. How we use it

• To provide the service: creating your content, sending samples for approval, scheduling and publishing to your connected pages.
• To manage your account: billing, renewals, receipts, support.
• To communicate with you about your service (onboarding steps, approvals, updates).
• To contact prospective business customers about our services.
• To measure and improve our website and marketing (analytics, campaign attribution).
• To comply with legal obligations (tax, accounting) and to establish or defend legal claims.

3. Lawful bases

Under UK GDPR we rely on: performance of a contract (delivering the service you've bought); legitimate interests (running and improving our business, business-to-business marketing, fraud prevention); consent where required (non-essential cookies and similar technologies); and legal obligation (tax and accounting records).

4. Analytics and advertising tools

We use Google Tag Manager to manage measurement tags; Google Analytics 4 for site analytics; Microsoft Clarity to understand how visitors use the site; and Meta (Facebook) Pixel together with Meta's Conversions API — sent server-side through a secure first-party connection — to measure advertising and campaign performance. Details, durations, and controls are in our Cookie Policy.

5. Who we share information with

We share personal information only with service providers who process it on our behalf, under contract:

• Stripe — payment processing
• HighLevel (LeadConnector) — CRM, forms, email, and order processing
• Meta Platforms — publishing to your connected pages; advertising measurement
• Google — analytics, tag management, and cloud hosting
• Microsoft — website usage analytics (Clarity)
• Our content scheduling/publishing provider, and email delivery providers

We do not sell personal information. We may disclose information where required by law.

6. International transfers

We are UK-based; some providers process data in the United States or elsewhere. Where personal information leaves the UK, we rely on appropriate safeguards such as the UK–US Data Bridge, adequacy regulations, or the UK International Data Transfer Agreement / standard contractual clauses.

7. Retention

Client account and service records are kept for the duration of your service and then as required for legal and tax purposes (generally six years). Prospective-customer records are kept until you ask us to stop contacting you or they are no longer needed. Analytics data is retained per the tool defaults described in the Cookie Policy.

8. Your rights

You have the right to access, correct, delete, or receive a copy of your personal information; to object to or restrict processing (including objecting to direct marketing at any time); and to withdraw consent where processing is based on consent. Contact info@99creative.co to exercise any right. You can also complain to the Information Commissioner's Office (ico.org.uk). If you are a resident of a US state with privacy legislation, you may have equivalent rights under your state's law — contact us and we will honour them.

9. Security

Access tokens, payment processing, and personal information are handled over encrypted connections and restricted to what's needed to provide the service. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.

10. Children

Our services are for businesses and are not directed at anyone under 18.

11. Changes

We'll post any changes to this policy on this page with an updated effective date.

12. Contact & company details

GT Media Ltd, trading as 99 Creative · Registered in England and Wales, company number 10512205 · VAT GB 509436582 · info@99creative.co