Privacy Policy & Data Protection

At CreatorStudio, we are committed to protecting your privacy and personal data. This policy explains how we collect, use, and safeguard your information, particularly regarding our advertising partnerships with Google, Facebook, and Microsoft platforms for delivering personalized educational experiences.

We believe in transparency about our data practices and your rights under privacy laws including GDPR, CCPA, and other applicable regulations. This policy provides comprehensive information about our advertising data practices and your control options.

Last updated: August 13, 2025 | Effective from: July 20, 2025

Data Collection by Advertising Platforms

We partner with leading advertising platforms to deliver relevant content and measure the effectiveness of our educational programs. Here's exactly what data each platform collects and how it's used.

Google Services Data Collection

Google Analytics Data Points:

  • Page views, session duration, and bounce rates
  • Device type, browser, operating system details
  • Geographic location (country, region, city)
  • Referring websites and traffic sources
  • User interaction patterns and content preferences

Google Ads Tracking:

  • Conversion data from form submissions and inquiries
  • Remarketing audiences based on website behavior
  • Interest categories for targeted advertising
  • Cross-device user identification for unified experiences
  • Retention: 26 months for Analytics, varies for Ads

Facebook/Meta Data Collection

Facebook Pixel Tracking:

  • Page views and website navigation patterns
  • Button clicks, form interactions, and user engagement
  • Device identifiers and browser fingerprinting
  • Time spent on specific pages and content
  • Purchase intent signals and conversion events

Custom Audiences & Targeting:

  • Website visitor segmentation for remarketing
  • Lookalike audience creation based on existing customers
  • Cross-platform tracking across Meta family apps
  • Behavioral advertising optimization and A/B testing
  • Retention: 180 days for remarketing data

Microsoft/Bing Data Collection

UET Tag Tracking:

  • Conversion tracking for Microsoft Advertising campaigns
  • Goal completion monitoring and user actions
  • User journey mapping across website sessions
  • Search query data and keyword performance
  • Demographic information and user interests

Microsoft Account Integration:

  • Remarketing list creation for targeted advertising
  • Cross-service data linking within Microsoft ecosystem
  • Search personalization and ad relevancy optimization
  • Engagement metrics and interaction analytics
  • Retention: Up to 390 days maximum

How We Use Your Data & Legal Basis

We process your personal data for specific purposes and always under valid legal grounds. Understanding why and how we use your information is fundamental to maintaining trust.

Purposes of Processing

Service Delivery & Contract Fulfillment

Providing our content creator courses, managing enrollments, processing payments, and delivering educational materials.

Marketing & Advertising Optimization

Creating targeted advertising campaigns, measuring campaign effectiveness, and personalizing content recommendations.

Analytics & Performance Measurement

Understanding website usage patterns, optimizing user experience, and improving our educational programs.

Security & Fraud Prevention

Protecting against unauthorized access, preventing fraudulent activities, and ensuring platform security.

Legal Compliance & Obligations

Meeting regulatory requirements, responding to legal requests, and maintaining required business records.

Legal Basis for Processing

Consent

For marketing communications, advertising cookies, and optional data processing activities.

Legitimate Interest

For analytics, security measures, fraud prevention, and improving our services.

Contract Performance

For delivering our courses, processing enrollments, and fulfilling our service agreements.

Legal Obligation

For tax compliance, regulatory reporting, and responding to lawful government requests.

Vital Interests

Only in emergency situations to protect someone's life or prevent serious harm.

Third-Party Data Sharing & Transfers

We share your data with trusted partners to deliver our services and advertising. All sharing is governed by strict agreements and compliance with international data transfer requirements.

Advertising Partners

Google LLC

Analytics, Ads, Tag Manager, and YouTube advertising services for campaign optimization and user insights.

Meta Platforms Inc.

Facebook and Instagram advertising through Pixel, Conversions API, and audience management tools.

Microsoft Corporation

Bing Ads, Clarity analytics, and Microsoft Advertising network for search and display campaigns.

Programmatic Networks

Retargeting platforms and demand-side platforms for broader audience reach and campaign optimization.

Service Providers

Cloud Infrastructure

Web hosting providers, cloud storage services, and content delivery networks for platform operation.

Communication Services

Email service providers, messaging platforms, and customer support tools for student communication.

Payment Processing

Payment gateways and financial service providers for secure transaction processing and billing.

Analytics & Optimization

User experience analytics, A/B testing platforms, and performance monitoring services.

International Data Transfers

EU-US Data Privacy Framework

Certified participants for lawful data transfers

Standard Contractual Clauses

EU Commission approved safeguards

Adequacy Decisions

Countries with adequate protection levels

Your Rights & How to Exercise Them

You have comprehensive rights regarding your personal data under GDPR, CCPA, and other privacy laws. Here's how to exercise each right and what to expect.

GDPR Rights (EU/UK Residents)

Right to Access

Request a copy of your personal data and information about how it's processed. Response within 30 days.

Right to Rectification

Correct inaccurate or incomplete personal data. Updates implemented immediately upon verification.

Right to Erasure

Request deletion of your personal data when no longer necessary or consent is withdrawn.

Right to Restrict Processing

Limit how we process your data while disputes are resolved or accuracy is verified.

Right to Data Portability

Receive your data in machine-readable format for transfer to another service provider.

Right to Object

Opt-out of marketing, profiling, and processing based on legitimate interest.

Right to Withdraw Consent

Revoke previously given consent at any time through our website or privacy controls.

CCPA Rights (California Residents)

Right to Know

Detailed information about what personal information is collected, used, and shared over the past 12 months.

Right to Delete

Request deletion of personal information we've collected from you, subject to certain exceptions.

Right to Opt-Out

Opt-out of the sale or sharing of personal information for targeted advertising purposes.

Right to Non-Discrimination

Equal service and pricing regardless of exercising your privacy rights.

Right to Correct

Request correction of inaccurate personal information maintained about you.

Right to Limit Use

Limit the use and disclosure of sensitive personal information to necessary purposes only.

Platform-Specific Privacy Controls

How to Exercise Your Rights

Website Contact Form

Use our contact form for data subject requests. Include specific details about your request and preferred response method.

Platform Privacy Settings

Access direct privacy controls on Google, Facebook, and Microsoft platforms for immediate changes.

Browser Controls

Use browser privacy settings, Do Not Track, and cookie management for immediate effect.

Response Timeframe

We respond to privacy requests within 30 days (GDPR) or 45 days (CCPA), with possible extensions if complex.

Data Retention & Deletion Procedures

We retain personal data only as long as necessary for the purposes collected and in compliance with legal requirements. Here are our specific retention periods and deletion procedures.

Retention Periods

Contact Form Data

Duration: 3 years from last interaction
Purpose: Marketing follow-up and service delivery

Analytics Data (Google)

Duration: 26 months (Google Analytics default)
Purpose: Website optimization and user experience

Marketing Data

Duration: Until consent withdrawn or 2 years inactive
Purpose: Targeted advertising and campaign optimization

Legal Records

Duration: As required by law (typically 5-7 years)
Purpose: Tax compliance and legal obligations

Security Logs

Duration: 90 days
Purpose: Security monitoring and fraud prevention

Deletion Procedures

Automatic Deletion

Data is automatically removed when retention periods expire through automated systems and scheduled cleanups.

Manual Deletion Upon Request

We process deletion requests within 30 days, coordinating with third-party platforms where necessary.

Anonymization Alternative

Where deletion isn't possible due to legal requirements, we anonymize data to remove personal identifiers.

Backup Systems Purging

Backup systems are purged within 30-90 days after primary deletion to ensure complete data removal.

Third-Party Coordination

We coordinate with advertising platforms to ensure deletion requests are processed across all connected systems.

Exceptions to Deletion

  • • Legal obligation to retain (tax, employment, regulatory)
  • • Legitimate business purposes (fraud prevention, security)
  • • Freedom of expression and information rights
  • • Public interest, scientific, or historical research
  • • Defense of legal claims and litigation