Privacy Policy

Who we are

Cre8ive Lemon (“we”, “us”) creates and sells digital products and provides design, marketing and coaching services. The business responsible for your personal data (the data controller) is CRE8IVE LEMON GROUP LLC. The company is a limited liability company registered in Wyoming, United States. Mailing address: 440 N Barranca Ave #3696, Covina, CA 91723, United States. Email: support@cre8ivelemon.com.

For privacy questions or requests, email support@cre8ivelemon.com.

Personal data we collect

Purchases: Your contact and billing details, the products or services you bought, the price, purchase date and order reference. You enter payment details with the payment provider handling your order.
Accounts (optional): Your name, email address and account credentials if you create an account to view your purchases.
Messages and service requests: Your name, contact details and the information you provide when you contact support or chat with us, request a project, or work with us on design, marketing or coaching. This may include project briefs, files you share, and notes needed to provide the service.
Newsletter: Your email address if you subscribe.
Site usage: Information about how you use our website, as described in our Cookie Policy.

Why we use your data

To provide products and services you request: We process orders, provide download access, manage accounts, deliver design, marketing and coaching services, and respond to related support requests. Our legal basis is performing a contract with you or taking steps you request before entering one.
To meet legal obligations: We keep records required for tax, accounting and other applicable legal purposes.
To send the newsletter: We use your email address if you subscribe. Our legal basis is your consent, which you can withdraw using the unsubscribe link in each newsletter.
To respond to general enquiries, prevent fraud and maintain our website: Our legal basis is our legitimate interest in operating a secure business and responding to people who contact us. Where consent is required for optional cookies or similar technologies, we ask for it separately.

We do not sell your personal information or use it for automated decisions that have legal or similarly significant effects on you.

Service providers

We share personal data with providers as needed to run the business:

Payments: Shopify Payments (for cards, Apple Pay, Google Pay and Shop Pay) or PayPal handles your payment, depending on the method you choose. The provider receives the information needed to process the payment and applies its own privacy terms where it acts independently.
Store, checkout and email: Shopify hosts our online store, checkout and customer accounts, and sends order emails and, if you subscribe, our newsletter. It receives the information needed for those services.
Downloads: Filemonk stores our downloadable files and delivers your download links on the order page and by email. It receives your order details and email address.
Customer account pages: Cosmo provides the account pages where you can view your orders and downloads.
Chat: Shopify Inbox handles the messages you send through the chat on our website.
Reviews: Judge.me collects and shows product reviews, including the name you choose to show with your review.
Wishlist: WishlistSuite saves the products you add to your wishlist.
Analytics: Google Analytics receives information about how you use our website, only if you allow analytics and advertising cookies.
Advertising: Meta (Facebook and Instagram) and Google Ads receive information about your visits and purchases through the Meta Pixel, Meta Conversions API and Google tag, only if you allow analytics and advertising cookies, so we can measure and improve our ads.

We may also share information when required by law or when necessary to establish, exercise or defend legal claims.

International processing

We operate in the United States. Our service providers may process personal data in other countries. When the GDPR requires a safeguard for a transfer of personal data outside the EEA, we use an applicable lawful transfer mechanism. Details of the mechanisms used for your data are available by emailing support@cre8ivelemon.com.

How long we keep data

Orders, invoices and related tax records: For the period required by applicable tax and accounting law. Business and tax records are generally kept for at least seven years; records covered by the EU One Stop Shop scheme may need to be kept for ten years.
Accounts: Until you delete your account or ask us to delete it, except for information we must retain for another lawful reason.
Support, project and coaching communications: For up to two years after the conversation or engagement ends, unless a longer period is needed for an order, legal obligation or claim.
Newsletter subscriptions: Until you unsubscribe, subject to keeping a limited record where needed to respect your choice.

Your privacy choices in the United States

US state privacy rights vary and depend on the law that applies to the business and your information. Regardless of whether a particular state law applies, you can email us to ask what personal information we hold about you, request a copy, or ask us to correct or delete it. Some information may need to be retained for legal reasons. You can unsubscribe from marketing emails at any time.

We do not sell your personal information. If you allow analytics and advertising cookies, we share limited information about your visits and purchases with Meta and Google to measure and show our ads; you can withdraw that choice at any time on our Cookie Policy page. Email support@cre8ivelemon.com to make a request. We aim to respond within 30 days and will not treat you differently for making one.

If you are in the EU or EEA, the GDPR may apply when we offer our products to you. You may have the right to:

access the personal data we hold about you and receive a copy;
correct inaccurate data;
request deletion, subject to legal exceptions such as required financial records;
restrict or object to certain uses of your data;
receive certain data in a portable format; and
withdraw consent at any time where we rely on it, such as for the newsletter.

Email support@cre8ivelemon.com to exercise your rights. We normally respond within one month. If a request is complex and we need more time, we will tell you within that month. You can also complain to the data protection authority in your country.

Changes to this policy

If we change this policy, we update the date at the top of the page. For important changes, we also email customers with an account.