Privacy Policy

Last updated: 25th April 2026

1. Introduction

This Privacy Policy explains how CreateFlow Online Ltd (“CreateFlow”, “we”, “us” or “our”) collects, uses, stores, shares, and protects personal information when you visit our website, purchase our products, use our services, join our email list, interact with us, or otherwise provide personal information to us.

We are committed to protecting your privacy and handling your personal information lawfully, fairly, and transparently.

2. Who we are

CreateFlow Online Ltd is the controller of your personal information for the purposes of UK data protection law.

Company: CreateFlow Online Ltd
Website: www.createflow.online
Email: hello@createflow.online
Registered company number: 16833030
Registered office: 124-128 City Road, London, England, EC1V 2NX

3. Personal information we collect

We may collect and process the following types of personal information:

name;
email address;
phone number;
billing address;
payment and transaction information;
business name and business details;
account login details;
course, membership, SaaS, or product access information;
information you provide through forms, surveys, quizzes, checkout pages, applications, or support requests;
messages, emails, call notes, feedback, testimonials, reviews, and communications with us;
files, documents, images, or other content you upload or provide;
technical information such as IP address, browser type, device information, operating system, pages visited, referral source, and website usage data;
marketing preferences and consent records; and
any other information you choose to provide to us.

We do not usually collect special category data, such as health information, religious beliefs, political opinions, or biometric data. Please do not provide this type of information unless specifically requested and necessary.

4. How we collect your information

We may collect personal information when you:

visit our website;
create an account;
purchase a product or service;
subscribe to our newsletter;
download a free resource;
complete a form, quiz, survey, or application;
join a course, programme, community, or membership;
use our SaaS products, tools, templates, or services;
book or attend coaching calls, workshops, webinars, or events;
contact us by email, social media, chat, form, or other method;
provide a testimonial, review, comment, or feedback;
interact with our ads, emails, affiliate links, or social media content.

We may also receive information from third-party platforms we use to operate our business, such as payment processors, email marketing providers, course platforms, CRM systems, analytics tools, advertising platforms, scheduling tools, community platforms, automation tools, affiliate platforms, and SaaS providers.

5. How we use your personal information

We may use your personal information to:

provide and deliver products, services, courses, coaching, SaaS access, templates, tools, and resources;
process orders, payments, subscriptions, refunds, and invoices;
create and manage accounts;
provide customer support;
respond to enquiries and messages;
send transactional emails, service updates, login information, password resets, and important notices;
send newsletters, offers, launches, promotions, and marketing emails where permitted;
personalise your experience;
improve our website, products, services, content, and customer experience;
host webinars, calls, workshops, and online events;
manage communities, memberships, and user participation;
monitor usage, performance, and security;
detect fraud, abuse, misuse, or technical issues;
comply with legal, tax, accounting, and regulatory obligations;
protect our rights, users, business, and systems;
manage affiliate relationships and referrals; and
measure advertising, marketing, and website performance.

6. Lawful bases for processing

We rely on one or more lawful bases under UK data protection law, depending on the purpose of processing:

Contract: where processing is necessary to provide products, services, accounts, support, or access you have requested or purchased.
Consent: where you have given consent, such as for certain marketing communications or non-essential cookies.
Legitimate interests: where we have a business interest in operating, improving, protecting, and marketing our business, provided your rights do not override those interests.
Legal obligation: where processing is required for legal, tax, accounting, regulatory, or compliance reasons.

7. Marketing communications

We may send you marketing emails if you have subscribed, requested information, downloaded a resource, purchased from us, or otherwise given permission where required.

You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.

Even if you unsubscribe from marketing emails, we may still send you essential service, account, purchase, legal, or transactional emails.

8. Cookies and tracking technologies

We use cookies and similar technologies to operate our website, remember preferences, analyse website usage, improve our services, and support marketing or advertising activities.

Non-essential cookies, such as analytics, advertising, remarketing, affiliate tracking, or social media cookies, should only be used with your consent where required by law.

For more information, please read our Cookie Policy.

9. Payments

Payments may be processed by third-party payment processors. We may receive transaction details such as your name, email address, billing address, purchase details, payment status, and limited payment information.

We do not usually store full credit or debit card numbers ourselves.

10. Sharing your personal information

We may share your personal information with trusted third parties where necessary to operate our business and provide our services, including:

payment processors;
course and membership platforms;
SaaS and hosting providers;
email marketing providers;
CRM and automation providers;
analytics providers;
advertising and retargeting platforms;
affiliate tracking platforms;
scheduling and webinar platforms;
customer support tools;
accountants, lawyers, insurers, and professional advisers;
regulators, tax authorities, courts, or law enforcement where required by law.

We only share the information reasonably necessary for the relevant purpose.

11. International transfers

Some third-party providers may process or store personal information outside the United Kingdom.

Where this happens, we take reasonable steps to ensure appropriate safeguards are in place, such as adequacy regulations, international data transfer agreements, standard contractual clauses, or other lawful transfer mechanisms.

12. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain records, resolve disputes, comply with legal obligations, and protect our rights.

Typical retention periods may include:

customer and transaction records: up to 6 years for tax and accounting purposes;
account information: for as long as your account remains active and a reasonable period after closure;
marketing records: until you unsubscribe or object, plus a record of your unsubscribe request;
support messages: for as long as reasonably necessary to handle enquiries and maintain business records;
legal or dispute records: for as long as necessary to protect our legal rights.

13. Data security

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. You are responsible for keeping your account login details confidential.

14. Your rights

Under UK data protection law, you may have the right to:

access the personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your information in certain circumstances;
object to certain processing;
restrict certain processing;
request data portability;
withdraw consent where processing is based on consent;
complain to the Information Commissioner’s Office.

To exercise your rights, please contact us using the details below.

15. Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office at www.ico.org.uk.

16. Children’s privacy

Our paid products and services are not intended for children. You must be at least 18 to purchase or use our paid coaching, SaaS, business training, memberships, or services.

We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

17. Third-party links