Privacy Policy

1. Who We Are

New Horizon Creation is a creative agency based in the United Kingdom. We are committed to protecting your privacy and ensuring your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

We may collect and process the following types of personal information:

2.1 Information You Provide Directly

• Contact information (name, email, phone number, address)
• Project details and business information
• Payment and billing information
• Communication preferences
• Feedback and testimonials

2.2 Information Collected Automatically

• Website usage data (pages visited, time spent, browser type)
• IP address and device information
• Cookies and similar tracking technologies
• Marketing campaign engagement data

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing and delivering our creative services
• Communicating about projects and services
• Processing payments and managing accounts
• Improving our website and services
• Marketing and promotional activities (with consent)
• Legal compliance and fraud prevention
• Responding to inquiries and customer support

4. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contract: To fulfill our contractual obligations for services
• Legitimate Interest: For business operations, service improvement, and fraud prevention
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with legal requirements

5. Information Sharing

We do not sell your personal information. We may share your data with:

• Trusted service providers (hosting, payment processing, analytics)
• Professional advisors (legal, accounting, insurance)
• Law enforcement when legally required
• Business partners with your explicit consent

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments.

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. Project-related data is typically retained for 7 years for tax and legal compliance. Marketing data is retained until you withdraw consent or we determine it's no longer needed.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for marketing or optional processing

9. Cookies and Tracking

Our website uses cookies to:

• Ensure proper website functionality
• Analyze website usage and performance
• Personalize your experience
• Support marketing activities

9.1 Types of Cookies We Use

You can control cookie preferences through your browser settings or our cookie consent manager. Some website features may not function properly if cookies are disabled.

10. Third-Party Services

We use trusted third-party services that may process your data:

• Google Analytics (website analytics)
• Supabase (database and authentication)
• Payment processors (secure payment handling)
• Email service providers (communications)
• Cloud storage providers (secure file storage)

11. International Data Transfers

Some of our service providers are located outside the UK/EU. We ensure appropriate safeguards are in place for international data transfers, including adequacy decisions, Standard Contractual Clauses, or other approved mechanisms.

12. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through our website or direct communication. Your continued use of our services constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions, to exercise your rights, or to file a complaint:

15. Regulatory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the relevant supervisory authority: