Privacy Policy

Last update:
February 22, 2026

This Privacy Policy explains how The Creative Clan (“we”, “us”, “our”) collects, uses, shares and protects personal information when you visit our website, contact us, or use our services.

We operate the “The Creative Clan” brand through two separate legal entities for contracting and invoicing:

  • The Creative Clan Group Ltd (“TCC UK”)
    Company No. 13928917
    Registered Office: 3 Bakehouse Mews, Hampton, England, TW12 2NL, United Kingdom
  • TCC Group (Pty) Ltd (“TCC SA”)
    Reg No. 2020/263117/07
    Registered Office: Unit 401, 20 Lower Burg St, Cape Town City Centre, Cape Town, 8000, South Africa

If you contract with TCC UK, TCC UK is generally responsible for your personal information for that relationship. If you contract with TCC SA, TCC SA is generally responsible for your personal information for that relationship.

1) Who is responsible for your personal information

1.1 Controllers / responsible parties

For data protection purposes, the “controller” (UK/EU terminology) / “responsible party” (South Africa terminology) is:

  • TCC UK for UK, EU/EEA and most international client work handled and invoiced by TCC UK
  • TCC SA for South Africa and the client work handled and invoiced by TCC SA

1.2 Website management

Our website is managed day-to-day by TCC UK. Where personal information is collected through our website (e.g., contact forms), TCC UK is typically the controller unless we tell you otherwise.

1.3 Contact

Email: info@creativeclan.net

1.4 EU/EEA representative (future targeting)

At the time of writing, our services are primarily provided to business clients. If we start actively offering services to, or targeting, individuals in the EU/EEA (for example through EU-targeted advertising, sign-ups, or consumer offerings) we may be required to appoint an EU representative under GDPR Article 27, and we will update this Policy with the representative’s details.

2) What personal information we collect

We may collect:

2.1 Information you provide

  • Name, business email, phone number, job title, company name
  • Messages and enquiry details (website forms, email, phone, social channels)
  • Project information (briefs, feedback, approvals, brand assets, deliverables, communications)
  • Billing and admin details (invoice contact, billing address, PO references, VAT/tax details where applicable)

2.2 Information collected automatically

  • IP address, device type, browser type, operating system
  • Website usage data (pages viewed, clicks, time on page, referral source)

2.3 Media and production information

As a creative and production business, we may process information contained within content you provide or that we capture/produce (e.g., footage, photos, interviews, audio). This may include identifiable individuals (faces, voices, names, locations) depending on the project.

3) How we use your personal information

We use personal information to:

  • Respond to enquiries and communicate with you
  • Provide our services (creative, production, post, marketing deliverables)
  • Manage projects (planning, collaboration, approvals, quality control)
  • Handle contracts, invoicing, payments and accounting
  • Improve our website and services (analytics and performance)
  • Maintain security, prevent fraud and protect our systems
  • Comply with legal obligations and handle disputes
  • Send marketing communications where permitted (see Section 6)

4) Legal bases (UK GDPR / EU GDPR)

Where UK GDPR / EU GDPR applies, we process personal information on one or more of these bases:

  • Contract (to deliver services you request / have agreed)
  • Legitimate interests (running and growing our business, responding to enquiries, improving services, basic B2B marketing)
  • Consent (e.g., certain marketing and non-essential cookies)
  • Legal obligation (e.g., accounting/tax record keeping)

We will stop marketing if you opt out.

5) Who we share personal information with

We may share personal information:

5.1 Within our group

Between TCC UK and TCC SA where necessary for resourcing, service delivery, finance, internal administration and support.

5.2 With service providers (processors/operators)

We use third parties to help us operate and deliver services. Depending on your interaction with us, this may include:

  • Website hosting: Webflow
  • Email and business tools: Microsoft
  • Forms: Webflow Forms, Typeform
  • Analytics / measurement: Google Analytics (GA4), Meta Pixel, Hotjar
  • Email marketing / outreach / CRM: Mailchimp, HubSpot, Apollo
  • File review / collaboration: Frame.io
  • Storage/collaboration: SharePoint, OneDrive
  • Accounting: Xero
  • Internal storage (NAS): privately managed storage systems

We require appropriate confidentiality and security from suppliers and, where they act as processors/operators, we ensure contractual protections are in place.

5.3 Legal requirements

We may share information where required by law, regulation, court order, or to protect our rights, clients, or others.

6) Marketing communications

We may send marketing communications about our services (e.g., updates, work, offers, company news) where allowed by law.

  • You can opt out at any time using the unsubscribe link (where provided) or by emailing info@creativeclan.net.

We do not sell personal information.

7) International transfers (UK, EU/EEA, South Africa and other countries)

Because we operate across the UK, EU/EEA, and South Africa, and because some suppliers process data globally, your personal information may be transferred to and processed in other countries (including the United States).

Where required under UK GDPR, we use appropriate safeguards for restricted transfers, such as the UK IDTA and/or the UK Addendum to the EU Standard Contractual Clauses, and we assess transfer risk where appropriate.

Where POPIA applies, we only transfer personal information outside South Africa in line with POPIA Section 72 requirements (e.g., adequate protection and/or appropriate contractual protections).

We can provide more detail about safeguards on request.

8) How long we keep personal information (retention)

We keep personal information only as long as needed for the purposes in this policy, including legal, accounting and dispute requirements.

Typical retention periods:

  • General enquiries (no contract): up to 24 months from last meaningful contact
  • Client projects (files & communications): typically 2–7 years after project completion (depending on project type, legal needs and dispute risk)
  • Hot storage: project files are typically kept on active (“hot”) storage for around 6 months, then archived
  • Archived storage: we archive project files on our internal storage systems (NAS). If a client requests retrieval/sharing of archived material, we may charge a reasonable retrieval/admin fee (and this may also be covered in your contract/terms)
  • Finance records (contracts, invoices, accounting): typically 6 years (or longer where legally required)

If you request deletion, we’ll consider the request against any legal obligations or legitimate needs to retain certain records.

9) Cookies and similar technologies

We use cookies and similar technologies for essential site functionality and (where enabled) analytics and advertising measurement (e.g., GA4, Meta Pixel, Hotjar).

Under UK rules, non-essential cookies require consent and should not be set until a user has made a clear choice.

9.1 Your choices

  • You can manage cookie preferences via our cookie banner/settings tool (where available)
  • You can also control cookies through your browser settings

9.2 Note on consent tooling

We currently use Webflow’s standard cookie/banner approach. Some setups require additional configuration or a dedicated consent platform to ensure non-essential scripts are blocked until consent is recorded (particularly for analytics/advertising tools).

Cookie Policy: [link to Cookie Policy page]
(Recommended: publish a dedicated Cookie Policy and link it from the footer and banner.)

10) Your rights

10.1 UK GDPR / EU GDPR rights (where applicable)

You may have rights to:

  • access your data
  • correct inaccurate data
  • request deletion (in certain circumstances)
  • restrict or object to processing (especially marketing)
  • data portability (in certain circumstances)
  • withdraw consent (where consent is the basis)

10.2 POPIA rights (where applicable)

You may have rights to:

  • access your information
  • request correction or deletion (where appropriate)
  • object to processing in certain circumstances
  • withdraw consent (where consent is the basis)

To exercise rights, email: info@creativeclan.net

11) Complaints

We’d appreciate the chance to resolve any concern first — please contact us at info@creativeclan.net.

You may also complain to:

  • Information Commissioner's Office (UK)
  • Information Regulator (South Africa) (South Africa)

12) Security

We take reasonable technical and organisational steps to protect personal information, including access controls, secure storage, and limiting access to those who need it for work.

No system is 100% secure, but we work to reduce risk and respond appropriately to security incidents.

13) Children

Our services are intended for businesses and general audiences and are not directed at children. We do not knowingly collect personal information from children under 13.

14) Third-party links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their privacy notices.

15) Changes to this policy

We may update this Privacy Policy from time to time. We will post the latest version on our website and update the “Last updated” date.

16) Contact details

Email: info@creativeclan.net

TCC UK: The Creative Clan Group Ltd, 3 Bakehouse Mews, Hampton, England, TW12 2NL, UK
TCC SA: TCC Group (Pty) Ltd, Unit 401, 20 Lower Burg St, Cape Town City Centre, Cape Town, 8000, South Africa