Privacy Policy

Xander Kreativ ("Xander Kreativ", "we", "us", or "our") provides website design, development, automation, visibility, and conversion-improvement services. This Privacy Policy explains how information is handled when you visit xanderkreativ.site or contact us through the website.

Our current privacy contact is xander@xanderkreativ.site. Our legal business name, registered address, and governing privacy jurisdiction should be confirmed before publication.

When you use the contact form, the website asks for your first name, last name, email address, phone number, selected service, and project details. The server also creates an enquiry record with a unique identifier, submission source, status, and created/updated timestamps. Internal administration may add notes and payment-status information to an enquiry record.

We may also receive technical information needed to operate the site, such as your IP address, browser, device, and request logs, depending on the hosting and infrastructure used in a particular deployment. The website does not currently expose an account-registration area or a user profile system.

We use submitted information to review and respond to project enquiries, understand the services requested, communicate about a potential project, maintain enquiry records, administer the business relationship, provide support where agreed, protect the website, and measure website performance when analytics are enabled. We do not use the contact form to create an account for you.

The codebase supports the following providers. Whether a provider processes information depends on the deployment configuration:

• Supabase: may store lead/enquiry records when Supabase storage is configured.
• Resend: may process enquiry information to deliver notification emails to Xander Kreativ and, if enabled, an acknowledgement email to the person who submitted the form.
• Google Analytics: loads only when a real measurement ID is configured and analytics are enabled. It is used for page views, selected engagement events, and Web Vitals.
• Google Fonts: the stylesheet references fonts hosted by Google Fonts. Your browser may contact Google to retrieve those font resources.
• WhatsApp: the site links to WhatsApp for users who choose to start a conversation. Any information you provide there is handled under WhatsApp's terms and privacy practices.

We do not claim that every provider listed above is active in every deployment. Provider settings should be checked before launch.

Essential browser storage is used to remember the cookie consent choice and the consent policy version. It is always enabled because it supports the website's privacy controls. Optional analytics is disabled by default and is not loaded until you explicitly enable it through the banner or Cookie Settings. If enabled, Google Analytics may set or read analytics cookies and receive page-view, selected engagement, and Web Vitals events. You can reject analytics or withdraw consent at any time through Cookie Settings; the site then stops sending further analytics events, removes analytics cookies where possible, and prevents the analytics script from being used again until you opt in. The site does not currently implement marketing or advertising cookies. Browser, hosting, security, or provider-level storage may still be used by infrastructure serving the website.

Enquiry records are stored either in the configured Supabase database or, when the JSON storage fallback is used, in the server's data file. Email delivery is handled by the configured email provider. We use access controls, server-side validation, and provider credentials intended to restrict access, but no method of transmission or storage is completely secure. We retain information for as long as reasonably needed to respond to enquiries, manage prospective or active client relationships, meet legitimate business needs, or comply with legal obligations. A specific retention period has not been defined and should be confirmed before publication.

Subject to applicable law, you may ask us to provide access to, correct, or delete personal information submitted through the website. You may also object to or request restriction of certain processing, or withdraw consent where processing relies on consent. Send a request to xander@xanderkreativ.site. We may need to verify your identity before acting and may retain information where required or permitted by law. You may also have the right to complain to your local data-protection authority.

The website is intended for business audiences and is not directed to children. The site contains links to external services, including WhatsApp and email links. We are not responsible for the privacy practices or content of external websites and encourage you to review their policies.

We may update this Privacy Policy when the website, providers, or our practices change. The updated version will be posted on this page with a revised effective date. For privacy questions or requests, contact xander@xanderkreativ.site.