Effective Date: 1 August 2025
Contact: teamkretomerce@gmail.com

1. Introduction: what this policy covers

This Policy explains how Kretomerce (“Kretomerce”, “we”, “us” or “our”) collects, uses, stores and shares your personal information when you:

• visit or use our website;
  
  

• sign up for our digital products, programs, coaching or consulting; or
  
  

• otherwise interact with us (for example, by contacting support or taking part in an event).
  
  

It also explains your privacy rights and choices, and how to contact us about data protection matters. Please read it carefully. If you do not agree with this Policy, please do not use our website or services.

2. Who we are and how to contact us

Controller. Kretomerce is the data controller responsible for your personal data when you use our services.

Contact us. For any privacy queries or to exercise your data rights, email: teamkreatomerce@gmail.com.

(If you need our registered company address or company number for legal purposes, we will provide it on request.)

3. What personal data we collect

We collect and process personal data you provide to us or that we gather while delivering services. This may include:

• Identity & contact details: name, email, postal/billing address.
  
  

• Account, payment & billing information: billing address, transaction history, payment method (processed by our payment provider).
  
  

• Business & profile information: brand name, business description, public social media handles, audience metrics and campaign data you provide during onboarding.
  
  

• Service data: project briefs, proposals, coaching notes, campaign performance reports, creative assets you upload.
  
  

• Communications: any correspondence with our team (email, chat logs, recorded coaching sessions if applicable).
  
  

• Technical & usage data: IP address, device and browser details, cookies and analytics data, pages visited and interactions with our site.
  
  

• Other data: any information you include in public testimonials, case studies or that you give us with your consent.
  
  

We do not normally collect special category (sensitive) personal data about you. If you choose to provide sensitive information, we will only process it with your explicit consent or where required by law.

4. Where we get personal data from

We collect data directly from you (forms, emails, onboarding), and we may also receive data from:

• third-party platforms you connect (e.g., ad networks, social platforms) as part of campaign management;
  
  

• analytics providers (e.g., Google Analytics) and ad partners;
  
  

• public sources (e.g., your public social profiles, business directories); and
  
  

• partners, referrals or other service providers working with you.
  
  
  

5. How we use personal data: purposes & legal basis

We use personal data for the following purposes and legal bases:

To perform our contracts with you (contract):

• Deliver services (consulting, campaigns, digital products, events).
  
  

• Process payments and manage subscriptions, invoices and refunds.
  
  

• Communicate about your account, bookings and service delivery.
  
  
  

For our legitimate business interests (legitimate interest):

• Improve and personalise our services, websites and marketing.
  
  

• Manage fraud prevention, security and legal compliance.
  
  

• Operate and maintain our IT systems and analytics.
  
  

• Enforce our terms and protect our rights.
  
  
  

With your consent (consent):

• Send marketing communications and newsletters (you can opt out at any time).
  
  

• Use cookies and similar technologies where consent is required.
  
  
  

Where required by law or regulatory obligations (legal obligation):

• Respond to lawful requests by courts, regulators or law enforcement.
  
  

• Retain information for tax, accounting and legal compliance.
  
  
  

6. Marketing & withdrawing consent

We may send you marketing about our services if you consented or where we reasonably believe you have a legitimate interest (and you have not objected).

You can opt out of marketing at any time by:

• following the unsubscribe link in any marketing email; or
  
  

• emailing teamkretomerce@gmail.com and requesting to be unsubscribed.

Even if you opt out of marketing, we may still contact you about your account and services.

7. Cookies & similar technologies (summary)

We use cookies and similar technologies to operate our site and improve your experience.

Types of cookies we may use:

• Strictly necessary cookies — required for core site functions.
  
  

• Performance & analytics cookies — to measure how the site is used (e.g., Google Analytics).
  
  

• Functionality cookies — to remember preferences.
  
  

• Advertising/targeting cookies — to deliver relevant ads via third parties (e.g., Meta, TikTok).

You can manage cookie preferences via your browser settings and, where presented, our cookie banner. For detailed information on the specific cookies we use and how to opt out, see our Cookie Notice on the website.

8. Sharing and transfers of data

We may share personal data with:

• Service providers and subprocessors who support our operations (payment processors, hosting providers, analytics and marketing platforms, CRM tools, teleconferencing and email services).
  
  

• Ad platforms & social networks when you permit account connections or we run campaigns on your behalf (e.g., Meta Ads, TikTok Ads, Google Ads).
  
  

• Professional advisers (lawyers, auditors) and regulators when necessary.
  
  

• M&A parties in connection with a sale, merger or reorganisation of our business (we will notify you as required).

International transfers. Some of our service providers operate outside South Africa (for example in the USA or EU). Where we transfer personal data across borders we will take appropriate safeguards (standard contractual clauses, approved frameworks, or rely on legitimate business needs) as required by applicable law.

9. How long we keep personal data 

We retain personal data only for as long as necessary for the purposes set out above, and to meet our legal and business obligations. Typical retention periods:

• transactional and billing records — minimum required by tax law (e.g., 5–7 years depending on jurisdiction);
  
  

• client service records and project documentation — for the duration of the relationship plus a reasonable period (commonly 3–7 years) for business, legal and archival reasons;
  
  

• marketing consent records — until you withdraw consent plus a short period to comply with requests.
  
  

If you request deletion, we will remove your data unless we have a lawful reason to retain it (e.g., legal claims, regulatory obligations).