Privacy Policy
Privacy information — editorial draft for review
Zorat4Creatives is the agency trading name used by founder Kathryn Morsut. Privacy inquiries can be sent to the contact email shown below. No business address, registration number or privacy officer is stated here until verified by the owner.
Information collected. Inquiry forms collect the name, email, affiliation, professional role, service interest, project description, optional budget and requested timeline that you submit. Please do not include sensitive information or third-party private information. Privacy requests collect an email and the details needed to respond.
Purpose and basis. Inquiry information is used to respond, discuss a requested proposal or partnership and manage follow-up. Pre-contractual steps requested by the visitor may support this processing; the owner must confirm the applicable basis for each activity. Optional analytics and external media use your separate preferences. A privacy acknowledgment is not consent to marketing. We do not operate a marketing mailing list through these forms.
Storage and providers. The site is hosted through OpenAI Sites using Cloudflare infrastructure, including a database and file storage. Administrative access uses ChatGPT authentication. If optional Google Analytics or an email delivery provider is configured, their participation and transfer arrangements must be reviewed and documented before use. Hosting and service processing can occur internationally. The owner must verify relevant transfer safeguards and processor agreements for the actual business.
Retention. Site inquiry records are normally removed after the configured retention period (initially 365 days), checked when the service receives requests. Consent records expire after 180 days. Operational backups are retained for up to 30 days. Separate client contracts and records are outside these website forms and require their own retention assessment.
Your requests. Depending on applicable law, you may request access, correction, deletion, information about processing, objection or withdrawal of optional consent. Use the privacy request form below or the contact email. We may need to verify identity without collecting unnecessary documents. You may also contact the relevant supervisory authority. Cookie withdrawal is available at any time from Cookie Preferences.
Security. The site uses encrypted transport, server-side validation, access controls, limited upload types, rate limiting and audit records for administration. No website can promise absolute security.
Review required. The owner must confirm legal identity, applicable laws, processing bases, providers, transfers, retention and operational procedures before treating this draft as a final policy.