Privacy Policy

1. Introduction

Creya Labs ("we," "our," or "us") is a software design and development studio operating across Accra, Lagos, and Cologne. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. It applies to all information collected through our website at creyalabs.com and any related services, communications, or interactions you have with us.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

2. Information We Collect

We collect information in the following ways:

• Information you provide directly — When you contact us via email, fill out a form, or otherwise reach out, we collect your name, email address, and the content of your message.
• Information collected automatically — When you visit our website, we automatically collect certain information about your device and usage, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This is collected via analytics tools described in Section 8.
• Communications — If you correspond with us by email or other means, we may retain that correspondence, including any personal information it contains.

We do not collect sensitive personal data (such as health data, financial data, or government identification numbers) through this website.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and communicate with you about potential or ongoing projects
• Understand how visitors use our website so we can improve it
• Analyse aggregate trends and usage patterns
• Protect the security and integrity of our website
• Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using your personal data depends on the specific information and context:

• Legitimate interests — We process website analytics data based on our legitimate interest in understanding how our site is used and improving it, provided that interest is not overridden by your data-protection rights.
• Contractual necessity — Where we are in a pre-contractual or contractual relationship with you, we process your information as necessary to fulfil or prepare that contract.
• Legal obligation — We may process your data where required to comply with applicable law.
• Consent — Where we rely on consent, you have the right to withdraw it at any time by contacting us at hello@creyalabs.com.

5. Sharing Your Information

We may share your information with:

• Service providers — Third-party vendors who assist us in operating our website and business, including analytics providers (Google Analytics, Mixpanel) and email service providers. These parties are contractually required to keep your information confidential and use it only for the services they provide to us.
• Legal authorities — Where required by law, court order, or governmental authority, we may disclose your information.
• Business transfers — In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

We do not share your personal information with any other third parties without your consent.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

Email enquiries and project correspondence are typically retained for up to three years after the conclusion of the relevant engagement or last contact. Website analytics data is retained in accordance with the retention settings of each tool (see Section 8).

When your information is no longer needed, we delete or anonymise it.

7. Your Rights

Depending on your location, you may have the following rights with respect to your personal information:

• Access — The right to request a copy of the personal information we hold about you.
• Rectification — The right to request that we correct inaccurate or incomplete information.
• Erasure — The right to request deletion of your personal information, subject to certain exceptions.
• Restriction — The right to request that we restrict processing of your information in certain circumstances.
• Portability — The right to receive your information in a structured, machine-readable format.
• Objection — The right to object to processing based on legitimate interests or for direct marketing purposes.
• Withdrawal of consent — Where processing is based on consent, the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at hello@creyalabs.com. We will respond within 30 days. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority.

8. Cookies and Tracking Technologies

We use the following tools to understand how our website is used:

• Google Analytics — Collects anonymised usage data including pages viewed, session duration, and general geographic region. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
• Mixpanel — Used to track specific user interactions and product analytics. Data is processed in accordance with Mixpanel's Privacy Policy.

These tools may use cookies or similar tracking technologies. Most browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of certain features on our site.

We do not use cookies for advertising or cross-site tracking.

9. International Data Transfers

Creya Labs operates across Ghana, Nigeria, and Germany. Personal information may be transferred to, stored in, and processed in countries other than the one in which you reside, including countries outside the EEA.

Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or we rely on adequacy decisions where applicable.

10. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include access controls, encrypted communications (HTTPS), and periodic review of our data handling practices.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we do, we will update the effective date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: hello@creyalabs.com
• Studio locations: Accra, Ghana · Lagos, Nigeria · Cologne, Germany

We aim to respond to all enquiries within 5 business days.