Effective date • 7 September 2026

Privacy Policy

How Create in Baltics processes personal data.

01

Controller and contact

Contact for all data-protection matters: info@createinbaltics.com. Full legal operator information will be published before commercial launch.

02

Who this Policy applies to

This Policy applies to visitors, Creators, Brand users, account holders and other individuals whose personal data is processed through Create in Baltics.

03

Personal data we may collect

  • Account data: name, email address, account type, authentication and account-status information.
  • Creator profile data: display name, city/country, languages, niches, biography, portfolio, social links, services and pricing.
  • Brand profile data: business/brand name, website, social links, country, industry, logo and business description.
  • Legal and tax data: legal name, date of birth where required, tax residence, tax identification number, VAT or company-registration information, legal address and status as individual/self-employed/company.
  • Collaboration data: campaigns, applications, messages, confirmations, briefs, deliverables, revisions, reviews and dispute records.
  • Payment data: payment status, transaction identifiers and payout/account status. Sensitive payment credentials and identity-verification documents may be collected directly by Stripe or another payment provider rather than by us.
  • Technical data: IP address, browser/device information, security logs, timestamps and cookie/consent information.
  • Support data: correspondence, reports, complaints and information you send to support.
04

Why we use personal data and legal bases

PurposeTypical dataLegal basis
Create and manage accounts and profilesAccount/profile dataPerformance of contract; steps requested before contract
Operate campaigns, applications, messaging and collaborationsProfile and collaboration dataPerformance of contract; legitimate interests in operating the marketplace
Process payments and payoutsTransaction, legal and payout-status dataPerformance of contract; legal obligations; legitimate interests in fraud prevention
Compliance, tax reporting and record keepingLegal, tax and transaction dataLegal obligation, including applicable tax/reporting duties
Safety, fraud prevention and moderationAccount, technical, collaboration and support dataLegitimate interests; legal obligations where applicable
Support and dispute handlingAccount, support and collaboration dataPerformance of contract; legitimate interests
Service analytics and improvementTechnical and usage dataLegitimate interests for strictly necessary/limited analytics; consent where required for non-essential cookies
Marketing communicationsEmail and preferencesConsent or another lawful basis where permitted; you may opt out
05

Public and private information

Creator and Brand profiles may contain information intended to be public or visible to logged-in marketplace users. Legal, tax, identity-verification and payout information is not intended to appear on public profiles. Users should not place sensitive information in public biography, portfolio or message fields.

06

Recipients and service providers

We may share personal data with service providers that help operate the Platform, for example hosting, database/storage, authentication, transactional email, security, analytics and payment providers. Where payments are enabled, Stripe may process payment, identity and payout data under its own privacy terms.

We may also disclose data to professional advisers, competent authorities, tax authorities or law-enforcement bodies where required by law or reasonably necessary to establish, exercise or defend legal claims.

07

DAC7 and tax reporting

Digital-platform tax-reporting rules, including DAC7 where applicable, may require us to collect and verify seller/Creator identification and financial information and report qualifying activity to tax authorities. We will only collect and report information that we are legally required to process.

08

International transfers

Some service providers may process data outside Latvia or the European Economic Area. Where applicable, we use a lawful transfer mechanism such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted by EU data-protection law.

09

Retention

We keep personal data only as long as necessary for the purpose for which it was collected. Retention is determined by account status, collaboration/dispute needs, security requirements, contractual limitation periods and mandatory tax, accounting or platform-reporting rules. Some legal and transaction records may therefore be retained after account closure for the period required by applicable law.

Portfolio files and collaboration deliverables may be removed or archived according to Platform storage rules. We will publish more specific retention periods when the production storage architecture is finalised.

10

Your rights

Subject to the GDPR and applicable limitations, you may have the right to access, correct, erase or restrict your personal data, object to certain processing, receive portable data, and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with a competent supervisory authority.

For Latvia, the supervisory authority is the Data State Inspectorate (Datu valsts inspekcija), www.dvi.gov.lv. You may also contact the authority in another EU/EEA country where applicable.

11

Account deletion

To request account deletion or exercise privacy rights, contact info@createinbaltics.com. Some records may need to be retained where required by law, to resolve disputes, prevent fraud or establish legal claims.

12

Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls and separation of public profile data from private legal/payment data. No online service can guarantee absolute security.

13

Cookies

We use cookies or similar technologies as described in the Cookie Policy. Non-essential analytics or marketing cookies should only be used where the required consent has been obtained.

14

Children

Create in Baltics is for users aged 18 and over. We do not knowingly offer accounts to children.

15

Automated decisions

We do not currently intend to make decisions that produce legal or similarly significant effects solely by automated processing. Search, sorting or recommendations may use automated logic without determining legal rights.

16

Changes

We may update this Policy when our services, providers or legal obligations change. The effective date at the top identifies the current version.

17

Contact

Privacy questions and rights requests: info@createinbaltics.com.