Privacy

Last updated: 15 October 2026

Creattic is the studio of Iris Paço. This page explains what data we collect, why, and how to exercise your rights. For any request, email [email protected].

When you contact us or order

We use the name, contact details and address you send us to reply, make your piece and deliver it, and your tax number if you ask for an invoice. We keep this data as long as the order and legal obligations (such as invoicing) require.

The address or InPost locker you choose in your request is used only to send the order. It reaches the carrier (CTT or InPost) only when the parcel is shipped, on the label.

Requests made on the site

When you send a request, we use your name, email, phone (if you give it), message and the pieces you chose, with their personalisation, to reply and prepare the order. The request is emailed to Iris and you receive a copy. Nothing is paid on the site. If the request is accepted, these details carry over to the order.

While you browse, the pieces in your request are stored only in your browser.

Ideas and images you send

When you show me an idea, we use your name, email, phone (if you give it), the description, the text to engrave and the images or drawing you sent, only to reply and make the piece. The images are kept in private storage, which is not public and never appears on the site, and are attached to the email sent to Iris. They are deleted when the request is deleted or when you delete your account. Please do not send photos of other people without their permission.

Customer account (optional)

You do not need an account to send a request. If you create one, we store your name and email and, if you add them, your phone, address and birthday, plus your choice about news (with the date of consent) and the history of your requests. Your browser keeps a session key, which stops working when you sign out or after 90 days without use.

Your birthday is also used for the birthday discount: in your month, the marked pieces have a discount when you send a request while signed in. Once saved, you can only change it by getting in touch with me. If you accept news, I also send you an email in your birthday month with the pieces on offer; you can unsubscribe through the link in that email or in your account. The discount does not depend on accepting news.

You can correct your details or delete your account at any time in My account, under Delete account. We delete your personal data and your requests become anonymous. For orders already placed, only the anonymous record the law requires us to keep (for example, for invoicing) remains.

Sign-in codes

There is no password: to sign in we email you a 6-digit code. Each code works once and expires after 10 minutes. We only store an irreversible version of the code, deleted the next day.

News and offers

We only send news and offers by email if you consent, when sending a request, creating your account or in your account. The box always starts unticked. You can withdraw consent at any time in My account or by replying to one of our emails.

Site statistics, without cookies

We count visits anonymously: page viewed, referring site, country, device type and browser. We use no cookies for this and do not store your IP address. To count unique visitors we use a code that changes every day and cannot follow you from one day to the next. These records are deleted after 25 months.

Likes on products

When you tap the heart on a piece, your browser stores a random identifier so the same like is not counted twice. It is not linked to you and only exists if you use this feature.

Google Analytics, only with consent

If you accept cookies, we use Google Analytics (Google Ireland Limited) to understand how the site is used. Nothing from Google loads before that. You can change your mind in Cookie preferences.

Where data lives

The site and database run on Cloudflare's infrastructure. Site images and the images you send us (these in private storage) are stored in Cloudflare R2. The site's emails (requests, ideas, replies and sign-in codes) are sent through Resend.

Your rights

You can ask to access, correct or delete your data, object to its use, or request a copy. If you believe your data was mishandled, you can complain to the Portuguese data protection authority, CNPD (cnpd.pt).