This Privacy Policy explains how personal data is collected, used, disclosed, retained and protected when you visit, interact with, purchase from, or otherwise use ideluma.com and any related pages, forms, tools, AI-assisted features, creative services, communications or support channels made available through the website (collectively, the “Website” or “Services”).

The controller of personal data processed through the Website is the person or entity that operates and controls the Website (the “Operator”, “we”, “us” or “our”). The Operator may be contacted through the contact form, privacy request mechanism or other contact channel made available on the Website. This formulation is intended to remain valid if the legal entity operating the Website changes.

By using the Website, you acknowledge the practices described in this Privacy Policy. Where consent is required by law, processing based on consent will occur only after consent has been obtained and may be withdrawn as described below.

1. Scope and roles

The Operator generally acts as controller for information collected directly through the Website. Certain service providers may process personal data on our behalf as processors, while other providers may act as independent controllers for their own processing activities.

If you submit personal data relating to another person, you are responsible for ensuring that you are permitted to provide it and that the person has received any legally required information.

2. Personal data we may collect

We may collect identification and contact information, such as your name, email address, preferred language and information you include in messages or forms.

We may collect service and transaction information, such as the package selected, order status, transaction identifiers, billing country, payment status, refund information and limited payment-related metadata. Full payment-card credentials are normally handled by payment service providers rather than stored by the Website.

We may collect creative brief information and user content, including prompts, keywords, preferred word roots, industry, values, target audience, target geography, preferred style, naming preferences, domain preferences, uploaded materials, examples, feedback and other content you choose to submit.

We may collect communications and support information, including enquiries, requests, complaints, feedback, survey responses and records needed to resolve support issues.

We may collect newsletter and marketing information, including subscription status, campaign interactions and your communication preferences.

We may automatically collect device, browser and usage information, including IP address, approximate location derived from IP, browser type, device type, operating system, referring pages, pages viewed, time and date of access, session data, clickstream information, error logs, security events and similar technical data.

We may collect cookie, local-storage and similar technology data as described in the Cookies Policy.

We may create or infer service-related information, such as language preference, likely interests, fraud or abuse indicators, service usage patterns and aggregated statistics.

3. Information you should not submit

Please do not submit passwords, payment-card numbers, government identifiers, health information, biometric data, highly sensitive personal information, confidential third-party information, trade secrets or other information that is not reasonably necessary for the requested creative service.

Creative prompts and briefs may be processed through automated systems and external infrastructure. You should therefore avoid submitting information that you are not authorised to disclose.

4. How we collect information

We collect information directly from you when you complete forms, submit a creative brief, make a purchase, communicate with us, subscribe to updates or otherwise interact with the Services.

We collect certain information automatically through server logs, cookies and similar technologies.

We may receive limited information from service providers involved in payments, fraud prevention, hosting, communications, analytics, AI processing, content delivery, customer support and related operations.

5. Purposes for which we use personal data

We use personal data to provide, operate and deliver the Services, including receiving creative briefs, generating or refining outputs, processing orders, providing human-assisted creative services where offered, and responding to requests.

We use personal data to administer payments, prevent duplicate or fraudulent transactions, issue refunds where applicable, maintain accounting records and comply with tax or financial record-keeping obligations.

We use personal data to personalise and improve the user experience, remember preferences, troubleshoot errors, evaluate service quality, test features, conduct internal analytics and improve the performance, reliability and usability of the Services.

We use personal data to protect the Website, users and third parties against fraud, abuse, security incidents, prohibited activity, intellectual-property misuse and other harmful conduct.

We use contact information to provide service messages and, where permitted, newsletters, updates, promotions or other marketing communications.

We use information to establish, exercise or defend legal claims, enforce our terms, comply with lawful requests and meet applicable legal or regulatory obligations.

6. Legal bases for processing

Where the GDPR, UK GDPR or similar laws apply, we rely on one or more of the following legal bases: performance of a contract or steps requested before entering into a contract; compliance with legal obligations; our legitimate interests or those of a third party, where those interests are not overridden by your rights; consent; and, where applicable, establishment, exercise or defence of legal claims.

Typical legitimate interests include operating and securing the Website, improving services, preventing fraud and abuse, maintaining business records, understanding service performance, protecting intellectual property and communicating with existing users about related services where permitted by law.

7. AI-assisted processing and creative content

Some Services use automated or AI-assisted systems to analyse creative briefs and generate, rank, transform or refine suggestions. Inputs and outputs may be transmitted to infrastructure and technology providers that support those functions.

We may use prompts, outputs, feedback and interaction data to operate, evaluate, secure and improve the Services, subject to applicable law, contractual restrictions and reasonable technical safeguards. Where a separate choice or consent is legally required for a particular use, it will be requested before that use occurs.

The Services are not intended to make decisions that produce legal or similarly significant effects about individuals solely by automated means.

8. Sharing and disclosure

We may disclose personal data to hosting, cloud, storage, cybersecurity, communications, customer-support, analytics, AI-processing, content-delivery, payment and professional-service providers where reasonably necessary to operate the Services.

We may disclose information to contractors or creative professionals involved in providing an expressly requested human-assisted service, subject to appropriate confidentiality and data-protection obligations.

We may disclose information to authorities, courts, regulators, advisers or other parties where required by law or reasonably necessary to protect rights, safety, security, property or legitimate interests.

We may disclose or transfer information in connection with a merger, financing, reorganisation, sale of assets, acquisition, insolvency or transfer of all or part of the Website or its business, subject to applicable legal safeguards.

We may disclose aggregated or de-identified information that cannot reasonably be used to identify you.

9. International transfers

Service providers may operate in countries other than your own. Where personal data is transferred from a jurisdiction that restricts international transfers, we use an available lawful transfer mechanism where required, such as an adequacy decision, approved contractual safeguards or another legally recognised mechanism, together with supplementary measures where appropriate.

10. Data retention

We retain personal data for no longer than reasonably necessary for the purposes described in this Policy, including to provide services, maintain transaction and accounting records, resolve disputes, enforce agreements, prevent fraud and comply with legal obligations.

Retention periods vary by data type and context. Creative briefs and service records may be retained for service continuity, quality assurance, dispute handling and legitimate business purposes; transaction records may be retained for statutory accounting or tax periods; security logs are generally retained for shorter periods unless needed for investigation.

When data is no longer required, we delete, anonymise or securely isolate it, subject to backup cycles and legal retention requirements.

11. Cookies and similar technologies

We use cookies and similar technologies for functions such as security, session management, preferences, performance measurement, analytics and, where enabled and legally permitted, marketing. Further details and available controls are described in the Cookies Policy.

Where applicable law requires prior consent for non-essential technologies, those technologies should remain disabled until the required choice has been made.

12. Marketing communications

You may unsubscribe from promotional emails by using the unsubscribe mechanism in the communication or by contacting us through the Website. Service, transactional, security or legal communications may still be sent where necessary.

Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before withdrawal.

13. Your privacy rights

Depending on where you live, you may have rights to request access to personal data, correction, deletion, restriction of processing, portability, objection to certain processing, withdrawal of consent, and information about or review of certain automated decisions.

You may also have the right to opt out of certain targeted advertising, profiling, sale or sharing of personal data, or to limit certain uses of sensitive personal information where those concepts apply under local law.

You may exercise applicable rights through the privacy request or contact mechanism available on the Website. We may need to verify your identity and may refuse or limit a request where the law permits. Authorised agents may be used where recognised by applicable law and subject to reasonable verification.

If you are in the EEA, United Kingdom or another jurisdiction with a supervisory authority, you may also have the right to lodge a complaint with the competent data-protection authority.

14. Global Privacy Control and browser signals

Where required by applicable law and technically supported, we treat recognised opt-out preference signals, including Global Privacy Control signals, as requests to opt out of covered sale, sharing or targeted advertising activities for the browser or device from which the signal is sent.

Other browser “Do Not Track” signals may not have a uniform legal or technical standard and may not be acted upon unless required by law.

15. Security

We use administrative, organisational and technical safeguards intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet-based service or storage system is completely secure, and absolute security cannot be guaranteed.

You are responsible for using secure devices and networks and for not submitting unnecessary sensitive information.

16. Children

The Services are intended for adults and are not directed to children. We do not knowingly seek to collect personal data from children below the age at which they can independently consent to the relevant online service under applicable law. If we learn that such information was collected without appropriate authorisation, we will take reasonable steps to delete it.

17. Third-party sites and services

The Website may link to or integrate with third-party websites or services. Their privacy practices are governed by their own policies, not this Privacy Policy. You should review those policies before providing personal data.

18. Changes to this Privacy Policy

We may update this Policy to reflect changes in the Services, technology, legal requirements or business practices. The current version published on the Website will govern from its stated effective date. Material changes may be highlighted or notified where required by law.

19. Contact

Privacy questions, requests and complaints may be submitted through the contact form, privacy request mechanism or other contact channel made available on ideluma.com. Communications submitted through those channels are treated as communications to the Operator of the Website.