Privacy Policy

1. Who we are

This policy explains how Venutic, a trading name of Creogence Ltd, uses personal data. Creogence Ltd is the data controller for personal data collected through venutic.com. ICO registration number: [ICO REGISTRATION NUMBER].

2. What data we collect

• Founding member enrolment form: name, work email, phone number (if you provide one), organisation, job title, role, organisation size, services of interest, whether you use or build AI agents, any message, your consent choices, and campaign source information (such as UTM parameters and referring page) where present.
• Contact form: name, email, phone number (if you provide one), organisation and your message. Phone numbers are used only to respond to your enquiry or enrolment, under the same lawful basis and retention as the other form data.
• Cookies and analytics: strictly necessary storage, and analytics data only if you consent. See our Cookie Policy.
• Emails: correspondence you send us and the emails we send you.
• Security data: your IP address, which we process only in hashed (keyed, one-way) form for spam and abuse prevention and rate limiting.

3. Purposes and lawful basis

• Responding to and managing enrolments and enquiries: our legitimate interests in operating Venutic and responding to businesses, and taking steps at your request before entering into a contract.
• Marketing updates: your consent, given by ticking the optional updates box. You can withdraw it at any time.
• Analytics: your consent, given through our cookie banner.
• Spam and abuse prevention and rate limiting (hashed IP addresses): our legitimate interests in keeping the site and our forms secure.

4. Retention

We keep enrolment and contact data for up to 24 months after our last contact with you, or until you ask us to delete it, whichever is sooner. We keep records of marketing consent for as long as that consent is active. Hashed IP addresses are deleted after 7 days.

5. Who we share data with

We use the following categories of processors, under contracts that require them to protect your data:

• Website hosting: Lovable (website hosting)
• Database: Supabase (EU – Ireland, eu-west-1)
• Email delivery: Resend

We do not sell personal data.

6. International transfers

Some processors may store or access data outside the UK. Where this happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. Your rights

Under UK GDPR you have the right to:

• access your personal data;
• have inaccurate data rectified;
• have your data erased;
• restrict processing;
• object to processing, including for direct marketing;
• data portability; and
• withdraw consent at any time, without affecting processing that took place before withdrawal.

To exercise any of these rights, email support@venutic.com.

8. Complaints

You have the right to complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to address your concerns first.

9. Children

Venutic is for businesses and is not directed at individuals under 18.

10. Changes

We may update this policy. The date at the top shows when it was last changed.