Privacy information
How we use trade enquiry data.
This notice explains what personal information reaches Creative Loft through this website, why it is used, where it is processed and the rights available to you.
Controller and contact details
The controller is Crea Budownictwo Sp. z o.o., operator of the Creative Loft brand, Polish VAT ID 8961545644, at ul. Modrzewiowa 2, 57-100 Gesiniec, Poland.
For privacy questions, email info@creative-loft.pl or telephone +48 511 855 717.
Information we collect
The trade enquiry form may collect your company name, contact name, work email, telephone number, project type, approximate quantity, UK delivery postcode or area, target date and the information you include in your message.
When the form is submitted, our systems may also record the submission time, source page, campaign query parameters, IP address and browser user agent. These technical fields support enquiry routing, security, spam prevention and troubleshooting.
If you contact us by email, telephone or WhatsApp, we receive the information you choose to provide through that channel. WhatsApp is operated under its own privacy terms.
Purposes and lawful bases
We use the information to review and respond to your enquiry, clarify a specification, prepare a quotation, discuss supply and delivery, and take steps requested before a contract. Where applicable, the lawful basis is taking steps at your request before entering into a contract.
We may also use limited contact and technical information for enquiry administration, record keeping, fraud and spam prevention, IT security and the establishment or defence of legal claims. Where applicable, the lawful basis is our legitimate interest in running and protecting the business.
The form does not subscribe you to a marketing list. If we later wish to send unrelated direct marketing, we will assess the required lawful basis and provide any choice required by applicable law.
What happens if you do not provide the information
Company name, contact name, work email, project type, message and acknowledgement of this notice are required by the form. Without them, we may not be able to identify the business enquiry or provide a meaningful response. Other fields are optional, although missing delivery or quantity information may delay a quotation.
Who may receive the information
Information may be accessed by authorised people handling Creative Loft enquiries and by service providers supporting website hosting, email delivery, technical enquiry routing, security and maintenance.
We do not publish form submissions and do not sell enquiry data. Service providers should only process the information for the agreed service and under applicable data protection obligations.
UK to Poland and other international transfers
Creative Loft is operated from Poland, so information submitted from the UK is received and processed in the European Economic Area. The EEA is currently covered by UK adequacy regulations, which permit relevant transfers under the UK GDPR without additional transfer safeguards.
If a service provider processes information in another country, we will assess whether an adequacy regulation, appropriate safeguard or another lawful transfer mechanism is required. More information on current UK transfer rules is available from the Information Commissioner’s Office.
How long we keep information
We keep enquiry information for as long as reasonably needed to respond, prepare or discuss a quotation, manage a resulting business relationship and maintain appropriate records. Information may then be retained where necessary for legal, accounting, security or claims purposes. We review the need for continued retention rather than keeping enquiries indefinitely without reason.
Your data protection rights
Depending on the circumstances and the law that applies, you may have rights to request access, correction, erasure or restriction of your personal information, to object to certain processing, and to receive data in a portable format. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.
You may raise a concern with us first using the contact details above. You may also complain to the Polish supervisory authority, the Personal Data Protection Office, or, where UK data protection law applies, the Information Commissioner’s Office.
Security and updates
We use proportionate technical and organisational measures intended to protect enquiry data. No internet transmission or storage system can be guaranteed completely secure.
We may update this notice when the website, suppliers or legal requirements change. Last updated: 21 July 2026.