Privacy Policy
Legal
KRH Creations LLC (“KRH Creations”, “we”, “us”) is a white-label web development
company based in Houston, Texas. This policy explains what personal information we
collect, why we collect it, who we share it with, and what you can ask us to do with
it. We have written it in plain language because a privacy policy nobody can read is
not a disclosure.
1. Two different relationships
We handle personal information in two distinct roles, and the rules are different for
each.
As a business, for our own purposes. When you visit this website,
email us, or become a client, we decide what to do with your information. Under laws
that use the term, we are the controller. Sections 2 through 9 cover this.
As a service provider to our clients. When we build or maintain a
website for an agency or a client, we may access personal information belonging to
that client’s own customers. We do not own that information, we do not use it for our
own purposes, and we only handle it on the client’s instructions. Under laws that use
the term, we are a processor or service provider. Section 10 covers
this, and it is the section an agency’s legal team usually wants.
2. Information we collect about you
Information you give us
- Your name, email address, company name, and phone number when you contact us, request a rate sheet, or send a project brief
- The contents of your brief, including any project details, design files, or client information you choose to include
- Billing and business details required to issue an invoice and receive payment
- Anything else you send us in the course of an engagement
Information collected automatically
- IP address, browser type, device type, operating system, and approximate location derived from IP
- Pages viewed, time on page, referring URL, and the search terms or link that brought you here
- Cookie identifiers, where cookies are in use — see section 6
What we do not collect
We do not knowingly collect information from anyone under 18. We do not collect
Social Security numbers, government identification numbers, biometric data, precise
geolocation, or sensitive personal information as defined under California law. We do
not buy personal information from data brokers.
3. Why we use it
- To answer you. Responding to enquiries, producing estimates, and sending rate sheets you asked for.
- To deliver work. Managing projects, communicating during a build, and providing support after handoff.
- To get paid. Invoicing, payment processing, and keeping the accounting records US tax law requires.
- To run the website. Understanding which pages are useful, diagnosing errors, and keeping the site secure.
- To meet legal obligations. Tax, accounting, and responding to lawful requests.
Where the GDPR applies to you, our legal bases are: performance of a contract for
client work; legitimate interests for website analytics, security, and responding to
business enquiries; consent for non-essential cookies; and legal obligation for
financial records.
4. We do not sell your information
We do not sell personal information, and we do not share it for cross-context
behavioural advertising, as those terms are defined under the California Consumer
Privacy Act. We have not done so in the preceding twelve months. We do not run
advertising or retargeting pixels on this website.
5. Who we share it with
We share personal information only with service providers who need it to help us
operate, and only for that purpose. As of the date above, these are:
- Web hosting — which stores this website and its data
- Email — which handles our business correspondence
- Website analytics
- Form handling
- Payment and accounting — our invoicing and bookkeeping providers, which receive billing details but not project content
- Our development team — see section 7
We may also disclose information where required by law, court order, or lawful
request by a public authority, or where necessary to protect our legal rights. If our
business is acquired or merged, information may transfer to the acquiring entity,
and we will post notice on this page before that happens.
6. Cookies
This website uses cookies that are strictly necessary for it to function, and may use
analytics cookies to understand how the site is used. We do not use advertising or
behavioural targeting cookies.
You can block or delete cookies through your browser settings. Blocking strictly
necessary cookies may affect how parts of the site work. Where a consent banner is
presented, non-essential cookies are not set until you accept them, and you can
change your choice at any time.
7. International transfers
KRH Creations is a United States company. Our development team is located in India,
and members of that team may access information you send us, including project
materials, in the course of delivering work you have engaged us for. Everyone with
access is bound by written confidentiality terms equivalent to those in our client
agreements.
Where personal information subject to UK or EU data protection law is transferred
outside those jurisdictions, we rely on the European Commission’s Standard
Contractual Clauses and the UK International Data Transfer Addendum. If your
engagement requires that no data be accessed outside the United States, tell us
before the project starts and we will confirm in writing whether we can meet that.
8. How long we keep it
- Enquiries that do not become projects — 24 months, then deleted
- Client project files and correspondence — for the duration of the engagement and 3 years after, so we can support work we delivered
- Invoices and financial records — 7 years, as US tax law requires
- Website analytics — 14 months
- Client credentials and access — revoked at handoff and deleted from our password manager
9. Your rights
Depending on where you live, you may have the right to request a copy of the personal
information we hold about you, to correct it, to have it deleted, to limit how we use
it, and to receive it in a portable format. You may also object to processing based
on legitimate interests. If you are in California, you have the right not to be
discriminated against for exercising any of these rights, and we will not treat you
differently for doing so.
To make a request, email info@krhcreations.com
with “Privacy request” in the subject line. We will verify your identity through the
email address on file and respond within 45 days, or within 30 days where the GDPR
applies. There is no charge. You may designate an authorised agent to make a request
on your behalf, with written proof of authorisation.
If you are in the UK or EU and you are not satisfied with our response, you may
complain to your national supervisory authority.
10. Client data we handle on your behalf
This section applies when you are an agency or business that has engaged us, and we
are working on a website or system holding your own customers’ personal information.
- That information remains yours, or your client’s. We claim no ownership of it.
- We process it only on your documented instructions and only to deliver the work you engaged us for. We never use it for our own purposes, for marketing, or to train any model.
- Access is limited to the specific developers assigned to your project.
- Credentials are exchanged through a password manager rather than email or chat, and access is revoked at handoff.
- Where we engage a subcontractor, they are bound by written terms no less protective than these, and we remain responsible for their work.
- We will notify you without undue delay, and within 72 hours of becoming aware, of any security incident affecting your data, with what we know at that point.
- On request at the end of an engagement we will return or delete your data, except where we are required to retain a copy by law.
- If you need a signed Data Processing Agreement, or your client requires one, ask and we will execute it.
11. Security
We use encrypted connections, password-manager-based credential handling,
multi-factor authentication on business accounts, and least-privilege access to
client systems. No method of transmission or storage is completely secure, and we do
not claim otherwise. If you believe your information has been compromised through us,
email info@krhcreations.com immediately.
12. Changes to this policy
We will update this page when our practices change, and revise the date at the top.
If a change materially affects how we handle information you have already given us,
we will email active clients directly rather than relying on you to check this page.
13. Contact
KRH Creations LLC
Katy, Texas, United States
info@krhcreations.com