Privacy Policy | Cruz Creative

Last updated: 28 October 2026

This Privacy Policy explains how Cruz Creative collects, uses and protects personal data when you visit cruzcreative.net or any of its subdomains and landing pages (together, the “Site”), contact us, buy our services or subscribe to our emails. We process personal data in line with the EU General Data Protection Regulation (GDPR), the Spanish Data Protection Act (Ley Orgánica 3/2018, LOPDGDD) and the Spanish Information Society Services Act (Ley 34/2002, LSSI).

1. Who is responsible for your data

The data controller is:

Name: James Leslie Tucker, trading as Cruz Creative
NIF: Y6201919Y
Address: Calle Méndez Núñez 88, 38001 Santa Cruz de Tenerife, Spain
Email: hello@cruzcreative.net
Phone: +34 711 001 320

We have not appointed a Data Protection Officer, as we are not required to. For any privacy question or request, write to hello@cruzcreative.net.

2. What data we collect

a) Client and contact data. When you buy from us or get in touch: your name, business name, job title, email, phone number, tax ID, registered business address and the content of your messages.

b) Payment data. Payments are processed by Stripe. We receive the payment amount, currency, date, the last four digits and type of card, and the billing details you enter. We never see or store your full card details.

c) Brief and project materials. The information and files you send us to produce your order. These can include scripts, brand assets, footage and photos, and, for AI video services, photos, video and voice recordings of people, including you, that are used to create AI avatars or AI voices.

d) Website usage data. If you accept analytics or advertising cookies: pages visited, time on the Site, device and browser type, approximate location (based on IP address) and how you arrived at the Site. See section 9.

e) Newsletter data. If you subscribe: your email address, name (if given), the date you subscribed, and whether you open and click our emails.

We don’t intentionally collect special categories of data, such as health, religion or political opinions. Please don’t include them in your brief unless they are needed for your project. We use photos and voice recordings only to create the content you ordered, not to identify people.

3. Why we use your data, and our legal basis

Last updated: 28 October 2026

This Privacy Policy explains how Cruz Creative collects, uses and protects personal data when you visit cruzcreative.net or any of its subdomains and landing pages (together, the “Site”), contact us, buy our services or subscribe to our emails. We process personal data in line with the EU General Data Protection Regulation (GDPR), the Spanish Data Protection Act (Ley Orgánica 3/2018, LOPDGDD) and the Spanish Information Society Services Act (Ley 34/2002, LSSI).

1. Who is responsible for your data

The data controller is:

Name: James Leslie Tucker, trading as Cruz Creative
NIF: Y6201919Y
Address: Calle Méndez Núñez 88, 38001 Santa Cruz de Tenerife, Spain
Email: hello@cruzcreative.net
Phone: +34 711 001 320

We have not appointed a Data Protection Officer, as we are not required to. For any privacy question or request, write to hello@cruzcreative.net.

2. What data we collect

a) Client and contact data. When you buy from us or get in touch: your name, business name, job title, email, phone number, tax ID, registered business address and the content of your messages.

b) Payment data. Payments are processed by Stripe. We receive the payment amount, currency, date, the last four digits and type of card, and the billing details you enter. We never see or store your full card details.

c) Brief and project materials. The information and files you send us to produce your order. These can include scripts, brand assets, footage and photos, and, for AI video services, photos, video and voice recordings of people, including you, that are used to create AI avatars or AI voices.

d) Website usage data. If you accept analytics or advertising cookies: pages visited, time on the Site, device and browser type, approximate location (based on IP address) and how you arrived at the Site. See section 9.

e) Newsletter data. If you subscribe: your email address, name (if given), the date you subscribed, and whether you open and click our emails.

We don’t intentionally collect special categories of data, such as health, religion or political opinions. Please don’t include them in your brief unless they are needed for your project. We use photos and voice recordings only to create the content you ordered, not to identify people.

3. Why we use your data, and our legal basis

Last updated: 28 October 2026

This Privacy Policy explains how Cruz Creative collects, uses and protects personal data when you visit cruzcreative.net or any of its subdomains and landing pages (together, the “Site”), contact us, buy our services or subscribe to our emails. We process personal data in line with the EU General Data Protection Regulation (GDPR), the Spanish Data Protection Act (Ley Orgánica 3/2018, LOPDGDD) and the Spanish Information Society Services Act (Ley 34/2002, LSSI).

1. Who is responsible for your data

The data controller is:

Name: James Leslie Tucker, trading as Cruz Creative
NIF: Y6201919Y
Address: Calle Méndez Núñez 88, 38001 Santa Cruz de Tenerife, Spain
Email: hello@cruzcreative.net
Phone: +34 711 001 320

We have not appointed a Data Protection Officer, as we are not required to. For any privacy question or request, write to hello@cruzcreative.net.

2. What data we collect

a) Client and contact data. When you buy from us or get in touch: your name, business name, job title, email, phone number, tax ID, registered business address and the content of your messages.

b) Payment data. Payments are processed by Stripe. We receive the payment amount, currency, date, the last four digits and type of card, and the billing details you enter. We never see or store your full card details.

c) Brief and project materials. The information and files you send us to produce your order. These can include scripts, brand assets, footage and photos, and, for AI video services, photos, video and voice recordings of people, including you, that are used to create AI avatars or AI voices.

d) Website usage data. If you accept analytics or advertising cookies: pages visited, time on the Site, device and browser type, approximate location (based on IP address) and how you arrived at the Site. See section 9.

e) Newsletter data. If you subscribe: your email address, name (if given), the date you subscribed, and whether you open and click our emails.

We don’t intentionally collect special categories of data, such as health, religion or political opinions. Please don’t include them in your brief unless they are needed for your project. We use photos and voice recordings only to create the content you ordered, not to identify people.

3. Why we use your data, and our legal basis

4. People who appear in project materials

If you send us photos, video or voice recordings of other people (for example, your team members, presenters or actors), you are responsible for:

having their consent to use their image and voice for the project, including to create an AI avatar or voice clone, and
telling them that their data will be shared with us and processed as described in this policy.

Those people can contact us at hello@cruzcreative.net to exercise their rights (section 8).

5. Who we share your data with

We don’t sell your personal data. We share it only with service providers who help us run our business, under agreements that require them to protect it:

4. People who appear in project materials

If you send us photos, video or voice recordings of other people (for example, your team members, presenters or actors), you are responsible for:

having their consent to use their image and voice for the project, including to create an AI avatar or voice clone, and
telling them that their data will be shared with us and processed as described in this policy.

Those people can contact us at hello@cruzcreative.net to exercise their rights (section 8).

5. Who we share your data with

We don’t sell your personal data. We share it only with service providers who help us run our business, under agreements that require them to protect it:

4. People who appear in project materials

If you send us photos, video or voice recordings of other people (for example, your team members, presenters or actors), you are responsible for:

having their consent to use their image and voice for the project, including to create an AI avatar or voice clone, and
telling them that their data will be shared with us and processed as described in this policy.

Those people can contact us at hello@cruzcreative.net to exercise their rights (section 8).

5. Who we share your data with

We don’t sell your personal data. We share it only with service providers who help us run our business, under agreements that require them to protect it:

We may also share data with our accountants and advisers, our team members and collaborators who work on your project, and public authorities where the law requires it.

AI tools. Your project materials are uploaded to and processed by the AI tools above, which act under their own terms and privacy policies. Some AI providers’ terms allow them to use uploaded content to improve their services. Where a tool offers it, we use settings or plans that turn this off. We only enter into AI assistants the information needed for the task, and we don’t upload photos or voice recordings of people to ChatGPT or Claude.

6. Transfers outside the European Economic Area

Some of our providers, including Stripe, Google, Meta, OpenAI, Anthropic, ClickUp, Higgsfield and ElevenLabs, are based in, or process data in, the United States or other countries outside the EEA. Where this happens, the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework, for certified companies) or by the European Commission’s Standard Contractual Clauses.

7. How long we keep your data

We may also share data with our accountants and advisers, our team members and collaborators who work on your project, and public authorities where the law requires it.

AI tools. Your project materials are uploaded to and processed by the AI tools above, which act under their own terms and privacy policies. Some AI providers’ terms allow them to use uploaded content to improve their services. Where a tool offers it, we use settings or plans that turn this off. We only enter into AI assistants the information needed for the task, and we don’t upload photos or voice recordings of people to ChatGPT or Claude.

6. Transfers outside the European Economic Area

Some of our providers, including Stripe, Google, Meta, OpenAI, Anthropic, ClickUp, Higgsfield and ElevenLabs, are based in, or process data in, the United States or other countries outside the EEA. Where this happens, the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework, for certified companies) or by the European Commission’s Standard Contractual Clauses.

7. How long we keep your data

We may also share data with our accountants and advisers, our team members and collaborators who work on your project, and public authorities where the law requires it.

AI tools. Your project materials are uploaded to and processed by the AI tools above, which act under their own terms and privacy policies. Some AI providers’ terms allow them to use uploaded content to improve their services. Where a tool offers it, we use settings or plans that turn this off. We only enter into AI assistants the information needed for the task, and we don’t upload photos or voice recordings of people to ChatGPT or Claude.

6. Transfers outside the European Economic Area

Some of our providers, including Stripe, Google, Meta, OpenAI, Anthropic, ClickUp, Higgsfield and ElevenLabs, are based in, or process data in, the United States or other countries outside the EEA. Where this happens, the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework, for certified companies) or by the European Commission’s Standard Contractual Clauses.

7. How long we keep your data

8. Your rights

You have the right to:

access the personal data we hold about you,
correct inaccurate data,
delete your data, where we no longer need it or have no legal basis to keep it,
restrict how we use it,
object to processing based on legitimate interest, including portfolio use and marketing,
data portability, to receive your data in a usable format,
withdraw consent at any time, without affecting processing that took place before.

To exercise any of these rights, email hello@cruzcreative.net. We may ask you to confirm your identity. We’ll reply within one month.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), or to the data protection authority in your own country.

9. Cookies and advertising

The Site uses cookies needed for it to work. We use analytics cookies (such as Google Analytics) and advertising cookies (such as the Meta Pixel) only if you accept them through the cookie banner. You can change your choice at any time through the “Cookie settings” link at the bottom of each page. Full details are in our Cookie Policy.

Pages for visitors in the United States. Some pages are intended for visitors in the United States. On these pages, advertising cookies such as the Meta Pixel may run when you arrive, so we can measure which ads bring people to the Site. They record the pages you visit and actions such as starting a checkout or completing a purchase. You can turn this off at any time with the “Privacy choices” link at the bottom of the page. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out.

9a. Your privacy rights if you live in the United States

We don’t sell your personal data for money. Using advertising cookies to measure and target our ads may count as “sharing” or “targeted advertising” under some US state privacy laws. Depending on where you live, you may have the right to:

opt out of this sharing and targeted advertising, using the “Privacy choices” link or a Global Privacy Control signal,
know what personal data we hold about you and get a copy,
correct or delete it,
not be treated differently for using these rights.

To make any other request, email hello@cruzcreative.net. We’ll confirm your identity and reply within 45 days. If we turn down your request, you can appeal by replying to our answer, and we’ll respond within 45 days.

10. Security

We protect your data with appropriate technical and organisational measures, including access controls, two-factor authentication on our accounts and reputable, secure service providers. No online service is completely secure, but we work to protect your data and will tell you and the authorities about any serious breach, as the law requires.

11. Children

Our services are for businesses and are not directed at anyone under 18. We don’t knowingly collect data from children, except where a client sends us project materials showing a minor. In that case, the client must have the consent of the child’s parent or guardian.

12. Automated decisions

We don’t make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

13. Changes to this policy

We may update this Privacy Policy from time to time. We’ll post the current version on the Site with its last-updated date. If we make significant changes, we’ll tell clients and subscribers by email.

14. Contact

For any question about this policy or your data: hello@cruzcreative.net, +34 711 001 320, or by post to Calle Méndez Núñez 88, 38001 Santa Cruz de Tenerife, Spain.

8. Your rights

You have the right to:

access the personal data we hold about you,
correct inaccurate data,
delete your data, where we no longer need it or have no legal basis to keep it,
restrict how we use it,
object to processing based on legitimate interest, including portfolio use and marketing,
data portability, to receive your data in a usable format,
withdraw consent at any time, without affecting processing that took place before.

To exercise any of these rights, email hello@cruzcreative.net. We may ask you to confirm your identity. We’ll reply within one month.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), or to the data protection authority in your own country.

9. Cookies and advertising

The Site uses cookies needed for it to work. We use analytics cookies (such as Google Analytics) and advertising cookies (such as the Meta Pixel) only if you accept them through the cookie banner. You can change your choice at any time through the “Cookie settings” link at the bottom of each page. Full details are in our Cookie Policy.

Pages for visitors in the United States. Some pages are intended for visitors in the United States. On these pages, advertising cookies such as the Meta Pixel may run when you arrive, so we can measure which ads bring people to the Site. They record the pages you visit and actions such as starting a checkout or completing a purchase. You can turn this off at any time with the “Privacy choices” link at the bottom of the page. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out.

9a. Your privacy rights if you live in the United States

We don’t sell your personal data for money. Using advertising cookies to measure and target our ads may count as “sharing” or “targeted advertising” under some US state privacy laws. Depending on where you live, you may have the right to:

opt out of this sharing and targeted advertising, using the “Privacy choices” link or a Global Privacy Control signal,
know what personal data we hold about you and get a copy,
correct or delete it,
not be treated differently for using these rights.

To make any other request, email hello@cruzcreative.net. We’ll confirm your identity and reply within 45 days. If we turn down your request, you can appeal by replying to our answer, and we’ll respond within 45 days.

10. Security

We protect your data with appropriate technical and organisational measures, including access controls, two-factor authentication on our accounts and reputable, secure service providers. No online service is completely secure, but we work to protect your data and will tell you and the authorities about any serious breach, as the law requires.

11. Children

Our services are for businesses and are not directed at anyone under 18. We don’t knowingly collect data from children, except where a client sends us project materials showing a minor. In that case, the client must have the consent of the child’s parent or guardian.

12. Automated decisions

We don’t make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

13. Changes to this policy

We may update this Privacy Policy from time to time. We’ll post the current version on the Site with its last-updated date. If we make significant changes, we’ll tell clients and subscribers by email.

14. Contact

For any question about this policy or your data: hello@cruzcreative.net, +34 711 001 320, or by post to Calle Méndez Núñez 88, 38001 Santa Cruz de Tenerife, Spain.

8. Your rights

You have the right to:

access the personal data we hold about you,
correct inaccurate data,
delete your data, where we no longer need it or have no legal basis to keep it,
restrict how we use it,
object to processing based on legitimate interest, including portfolio use and marketing,
data portability, to receive your data in a usable format,
withdraw consent at any time, without affecting processing that took place before.

To exercise any of these rights, email hello@cruzcreative.net. We may ask you to confirm your identity. We’ll reply within one month.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), or to the data protection authority in your own country.

9. Cookies and advertising

The Site uses cookies needed for it to work. We use analytics cookies (such as Google Analytics) and advertising cookies (such as the Meta Pixel) only if you accept them through the cookie banner. You can change your choice at any time through the “Cookie settings” link at the bottom of each page. Full details are in our Cookie Policy.

Pages for visitors in the United States. Some pages are intended for visitors in the United States. On these pages, advertising cookies such as the Meta Pixel may run when you arrive, so we can measure which ads bring people to the Site. They record the pages you visit and actions such as starting a checkout or completing a purchase. You can turn this off at any time with the “Privacy choices” link at the bottom of the page. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out.

9a. Your privacy rights if you live in the United States

We don’t sell your personal data for money. Using advertising cookies to measure and target our ads may count as “sharing” or “targeted advertising” under some US state privacy laws. Depending on where you live, you may have the right to:

opt out of this sharing and targeted advertising, using the “Privacy choices” link or a Global Privacy Control signal,
know what personal data we hold about you and get a copy,
correct or delete it,
not be treated differently for using these rights.

To make any other request, email hello@cruzcreative.net. We’ll confirm your identity and reply within 45 days. If we turn down your request, you can appeal by replying to our answer, and we’ll respond within 45 days.

10. Security

We protect your data with appropriate technical and organisational measures, including access controls, two-factor authentication on our accounts and reputable, secure service providers. No online service is completely secure, but we work to protect your data and will tell you and the authorities about any serious breach, as the law requires.

11. Children

Our services are for businesses and are not directed at anyone under 18. We don’t knowingly collect data from children, except where a client sends us project materials showing a minor. In that case, the client must have the consent of the child’s parent or guardian.

12. Automated decisions

We don’t make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

13. Changes to this policy

We may update this Privacy Policy from time to time. We’ll post the current version on the Site with its last-updated date. If we make significant changes, we’ll tell clients and subscribers by email.

14. Contact

For any question about this policy or your data: hello@cruzcreative.net, +34 711 001 320, or by post to Calle Méndez Núñez 88, 38001 Santa Cruz de Tenerife, Spain.