Privacy Policy

This Privacy Policy describes how SL Creatives ("we", "us", or "our") collects, uses, and protects personal information you provide when using our website (slcreatives.co) and related services. By using our website, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

SL Creatives is a performance-based YouTube content growth agency. We provide services including channel SEO, video editing, thumbnail design, sponsorship securing, and content strategy. We operate remotely and serve clients globally.

Contact: slcuts.official@gmail.com

2. Information We Collect

2.1 Information You Provide Directly

When you fill out our contact/booking form or use the Client Portal, we may collect:

• First and last name
• Email address
• YouTube channel URL and channel information
• Subscriber count range and niche category
• Your goals and any additional message you send us
• Waitlist email address (SL Analytics)

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent on each page
• Referring URL
• Device type (desktop / mobile / tablet)

2.3 Client Portal Information

To create a Client Portal account, you'll need a unique Access Key issued to you after signing a Service Agreement. When you create an account we store your name, email address, a one-way SHA-256 hash of your password (never the password itself), your account role, and which access key was used. We also store document interaction history and call scheduling preferences once you're active in the portal.

3. How We Use Your Information

We use your information for the following purposes:

• To respond to your enquiry — contacting you after a form submission to schedule or prepare for a strategy call.
• To deliver our services — using channel information to prepare audits, content plans, and performance reports.
• To send transactional communications — calendar invites, onboarding documents, invoices, and service updates. We do not send unsolicited marketing without your consent.
• To improve our website — understanding how visitors use the site to fix issues and improve the user experience.
• To maintain security — detecting and preventing fraudulent or malicious activity.
• For legal compliance — retaining records as required by applicable law.

We will never sell, rent, or trade your personal information to any third party for marketing purposes.

4. Data Security

We take the security of your data seriously and implement multiple layers of protection:

• HTTPS / SSL Encryption: All communications between your browser and our website are encrypted using TLS (SSL). Our site enforces HTTPS with HSTS headers.
• Security Headers: We apply Content-Security-Policy, X-Frame-Options (DENY), X-Content-Type-Options, Referrer-Policy, and Permissions-Policy headers to protect against clickjacking, MIME-sniffing, and cross-site scripting (XSS) attacks.
• Form Protection: Our contact forms use Google reCAPTCHA v2 to prevent automated bot submissions, along with honeypot fields and client-side rate-limiting to reduce brute-force and spam risks.
• Input Sanitisation: All user-supplied input is stripped of HTML/script tags before processing to prevent injection attacks.
• No Plain-Text Passwords: Client Portal credentials are never stored or transmitted in plain text.
• Limited Data Collection: We collect only the minimum information necessary for the stated purpose.

Despite these measures, no method of internet transmission or electronic storage is 100% secure. If you believe your data has been compromised, please contact us immediately at slcuts.official@gmail.com.

5. Third-Party Services

We use a small number of trusted third-party services that may process data on our behalf:

• Google reCAPTCHA — used on contact forms to detect and block bots. Subject to Google's Privacy Policy.
• Google Fonts — we load web fonts from Google servers, which may log your IP address. Subject to Google's Privacy Policy.
• Unsplash — placeholder photography loaded from Unsplash CDN. Subject to Unsplash's Privacy Policy.
• Cloudflare Pages — our website is hosted on Cloudflare Pages. Cloudflare may collect anonymised access logs. Subject to Cloudflare's Privacy Policy.

We do not use third-party advertising networks, tracking pixels, or social media pixels on our website.

6. Cookies & Tracking

Our website uses minimal, privacy-respecting storage:

• localStorage — used to remember your theme preference (dark/light mode) and client-side rate-limiting counters. This data never leaves your device.
• sessionStorage — used to store your current session's CSRF token and (if applicable) Client Portal session. Cleared when you close your browser tab.
• Google reCAPTCHA cookies — set by Google on the contact page. See Google's cookie policy for details.

We do not use any persistent third-party tracking cookies, analytics cookies, or advertising cookies.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access — request a copy of the personal data we hold about you.
• Right of Rectification — request correction of inaccurate or incomplete information.
• Right of Erasure — request deletion of your personal data ("right to be forgotten").
• Right to Restriction — request that we limit how we use your data.
• Right to Object — object to certain processing of your data.
• Right to Data Portability — request your data in a structured, machine-readable format.

To exercise any of these rights, email us at slcuts.official@gmail.com. We will respond within 30 days.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy or as required by law:

• Contact form enquiries — retained for 12 months, then deleted.
• Active client data — retained for the duration of the engagement plus 2 years.
• Invoices and financial records — retained for 7 years as required by applicable tax law.
• Waitlist emails — retained until SL Analytics launches or until you unsubscribe.

9. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the website after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: slcuts.official@gmail.com
• Response time: Within 24–48 hours