Overview
This policy describes what information Creative Athletes collects through creativeathletes.com, how that information is used, and the choices available to you.
It applies to this website and to inquiries submitted through it. It does not cover separate written agreements between Creative Athletes and a client organization, which carry their own confidentiality and data-handling terms.
The site is designed to operate with the minimum data needed to respond to inquiries, keep the site available, and prevent abuse.
Information we collect
Information you provide through the contact form
When you submit the form on the contact page, we receive the fields you complete: your name, work email, organization (optional), inquiry type, and the contents of your message. Submitting the form is the primary way to share information with us.
Information collected automatically
When the contact form is submitted, our server records the IP address and browser user agent associated with the submission. These fields are used to apply rate limits, investigate suspected abuse, and meet basic security and audit obligations.
Standard web request information (such as IP address, user agent, referring page, and pages visited) may also be processed in transit by the hosting infrastructure to deliver the site and protect it from common attacks.
Cookies and similar technologies
The site uses only the cookies required for it to function. There are no advertising cookies, no analytics cookies, and no third-party trackers at this time. The cookies page describes the current posture and how it will change if that changes.
How we use information
Information collected through the site is used to:
- Respond to inquiries and conduct related professional communication
- Evaluate fit for an engagement and route inquiries internally
- Keep the website available, performant, and protected from abuse
- Maintain operational and security records
- Meet legal, regulatory, or contractual obligations
We do not sell personal information. We do not use inquiry information for advertising. We do not enrich inquiry records with third-party data sources.
Where information is stored and processed
The website is hosted on managed infrastructure operated by our hosting and platform providers. Inquiry submissions are stored in a managed Postgres database operated by Supabase, with access limited to authorized personnel. Notification emails are delivered through Resend, which processes the message contents in order to send the notification.
These providers process information on our behalf under their own privacy and security commitments. We review them as part of our own operating practice. They are not authorized to use inquiry information for their own purposes.
Spam prevention and security logging
To keep the contact form usable and free from automated abuse, the server applies several controls when a submission is received:
- Server-side validation of all submitted fields
- A hidden honeypot field that real users do not see
- A minimum time threshold between page load and submission
- A short-window rate limit by IP address
- Storage of IP address and user agent alongside the submission
Submissions that fail these checks may be silently discarded or rejected. Logs are kept for a limited operational window and used to investigate misuse if it occurs.
Sharing with third parties
We share information only with the service providers needed to operate the website and respond to inquiries, and only as needed for those purposes. We do not share inquiry information for marketing.
Information may also be disclosed where required by law, in response to lawful requests by public authorities, or to protect the rights, property, or safety of Creative Athletes, our clients, or others.
Retention
Inquiry records are retained for as long as the relationship or potential relationship is active, and for a reasonable period after, to support reference, follow-up, and audit. Operational logs and security records are kept for shorter windows aligned to their purpose.
Records are removed or anonymized when they are no longer needed, unless a legal obligation requires us to keep them longer.
Security practices
We apply reasonable technical and organizational measures to protect information from unauthorized access, alteration, disclosure, or destruction. These include access controls on systems that store inquiry data, encryption of data in transit, and dependence on managed providers with established security practices.
No system can be guaranteed fully secure. We do not claim certification against any specific security framework on this site. For engagements in regulated environments, additional controls are agreed in writing.
Your choices and requests
You can use the site without providing personal information. If you have submitted an inquiry and would like the associated record updated or removed, or if you want to ask what information we hold about you, use the contact form and describe the request. We will respond within a reasonable period.
Depending on your location, you may have additional rights under applicable law. We will honor those rights where they apply.
Children’s privacy
The website is intended for a professional audience. It is not directed to children under 13, and we do not knowingly collect personal information from children.
International users
The site is operated from the United States. If you access it from outside the United States, information you submit may be processed in the United States or in other jurisdictions where our service providers operate.
Changes to this policy
We update this policy when our practices change, when the site changes, or when applicable obligations change. The effective date at the top of this page reflects the most recent update. Material changes will be reflected in the page content rather than only in metadata.
Contact
For questions about this policy or about how your information is handled, the fastest route is the contact form. Questions of a strictly privacy nature can also be sent to hello@creativeathletes.com.