Privacy Policy

This Privacy Policy explains how CreativeIn Tek ("CreativeIn Tek" or "the company") collects, uses, discloses and protects personal information when you visit creativeintek.com, contact CreativeIn Tek, subscribe to updates, or use CreativeIn Tek products and services, including CareTrack, AI Agent and AI Feedback & Reviews.

CreativeIn Tek has offices in Karachi, Pakistan and Lachine, Quebec, Canada. This policy is intended to reflect the requirements of applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25), the EU and UK General Data Protection Regulation (GDPR) where they apply, and the laws of Pakistan.

By using the website or services, you acknowledge the practices described in this policy. If you do not agree with them, please do not use the website or services.

CreativeIn Tek is responsible for the personal information under its control. The person in charge of the protection of personal information (the Privacy Officer) can be contacted at:

• Email: info@creativeintek.com (please use the subject line "Privacy")
• Canada office: Rue Saint-Jacques, Lachine, QC H8R 1C7, Canada
• Pakistan office: Karachi, Pakistan

This policy covers personal information that CreativeIn Tek collects for its own purposes, such as information about website visitors, prospective and current clients, and newsletter subscribers.

When businesses use CreativeIn Tek products, for example clinics using CareTrack or businesses using AI Agent and AI Feedback & Reviews, they may store information about their own patients, customers and staff in those products. In that case the business is responsible for that information (as the "controller" or the organisation that has control of it), and CreativeIn Tek processes it only on the business's behalf, according to its instructions and the applicable service agreement. Questions about how such a business handles your information should be directed to that business. CreativeIn Tek will assist its customers in responding to such requests where appropriate.

Information you provide:

• Contact and project enquiries: name, email address, phone number, company, the service you are interested in, budget range, subject, message and any files you choose to attach.
• Newsletter: your email address.
• Demo, pricing and plan enquiries: the details you enter in the enquiry form.
• Clients and product users: account details such as name, business name, email address, phone number, role, login credentials (passwords are stored as one-way hashes) and billing details.
• Communications: emails, messages and calls you exchange with CreativeIn Tek, including support requests.

Information collected automatically: technical information such as IP address, browser type, device information, pages visited, referring page and the date and time of access, recorded in server and security logs.

Information processed through products: data that businesses enter into or process through CreativeIn Tek products, which may include their patients' or customers' names, contact details, appointment and visit records, health-related information, messages and feedback. This information is processed as described in section 3.

Please do not include health information or other sensitive personal information in contact form messages or attachments.

The website uses only cookies that are strictly necessary for it to work, such as a session cookie that keeps authorised administrators signed in to the content management system. The website does not currently use advertising cookies or third-party tracking technologies for marketing purposes.

If analytics or other non-essential cookies are introduced in the future, this policy will be updated and consent will be requested where the law requires it. You can block or delete cookies in your browser settings, although blocking strictly necessary cookies may prevent parts of the website from working.

• To respond to enquiries, prepare proposals and communicate about projects
• To provide, operate, maintain and support products and services, including onboarding and data migration
• To manage accounts, billing, invoicing and payments
• To send newsletters and updates you have subscribed to
• To secure the website and services, prevent fraud and misuse, and diagnose technical problems
• To improve the website, products and services
• To comply with legal, tax, accounting and regulatory obligations, and to establish, exercise or defend legal claims

Personal information is used only for the purposes for which it was collected, or for compatible purposes permitted or required by law. CreativeIn Tek does not sell personal information.

Where the GDPR applies, CreativeIn Tek relies on the following legal bases: performance of a contract, or steps taken at your request before entering into one (for example, responding to an enquiry or providing a service); legitimate interests, such as securing the website, improving services and communicating with business contacts, balanced against your rights; consent, for example for newsletters, which you can withdraw at any time; and compliance with legal obligations.

In Canada, CreativeIn Tek relies on your consent, which may be express or implied depending on the sensitivity of the information and the circumstances. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, although this may affect the ability to provide certain services.

Some CreativeIn Tek products include optional AI features, such as AI Agent and the AI receptionist in CareTrack. When a business enables these features, the content of relevant messages and the business information needed to answer them are sent to third-party AI service providers to generate replies, and voice notes may be transcribed. These features are switched on and configured by the business using them.

AI-generated responses can be inaccurate or incomplete and are not a substitute for professional advice. CreativeIn Tek does not sell this data, and AI service providers process it under their own terms and data-processing commitments.

CreativeIn Tek shares personal information only as described below:

• Service providers that host, store, transmit or process information on CreativeIn Tek's behalf, such as cloud hosting and storage providers, email providers, messaging providers (including WhatsApp business messaging services), AI service providers, payment processors and professional advisers. They may use the information only to provide their services and are expected to protect it.
• Customers, in relation to information processed on their behalf in CreativeIn Tek products.
• Legal and safety reasons, where required by law, court order or a competent authority, or where reasonably necessary to protect the rights, property or safety of CreativeIn Tek, its clients or others.
• Business transfers, in connection with a merger, acquisition, financing or sale of all or part of the business, subject to appropriate confidentiality protections.

CreativeIn Tek operates from Pakistan and Canada, and its service providers may store or process information in other countries, including countries in Europe, North America and Asia. Personal information may therefore be transferred to, stored in and accessed from countries other than the one where you live. Privacy laws in those countries may differ, and information may be accessible to the courts and authorities of those countries.

Where required by law, CreativeIn Tek assesses such transfers and takes reasonable steps, such as contractual protections, so that transferred information receives an adequate level of protection.

• Enquiries and related correspondence: generally up to 24 months after the last contact, unless a business relationship follows.
• Newsletter subscriptions: until you unsubscribe.
• Client and account records: for the duration of the relationship and afterwards for as long as needed for legal, tax, accounting or contractual purposes.
• Customer data in products: according to the customer's instructions and the service agreement. Deleted records may be kept for a limited recovery period before permanent deletion, and backup copies are kept for a limited time (generally up to 14 days) before being overwritten.
• Server and security logs: for the limited period needed for security and troubleshooting.

When personal information is no longer needed, it is securely deleted or anonymised.

CreativeIn Tek uses reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information, such as encrypted connections (HTTPS), hashed passwords, role-based access controls, separation of each customer's data, restricted administrative access and regular backups.

No method of transmission or storage is completely secure, so absolute security cannot be guaranteed. You are responsible for keeping your account credentials confidential and for notifying CreativeIn Tek promptly of any suspected unauthorised access.

If a confidentiality incident involving personal information occurs, CreativeIn Tek will take reasonable measures to reduce the risk of harm and prevent similar incidents, keep a record of the incident, and notify affected individuals, customers and the relevant authorities where required by applicable law, including where an incident presents a risk of serious injury.

Depending on where you live, you may have the right to:

• access the personal information held about you and obtain a copy
• correct inaccurate or incomplete information
• request deletion, or request that dissemination of your information cease, where the law allows
• withdraw your consent
• object to or restrict certain processing
• receive your information in a structured, commonly used technological format, where applicable
• be informed of decisions based exclusively on automated processing, where applicable

To exercise these rights, email info@creativeintek.com. CreativeIn Tek may need to verify your identity and will respond within the time required by law, generally within 30 days. Some requests may be limited by legal obligations or the rights of others. If your information is held by a business that uses CreativeIn Tek products, please contact that business directly.

If you have a concern about how personal information is handled, please contact the Privacy Officer first so that it can be addressed. You may also have the right to file a complaint with a privacy authority, such as the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or a data protection authority in the European Union or the United Kingdom.

The website and services are intended for businesses and are not directed to children. CreativeIn Tek does not knowingly collect personal information from children through the website. Information about minors that is stored in products, such as patient records kept by a clinic, is controlled by the business using the product.

The website may contain links to third-party websites and services. CreativeIn Tek is not responsible for their content or privacy practices, and their own privacy policies apply.

CreativeIn Tek may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date, and significant changes will be communicated where required by law.

For questions or requests about this Privacy Policy or personal information, contact the Privacy Officer at info@creativeintek.com, or write to CreativeIn Tek, Rue Saint-Jacques, Lachine, QC H8R 1C7, Canada.