Privacy Policy

This Privacy Policy describes how Creative 3D Technologies, Inc., a Texas corporation (“Company,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you visit or interact with the website at https://creative3dtechnologies.com/ and related pages that link to this Policy (the “Site”).

This Policy is written for the Site as it operates on the Effective Date: an informational website. We are not selling products online. We are not running marketing email, text, or advertising campaigns. If that changes, we will update this Policy before the new activity begins, or at the time it begins if an update in advance is not practical, and we will obtain any consent the law requires.

1. Who This Policy Covers

This Policy applies to personal information we collect through the Site and through email or other messages you send us because of the Site. It does not apply to:

1. Information we collect under a separate customer, supplier, employment, investor, or nondisclosure agreement, except to the extent that information was first submitted through the Site. Those relationships are governed by the applicable agreement and, where required, a separate notice.
2. Information processed solely on behalf of a customer inside a customer’s own systems. We do not operate a hosted software service through the Site.
3. Third-party websites that the Site links to. Those sites have their own policies.
4. Offline information, except where we combine it with Site information and this Policy says so.

2. Our Role

For personal information described in this Policy, Company is the business that decides why and how the information is processed. Under the Texas Data Privacy and Security Act, Texas Business and Commerce Code Chapter 541 (the “TDPSA”), that role is called a “controller,” if and to the extent the TDPSA applies.

The TDPSA generally does not apply to a small business as defined by the U.S. Small Business Administration, except that a small business may not sell sensitive personal data without consent. Company does qualify as a small business under the current SBA size standard for our industry. Regardless of that status, we follow the practices in this Policy. If we are a controller under the TDPSA or a similar law, the rights in Section 10 are available to residents of the relevant state.

3. Information We Collect

We collect only what we need to operate an informational site and to respond to people who contact us. The categories below describe the Site as configured on the Last Updated date. Items marked “if enabled” apply only if that feature is actually turned on.

3.1 Information you give us.

If you use a contact form, email us, register for an event, or otherwise reach out, we may collect:

1. Identity and contact details, such as name, job title, company, email address, and telephone number.
2. The content of your message, including any information you choose to include about a project, industry, or purchasing interest.
3. Event details, if you register for an event we host or attend and registration is collected through the Site or a linked form.
4. Correspondence records, including the fact that we replied.

Please do not send us government identification numbers, payment card numbers, health information, precise geolocation, or information about children. We do not ask for those categories through the Site. If you send them anyway, we will delete them unless we are legally required to keep them.

3.2 Information collected automatically.

When you visit the Site, our hosting provider and, if enabled, analytics tools may collect:

1. Device and browser data, such as browser type, operating system, device type, and language.
2. Network data, such as IP address and approximate location derived from IP address (city or region, not precise GPS).
3. Usage data, such as pages viewed, referring URL, date and time, and general interaction with the Site.
4. Security data, such as logs of failed requests, administrative access attempts, and error reports.

We use this information to deliver the Site, keep it secure, understand aggregate traffic, and fix errors. We do not use it to build advertising profiles. We do not sell it.

3.3 Cookies and similar technologies.

A cookie is a small file stored on your device. Similar technologies include pixels, local storage, and software development kits. As of the Last Updated date, the Site uses only essential cookies necessary for the Site to function. We do not use advertising or tracking cookies.

3.4 Information from other sources.

If you are an existing customer, supplier, advisor, or investor and you also use the Site, we may combine Site contact details with information we already hold under that relationship, so that we do not create duplicate records and so that we can route your inquiry to the right person. We do not buy personal information from data brokers for use on the Site.

4. How We Use Personal Information

We use personal information for these purposes:

1. To operate, maintain, and secure the Site.
2. To respond to inquiries, event registrations, and other messages you send us.
3. To understand aggregate use of the Site and to fix technical problems.
4. To comply with law, respond to lawful requests, and establish or defend legal claims.
5. To enforce our Terms of Use and protect the rights, property, and safety of Company, our users, and others.
6. To create deidentified or aggregated information that does not identify you. We will not try to reidentify that information except to test our deidentification method, and we will not treat reidentified information as outside this Policy.

We do not use Site personal information for cross-context behavioral advertising. We do not use it to train a general-purpose artificial intelligence model. If an internal tool uses automation to sort an inquiry (for example, to route a contact-form message), that tool does not make a decision that produces a legal or similarly significant effect about you. A person reviews business inquiries before we act on them.

5. How We Share Personal Information

We share personal information only as described below. We do not sell personal information. We do not share it for cross-context behavioral advertising. Under the TDPSA, “sale” means disclosure to a third party for monetary or other valuable consideration. A disclosure to a service provider to perform a service for us is not a sale.

1. Service providers (processors). Hosting (Base44), email delivery (Resend), security, and professional advisors that process personal information only on our instructions, for the purposes in this Policy, and under a written agreement that limits their use. No analytics provider is in use. No separate form or cookie tool is in use.
2. Professional advisors. Lawyers, accountants, and insurers, where needed for advice, claims, or compliance.
3. Business transfers. A buyer, investor, or successor in connection with a merger, financing, reorganization, or sale of assets, subject to confidentiality and to this Policy or a successor policy that provides comparable protection for information collected under this Policy.
4. Legal and safety. A government authority, opposing party, or other person when we believe in good faith that disclosure is required by law, legal process, or a request we reasonably regard as lawful, or when disclosure is needed to protect rights, safety, or the security of the Site.
5. With your direction. When you ask us to share information, or when you intentionally post it.

We do not allow service providers to use Site personal information for their own marketing.

6. Analytics, Advertising, and Marketing

Advertising. We do not place advertising cookies, social pixels, or similar marketing tags on the Site. We do not buy or sell advertising audiences. If that changes, we will update this Policy and, where required, ask for consent before nonessential advertising tags run.

Analytics. We do not use a third-party analytics tool.

Marketing messages. We do not send promotional email or text messages. If you email us, we may reply. That reply is a response to your inquiry, not a marketing program. If we later send promotional messages, we will include a working opt-out in each email, honor opt-outs within the time required by the CAN-SPAM Act and applicable state law, and obtain prior express consent before any autodialed or prerecorded marketing call or text.

7. Sensitive Data, Children, and Financial Information

We do not seek sensitive personal data through the Site. Sensitive personal data includes, as applicable, government identifiers, precise geolocation, information revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data, personal information of a known child, and the contents of certain private communications. We do not sell sensitive data. If we ever process sensitive data for a purpose that requires consent, we will obtain consent first.

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact info@creative3dtechnologies.com and we will delete it.

We do not collect payment card or bank account information through the Site. Purchases, if any, are handled offline under a separate agreement and a separate payment process.

8. Retention

We keep personal information only as long as we need it for the purposes in this Policy, unless a longer period is required or permitted by law.

1. Contact-form and email inquiries: three (3) years after our last communication about the inquiry, unless a resulting contract requires a longer period.
2. Server and security logs: ninety (90) days, unless we need a longer period to investigate an incident.
3. Analytics data: not applicable; no analytics tool is in use.
4. Records we must keep for tax, corporate, export, or litigation reasons: for the period required by that obligation.

When we no longer need personal information, we will delete it or deidentify it. Backup copies are overwritten per the hosting provider’s standard backup schedule.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, and alteration. Measures appropriate to an informational site include access controls on administrative pages, encryption in transit (HTTPS), limits on who can read inquiry mailboxes, and vendor agreements that require confidentiality and security.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. If we become aware of a breach of system security affecting Site personal information that Texas or another applicable law requires us to notify, we will notify affected individuals and regulators as that law requires. Notices under the Texas Identity Theft Enforcement and Protection Act, Texas Business and Commerce Code Section 521.053, are sent without unreasonable delay and in any case not later than the statutory outside date, to the extent that statute applies.

10. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding personal information we hold about you. We will honor a request to the extent applicable law requires, and we will not discriminate against you for exercising a right.

1. Access. To confirm whether we process your personal information and to obtain a copy.
2. Correction. To correct inaccurate personal information.
3. Deletion. To delete personal information you provided or that we collected, subject to exceptions such as completing a transaction you requested, security, legal compliance, and establishing or defending legal claims.
4. Portability. To receive personal information you provided, in a portable and, where technically feasible, readily usable format.
5. Opt out of sale, sharing, and targeted advertising. We do not sell personal information and do not share it for targeted or cross-context behavioral advertising. You may still submit an opt-out request, and we will record it.
6. Opt out of certain profiling. We do not profile you in furtherance of a decision that produces a legal or similarly significant effect.
7. Appeal. If we deny a request, you may appeal as described in Section 10.3.
8. Withdraw consent. Where we rely on consent, you may withdraw it. Withdrawal does not affect processing that occurred before withdrawal.

10.1 Texas residents.

If the TDPSA applies to Company, a Texas resident has the rights listed above with respect to personal data, as those terms are defined in Texas Business and Commerce Code Chapter 541. We will respond to a request within forty-five (45) days after receipt. We may extend that period once by an additional forty-five (45) days when reasonably necessary, and we will tell you why within the original period. If we decline a request, we will explain why and how to appeal. We will respond to an appeal within sixty (60) days. If we deny an appeal, we will provide a way to contact the Texas Attorney General.

We will not sell sensitive personal data without consent. We do not sell sensitive personal data.

If we process personal data for targeted advertising, or sell personal data, we will also honor a universal opt-out signal, such as the Global Privacy Control, as required by TDPSA Section 541.055 when that obligation applies. Because we do not sell personal data or process it for targeted advertising, a universal opt-out signal has no advertising audience to suppress. We will still treat a recognized signal as an opt-out request for those activities if we begin them.

10.2 Other U.S. state residents.

Residents of other states with comprehensive privacy laws may have similar rights. We will apply the rights required by the resident’s state law. California residents: we do not sell or share personal information as those terms are used in the California Consumer Privacy Act. We have not sold or shared personal information in the preceding twelve (12) months. We do not use or disclose sensitive personal information for purposes that require a “limit the use” link. We will not discriminate for exercising CCPA rights.

10.3 How to submit a request.

Email info@creative3dtechnologies.com with the subject line “Privacy Request,” or mail Creative 3D Technologies, Inc., 1200 BMC Drive, Suite 300, Cedar Park, Texas 78613, Attention: Privacy. Include your name, the email address you used with us, the state where you reside, the right you want to exercise, and enough detail for us to find the information. We will verify your identity to a reasonable degree of certainty before fulfilling an access, correction, deletion, or portability request. We may ask for additional information if we cannot verify you from the information we already hold. We will use verification information only to verify the request.

You may use an authorized agent where the law allows. We may require the agent to prove authorization and, where permitted, we may still verify your identity directly. We will not charge a fee unless a request is manifestly unfounded, excessive, or repetitive, and the law allows a fee or a refusal.

To appeal a denial, reply to our denial email or write to info@creative3dtechnologies.com with the subject line “Privacy Appeal” within forty-five (45) days after we send the denial. A person who was not the original decision-maker will review the appeal where that separation is practical given our size.

11. International Visitors

The Site is operated from the United States. If you access it from outside the United States, you understand that your information will be processed in the United States, where privacy laws may differ from those in your country.

We do not currently offer goods or services to people in the European Economic Area, the United Kingdom, or Switzerland, and we do not monitor their behavior. If that changes, we will update this Policy and put in place any required transfer mechanism before we rely on it. If you are in one of those places and you contact us, we will process the information you send only to respond to you and to meet legal obligations.

12. Do Not Track and Global Privacy Control

Some browsers send a “Do Not Track” signal. There is no uniform industry response to that signal, and the Site does not change its behavior solely because of a Do Not Track header. We do honor a recognized universal opt-out mechanism as described in Section 10.1 if we engage in a sale or in targeted advertising. We do not do either as of the Last Updated date.

13. Third-Party Sites

The Site may link to third-party sites, including video hosts, maps, news outlets, and social networks. If you follow a link, that site’s privacy policy applies. We are not responsible for those practices.

14. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy on the Site and change the Last Updated date. If a change materially reduces your rights or expands our use of personal information in a way the law treats as requiring notice or consent, we will provide that notice or consent before the change takes effect, or as soon as practical afterward if advance notice is not possible. The posted Policy is the operative version.

15. Contact

Creative 3D Technologies, Inc.

1200 BMC Drive, Suite 300

Cedar Park, Texas 78613

Privacy requests: info@creative3dtechnologies.com

Legal notices: info@creative3dtechnologies.com

Telephone: (512) 884-6575

If you are a Texas resident and you wish to contact the Texas Attorney General about a privacy complaint, you may do so through the Office of the Attorney General at https://www.texasattorneygeneral.gov/.