Last updated: September, 9th, 2025

TLDR: We collect account, order, and device data to run the store, fulfill purchases, and improve the site. You control marketing and cookie settings. Privacy rights by region are listed below. Use support@creatorclones.com for requests.

1) Who we are and how to contact us

Creator Clones Pte. Ltd. operates the website at https://creatorclones.com and related services that link to this Privacy Policy. References to “Creator Clones”, “we”, “us”, or “our” mean Creator Clones Pte. Ltd. For any questions about this Policy or your data rights, contact support@creatorclones.com.

Our products are intended for individuals aged 18+. Do not use our Services if you are under 18.

2) Scope of this Policy

This Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. The Policy applies to your use of our website, online store, customer support channels, marketing communications, and any sales and events we operate. If you do not agree with our practices, please do not use the Services.

3) Information we collect

3.1 Information you provide to us

You may give us personal information when you create an account, place an order, contact support, join marketing lists, post reviews, or otherwise interact with our Services. Typical categories include: name, email address, phone number, billing and shipping addresses, and account credentials. If you contact support, we may collect any information you choose to include in the message. Information must be accurate and kept up to date.

3.2 Payment information

When you make a purchase, payment data is collected and processed by our payment providers. We do not store full payment card numbers. Provider is PayPal, which processes card payments (Visa, Mastercard, American Express, and Discover) and PayPal account payments under its own privacy notice.

3.3 Information collected automatically

We automatically collect certain device and usage data when you access the Services, such as IP address, device identifiers, browser type, operating system, language settings, referring pages, approximate location based on IP, and information about how and when you use the website. Data collected automatically helps operate, secure, and improve the Services and supports internal analytics.

3.4 Location data

Approximate location data may be inferred from your IP address to help us understand where our audience is located and to deliver content appropriately. Device settings may allow you to limit or disable location features. Certain features may not work without location information.

3.5 Sensitive information

We do not seek to collect sensitive personal information as defined under certain laws. Do not submit sensitive data through the Services.

3.6 Information from third parties

We generally do not obtain personal information about you from third parties outside of our service providers that operate at our direction.

4) How we use personal information

We use your information only where we have a lawful basis to do so and for specific, limited purposes:

• To create and manage your account, authenticate you, and maintain your profile.
• To process orders, payments, and deliveries, and to handle returns or exchanges where permitted by our policies.
• To provide customer support and respond to requests.
• To send transactional messages about your orders, account notices, and policy updates.
• To send marketing communications if you opt in, and to honor your preferences. You can unsubscribe at any time.
• To protect against fraud, manage security incidents, maintain service integrity, and enforce our terms.
• To understand usage patterns, improve our website and product offering, and measure campaign performance.
• To comply with legal obligations and respond to lawful requests.
• To protect vital interests where necessary.

5) Legal bases for processing

5.1 European Economic Area and United Kingdom

We process personal data only where at least one lawful basis in Article 6 GDPR or UK GDPR applies. The main bases we rely on are:

1. a) Consent [Art. 6(1)(a)]
   We ask for consent when required, for example for non-essential cookies and similar technologies, certain types of email or SMS marketing to new subscribers, and optional profiling for ad relevance. You can withdraw consent at any time in the Cookie Consent Manager, the unsubscribe link in our messages, or by emailing support@creatorclones.com. Withdrawal does not affect prior processing. 
2. b) Contract [Art. 6(1)(b)]
   We process data to take steps at your request and perform our contract with you. Examples include creating your account, processing payments, shipping orders, providing support, and managing warranty claims. 
3. c) Legal obligation [Art. 6(1)(c)]
   We process data where needed to satisfy tax, accounting, recordkeeping, sanctions, and consumer-protection duties, and to respond to lawful requests from competent authorities. 
4. d) Vital interests [Art. 6(1)(d)]
   In rare situations, we may process data to help protect life or safety, such as communicating with carriers or authorities during a product safety incident. 
5. e) Legitimate interests [Art. 6(1)(f)]
   We process data for purposes that are useful to running our business in ways users would reasonably expect and that do not override your rights. Examples include:

• website and account security, fraud monitoring, and abuse detection
• service analytics and product improvement using aggregated or de-identified insights
• customer communications about similar products you already bought, subject to easy opt-out
• internal reporting and audience measurement to understand what features customers use

We apply the legitimate interests balancing test and document the outcome in a Legitimate Interests Assessment. We review that assessment if the context changes materially. You can object to processing based on legitimate interests at any time. 

Special categories of personal data

We do not seek to collect special category data. If in the future there is a clear need, we would only process it where an Article 9 condition applies, such as explicit consent or public health grounds, and only for the narrow purpose stated. 

Cookies, analytics, and electronic marketing in the EEA/UK

• Cookies and similar tech. We obtain consent for non-essential cookies and similar technologies, consistent with the ePrivacy rules. Essential cookies operate on the basis of our legitimate interests to provide the service you request. Manage settings in our Cookie Consent Manager. 
• Direct marketing by email or SMS. In the UK, we either obtain consent or rely on the “soft opt-in” for existing customers for similar products if we gave you a simple way to opt out at collection and in every message. We honor opt-outs promptly. EEA rules are materially similar and rely on consent unless a comparable national soft opt-in is available. 

5.2 Canada

Our Canadian program follows the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws in Alberta, British Columbia, and Quebec. We obtain meaningful consent for collection, use, and disclosure unless an exception applies. Consent can be express or implied depending on the sensitivity of the information and the context. We design our notices so people understand the purposes, the parties involved, and the consequences of sharing data, and we offer clear ways to say no. 

When we rely on consent in Canada

• creating and managing your account
• processing your purchases and sending order updates
• non-essential cookies and analytics
• email or SMS marketing, where permitted
• warranty and support communications you request

When we may process without consent under PIPEDA
We may collect, use, or disclose limited data without consent in specific cases allowed by law, including to investigate a breach of an agreement or a contravention of law, to prevent or detect fraud or financial abuse, to respond to an emergency that threatens life, health, or security, or where obtaining consent would be impracticable due to lack of a meaningful relationship and the risk of serious harm. We apply the “appropriate purposes” test in section 5(3) and document our rationale. 

Provincial laws

• Alberta and British Columbia. These provinces have private-sector laws deemed substantially similar to PIPEDA. We align our practices accordingly, including requirements around reasonableness, security safeguards, and requests for access and correction. 
• Quebec Law 25. Quebec’s Act respecting the protection of personal information in the private sector, as modernized by Law 25, requires express consent for certain uses of sensitive information and restricts reuse for a new purpose unless the new use is consistent with the original purpose or falls within limited statutory exceptions, such as fraud prevention or providing a service requested by the individual. Commercial prospection is not considered a “consistent purpose.” We also honor the law’s rules on automated decisions and minors’ consent. 

5.3 Practical examples of how these bases apply on our site

• Checkout and delivery. We process your name, contact details, addresses, and order contents to fulfill your purchase. Lawful basis: contract. Retention aligns with tax and accounting duties. Lawful basis for retention: legal obligation. 
• Account security and fraud controls. We monitor logins and order patterns to prevent abuse and fraud. Lawful basis: legitimate interests recognized by regulators and courts, with an internal balancing test on file. 
• Marketing to existing UK customers. If you bought a similar product before, we may email you about related items, provided we offered a simple opt-out at collection and in each message. Lawful basis: PECR soft opt-in plus legitimate interests. You can opt out anytime. 
• Non-essential cookies and Google Analytics. We request consent before setting non-essential cookies. If you refuse, the site still works with essential cookies only. Lawful basis: consent under ePrivacy rules. 
• Warranty support. When you contact support, we use relevant order and device data to resolve the issue. Lawful basis: contract and legitimate interests in customer support, with minimal data collection. 
• Emergency notifications. If a safety recall is required, we may contact you using the details on your account. Lawful basis: vital interests and legal obligation where applicable. 

5.4 Your choices

Where we rely on consent, you can withdraw it at any time using:

• the Cookie Consent Manager for cookies and analytics
• the unsubscribe link in marketing emails or by replying STOP to SMS
• an email to support@creatorclones.com for any other consent withdrawal

Where we rely on legitimate interests, you can object to the processing. We will stop unless we have compelling grounds that override your interests or the processing is needed to establish, exercise, or defend legal claims. 

6) Cookies and online tracking

6.1 How we use cookies

We use cookies and similar technologies to keep your session secure, remember preferences, help the store function, and analyze performance. Some cookies are essential for the website to work. Others help us improve the site by measuring how visitors use it. Certain third parties set cookies to provide analytics or advertising services on our behalf. Your browser or device may offer settings to control cookies. Our Cookie Notice provides details about categories of cookies and options to manage them.

6.2 Google Analytics only

Our analytics stack uses Google Analytics. Google Analytics helps us understand how visitors engage with the site. Data may include IP address, device identifiers, and usage data that Google processes to provide aggregated reports. You can opt out of Google Analytics by using available tools and browser settings, and by adjusting cookie preferences on our site.

6.3 Advertising and retargeting

We may work with advertising partners that use cookies, pixels, and similar tools to show you relevant ads, including reminders about items you viewed or left in your cart, consistent with your communication preferences. Some US state laws treat targeted advertising or cross-context behavioral advertising as a type of data sharing. You can opt out of targeted advertising as described in the US rights section below and via our cookie controls.

6.4 Do Not Track and Global Privacy Control

Most browsers offer a Do Not Track setting that does not yet have a uniform industry response. We currently do not respond to DNT signals. Where required by US state law, we honor the Global Privacy Control signal for opt-outs related to sale or sharing of personal information.

7) When we share personal information

We share personal information only in the situations described below:

• Service providers and contractors. Vendors that host our site, process payments, analyze traffic, provide customer support tools, ship orders, or perform other services at our direction may access personal information as needed to provide those services. Contracts require service providers to keep data confidential and secure, and to use it only as instructed.
• Business transfers. Personal information can be disclosed during a corporate transaction such as a merger or acquisition.
• Legal compliance and safety. We will disclose information to comply with applicable law, respond to lawful requests, or protect our rights, property, users, or the public.

We do not sell personal information for money. Where US state laws define “sale” or “sharing” to include targeted advertising or certain analytics, you can opt out as described below.

8) How long we keep personal information

We keep personal information only as long as needed to fulfill the purposes described in this Policy, to comply with legal requirements, and to resolve disputes. Criteria include the type of data, the purpose of collection, and legal retention periods. When data is no longer needed, we will delete or anonymize it. If immediate deletion is not possible due to backup or archival systems, we will store it securely and isolate it until deletion is feasible.

9) Security

We maintain technical and organizational measures designed to protect personal information, including access controls, encryption in transit where appropriate, and vulnerability management. No method of transmission or storage is fully secure. You use the Services at your own risk and should access them in a secure environment.

10) Children and age restrictions

Our Services are for adults aged 18+. We do not knowingly collect personal information from individuals under 18. If we learn that we have information about a user under 18, we will delete it promptly. Parents and guardians should monitor minors’ online activity.

11) Your privacy rights

11.1 EEA, UK, and Switzerland

Depending on your location, you may have the right to: access a copy of your personal data, request correction or deletion, restrict processing, object to certain processing, and request data portability. You may also have the right not to be subject to automated decisions that have legal or similarly significant effects. You can exercise these rights by contacting support@creatorclones.com. We will respond consistent with applicable law. You also have the right to lodge a complaint with your data protection authority.

11.2 Canada

You may have the right to access, correct, or delete your personal information and to withdraw consent where consent is the basis for processing. Certain exceptions may apply. You can contact us using the details above.

11.3 Australia and New Zealand

You can request access to or correction of your personal information at any time. If you believe we are handling your personal information unlawfully, you may lodge a complaint with the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

11.4 United States state privacy rights

If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have rights to: access details about personal information we maintain about you, obtain a copy, correct inaccuracies, delete information, and opt out of targeted advertising or certain sharing. Some states recognize the Global Privacy Control signal for opt-outs. We will honor applicable opt-outs and will not discriminate against you for exercising your rights. To submit a request, email support@creatorclones.com. If we decline your request as permitted by law, you may appeal by emailing support@creatorclones.com with the subject line “Privacy Appeal”.

11.5 How to exercise your rights

Submit your request to support@creatorclones.com. We will verify your identity using information already on file and may request additional details if needed to protect your account. If you use an authorized agent, we may require proof of authorization and may still need to verify your identity. We will respond within the timelines required by law. Marketing emails include an unsubscribe link. Even if you opt out of marketing, we may still send transactional emails related to your orders or account.

12) International transfers

Data may be processed in the country where you live and in other countries where our service providers operate. Laws in those countries may differ from the laws where you live. We implement safeguards for cross-border transfers in accordance with applicable legal requirements, such as contractual protections. Contact us if you want more information about these safeguards.

13) Your choices

13.1 Account information

You can view and update certain account details by logging into your account. If you want to delete your account, contact us. We will deactivate or delete your account in our active systems within a reasonable period, subject to data we need to retain for fraud prevention, legal obligations, or dispute resolution.

13.2 Cookies and analytics

You can manage cookie preferences through our on-site controls and your browser settings. Some browsers and privacy tools block third-party cookies by default. Blocking cookies may limit certain features. You can opt out of Google Analytics using available opt-out tools and settings.

13.3 Marketing

You can unsubscribe from marketing emails at any time by clicking the link in the message or contacting support@creatorclones.com. We will honor your request promptly. You may still receive non-marketing messages.

14) User generated content

If you post reviews or other content, only share information you are comfortable making public. Reviews must reflect your genuine experience and must comply with our Terms and Conditions. We may moderate, remove, or edit content that violates the Terms or applicable law. If your content includes personal information, that information may be collected and used by others who view it.

15) Third-party sites and services

Our Services may include links to third-party websites, plugins, or services. Third parties operate under their own privacy practices. Review those policies, as we are not responsible for third-party content or privacy measures.

16) Automated decision making

We do not engage in automated decision making that produces legal or similarly significant effects on individuals. If that changes, we will update this Policy and provide mechanisms for you to exercise related rights consistent with applicable law.

17) Changes to this Policy

We may update this Policy as our practices evolve or as laws change. The “Last updated” date shows the most recent version. For material changes, we may provide a more prominent notice or contact you directly where required. Continued use of the Services after changes take effect means you accept the updated Policy.

18) Region-specific disclosures

18.1 California Shine the Light

California residents may request information about categories of personal information disclosed to third parties for their direct marketing in the previous calendar year and the names of those third parties. Submit requests to the contact details below.

18.2 Categories of information under California law

Depending on your interactions with us, we may collect identifiers, customer records information, commercial information, internet or other network activity, geolocation data, audio or visual information, and professional information. We have not sold personal information in the past 12 months. We may disclose categories of information to service providers for business purposes, such as processing payments, shipping, analytics, security, and customer support.

19) Data retention detail

Subject to legal requirements, we generally retain account identifiers and transaction history for as long as you have an account. If you close your account or if your account becomes inactive, we will retain only what is necessary for tax, accounting, fraud prevention, or legal compliance, then delete or anonymize remaining data according to our retention schedule. Backups and logs cycle out on a schedule. Where deletion from backups is not immediately feasible, data is isolated and protected until overwritten.

20) Our commitment to accuracy and fairness

We work to keep personal information accurate, complete, and current. You can help by keeping your account information up to date and by contacting us if you believe information we hold is inaccurate. We do not engage in practices that unfairly surprise users, and we limit processing to the purposes stated here or compatible purposes you would reasonably expect based on your interactions with the Services.

21) Your controls for ads and tracking

Advertising technology partners may process data from cookies and similar tools to show ads that are more relevant to you. Choices include using our on-site cookie controls, your browser settings, the Global Privacy Control signal in supported browsers, and platform-specific ad settings offered by major advertising platforms. Opting out will not eliminate all ads but should reduce targeted ads based on your activity. We strive to honor choices in a consistent manner across the site.

22) Communications preferences

Transactional messages are necessary to fulfill orders and manage your account. Marketing messages are optional. You can unsubscribe from marketing at any time. If you unsubscribe, we will remove you from promotional lists but may still send important notices about your orders, account security, or policy updates. We do not charge fees for exercising your communication choices.

23) Data requests: how we verify and respond

When you submit a privacy rights request, we will take steps to verify your identity using information already associated with your account or order history. We may ask for additional information to protect your security and to prevent fraud. If you use an authorized agent, we will require proof of authorization and may still ask you to confirm the request directly. We will respond within the periods required by applicable law and will explain any denial we are permitted to make. Appeals are available where state law provides such a process.

24) International data subject requests

If you are in the EEA, UK, or Switzerland, you can contact your supervisory authority if you believe our processing does not comply with law. You can also contact us directly at support@creatorclones.com so we can try to resolve your concern promptly. If we transfer data internationally, we apply appropriate safeguards and will share more details upon request.

25) Age checks and restricted content

Our Services concern adult products. We may implement age or identity checks where required by law. Attempts to bypass age controls may result in account restriction. Reports of underage access are reviewed promptly and addressed according to our policies.

26) Contact details

Creator Clones Pte. Ltd.
192 PANDAN LOOP, #04-15, PANTECH BUSINESS HUB, SINGAPORE 128381
Singapore
Email: support@creatorclones.com