This Privacy Policy describes how CREATIVEIMAGEAI LTD (“Company”, “we”, “us”, or “our”) collects, processes, and safeguards personal information when you visit or use ez-skins.org (the “Website” or the “Platform”).
We are committed to processing personal data responsibly and transparently, in compliance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
CREATIVEIMAGEAI LTD
Company number: 16694311
Registered address:
1 St. Katharines Way
London, England, E1W 1UN
Email: info@ez-skins.org
For the purposes of applicable data protection laws, CREATIVEIMAGEAI LTD acts as the Data Controller responsible for determining how personal data is processed.
2. Types of Personal Data We Collect
Depending on how you interact with the Platform, we may collect several categories of personal information.
2.1 Information Provided by Users
When registering or communicating with us, you may provide:
your name and contact information, including email address;
account login credentials and profile details;
messages, enquiries, or other communications sent to our support team.
2.2 Transaction and Payment Information
When using services involving payments or payouts, we may process:
records relating to transactions carried out on the Platform;
limited payment identifiers received from payment processors;
confirmation details relating to completed payments or payouts.
Please note that we do not store full payment card numbers or sensitive authentication data.
2.3 Verification and Compliance Information
To comply with legal obligations and regulatory requirements, we may collect:
identity verification information required for KYC or AML procedures;
documents or additional information necessary for regulatory compliance.
2.4 Technical and Usage Information
When you access the Platform, certain technical information may be automatically collected, including:
IP address and approximate location data;
device type, operating system, and browser information;
log records, access timestamps, and usage interactions;
cookies and similar tracking technologies (see our Cookie Policy).
3. Purposes for Processing Personal Data
We process personal information for several operational and legal purposes, including:
providing access to and maintaining the functionality of the Platform;
registering and managing user accounts;
facilitating payments, payouts, and related transactions;
detecting and preventing fraud, misuse, or security threats;
fulfilling legal and regulatory obligations, including AML and KYC requirements;
responding to user enquiries and providing customer support;
improving the reliability, security, and performance of the Platform.
4. Legal Grounds for Processing
Our processing of personal data is based on one or more of the following legal grounds:
Performance of a contract — where processing is required to provide services requested by users;
Compliance with legal obligations — where we must process data to meet regulatory, financial, or tax requirements;
Legitimate interests — such as maintaining platform security, preventing fraud, and improving services;
Consent — where applicable, particularly for non-essential cookies or optional processing activities.
5. Disclosure and Sharing of Personal Data
We may disclose personal information to third parties where necessary to operate the Platform or comply with legal obligations. Such parties may include:
payment processors and financial institutions involved in transaction processing;
identity verification and compliance service providers performing KYC or AML checks;
security and fraud prevention partners;
professional advisers such as lawyers, auditors, or compliance consultants;
governmental bodies, regulators, or law enforcement authorities where disclosure is legally required.
We do not sell, lease, or otherwise commercially distribute personal data to third parties.
6. International Transfers of Personal Data
In certain cases, personal information may be transferred outside the United Kingdom or the European Economic Area (EEA).
Where such transfers occur, we ensure appropriate safeguards are implemented, which may include:
Standard Contractual Clauses (SCCs) approved by relevant authorities;
other lawful mechanisms permitted under applicable data protection legislation.
7. Data Retention
Personal data is retained only for the period necessary to fulfil the purposes described in this Policy and to meet legal obligations.
Typical retention periods may include:
KYC and AML documentation — retained for a minimum of 5 years after the termination of the business relationship;
financial and transaction records — retained in accordance with statutory accounting and taxation requirements;
customer support communications — retained for internal operational, compliance, and audit purposes.
8. Your Data Protection Rights
Depending on applicable law, you may have the right to:
obtain confirmation and access to your personal data;
request correction of inaccurate or incomplete information;
request deletion of personal data under certain conditions;
request restriction of processing in specific circumstances;
object to certain types of processing;
withdraw previously given consent where processing relies on consent;
request transfer of your data to another service provider where applicable.
9. Security of Personal Data
We implement appropriate technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, or alteration.
These measures include:
encryption of sensitive information where appropriate;
authentication procedures and access control systems;
monitoring tools designed to detect suspicious activity.
Where payment processing is involved, we work with partners that follow recognised security standards such as PCI DSS.
10. Automated Processing and Monitoring
Some internal processes, such as fraud prevention or compliance screening, may involve automated analysis systems.
These mechanisms are used to protect the Platform and its users and are implemented with appropriate safeguards to prevent unjustified or purely automated decisions with legal impact.
11. Children’s Data
The Platform is intended for individuals 18 years of age or older.
We do not knowingly collect personal data from individuals under this age. If we become aware that such information has been collected inadvertently, we will take appropriate steps to remove it.
12. Changes to This Privacy Policy
We may revise or update this Privacy Policy periodically to reflect changes in legislation, technological developments, or updates to our services.
Any updated version will be published on the Platform with a revised “Last updated” date. Continued use of the Platform following such updates indicates acceptance of the revised Policy.
13. Contact Information
If you have any questions regarding this Privacy Policy or how we process personal data, please contact us at:
