Privacy & Cookie Policy
Last updated: 15 June 2026
1. Who we are (data controller)
CDM Creator is operated by DEUS XAI Sp. z o.o., the controller responsible for your personal data:
DEUS XAI Sp. z o.o.
Rybaki 22/14, 61-884 Poznań, Poland
NIP: PL7822961628 · REGON: 543194481 · KRS: 0001204126
Email: info@cdmcreator.co.uk
If you have any question about this policy or how we handle your data, contact us at the email above.
2. What data we collect
- Information you give us: your email address, which you provide when you sign up to receive your free RAMS document and product information.
- Information collected automatically: if you consent to analytics cookies, we collect technical and usage data such as your IP address (truncated by Google Analytics), device and browser type, pages viewed, referring source and interactions on the site.
We do not knowingly collect data from anyone under 16, and the site is intended for business and professional users.
3. How we use your data and our legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Deliver your free RAMS document and give you access to the CDM Creator panel | Performance of a contract / steps taken at your request prior to a contract (Art. 6(1)(b)) and your consent (Art. 6(1)(a)) | |
| Send you product updates and marketing about CDM Creator | Your consent (Art. 6(1)(a)); for existing customers, our legitimate interest under the "soft opt-in" (UK PECR) | |
| Measure and improve how the site performs | Analytics / cookie data | Your consent (Art. 6(1)(a)) |
| Keep the site secure and operational | Strictly necessary technical data | Our legitimate interests (Art. 6(1)(f)) |
You can withdraw your consent at any time (see "Your rights" and "Cookies" below). Every marketing email includes an unsubscribe link.
4. Who we share it with
We never sell your personal data. We share it only with service providers ("processors") who help us run the site, under contracts that require them to protect it:
- FormSubmit (form-to-email service) — processes your submitted email solely to deliver it to our inbox.
- Google Analytics (Google Ireland Limited / Google LLC) — provides website analytics, only if you accept analytics cookies.
- Our hosting provider — stores and serves the website.
We may also disclose data where required by law or to protect our legal rights.
5. International transfers
Some of our providers (for example Google) may process data on servers outside the UK and the European Economic Area, including in the United States. Where data is transferred internationally, it is protected by appropriate safeguards such as the European Commission's and the UK's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.
6. How long we keep it
- Email / sign-up data: kept until you ask us to delete it or unsubscribe, and for a reasonable period afterwards to honour your preferences and meet legal obligations.
- Analytics data: retained in Google Analytics according to our configured retention period (up to 14 months) and then aggregated.
7. Your rights
Under the UK GDPR and EU GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased ("right to be forgotten");
- restrict or object to our processing;
- data portability;
- withdraw consent at any time, without affecting processing already carried out.
To exercise any of these rights, email info@cdmcreator.co.uk. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority:
- UK: the Information Commissioner's Office (ICO) — ico.org.uk.
- EU / Poland: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) — uodo.gov.pl, or your local data protection authority.
8. Cookies
Cookies are small files stored on your device. We use two categories:
Strictly necessary
Required for the site to function and to remember your cookie choice. These do not require consent. We store your cookie preference locally on your device (browser storage).
Analytics (optional — consent required)
We use Google Analytics 4 to understand how the site is used. These cookies are set only after you click "Accept all" on our cookie banner. Until then, analytics storage is disabled using Google Consent Mode. Typical cookies:
| Cookie | Provider | Purpose | Typical duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes users | Up to 2 years |
| _ga_<ID> | Google Analytics | Maintains session state | Up to 2 years |
Managing your choice
You can accept or reject non-essential cookies using the banner shown on your first visit. To change your decision later, clear this site's data in your browser settings and the banner will reappear, or adjust cookies directly in your browser. Rejecting analytics cookies will not affect your ability to use the site or sign up.
9. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Significant changes will be highlighted on this page.
10. Contact
Questions, requests or complaints about your data? Email us at info@cdmcreator.co.uk or write to DEUS XAI Sp. z o.o., Rybaki 22/14, 61-884 Poznań, Poland.