Legal

Privacy Policy

Effective date: 21 August 2026
Last updated: 21 August 2026

1. Who we are

Garaj Creative ("Garaj Creative", "we", "us", "our") is a design, development and marketing agency operating from 447 Broadway, 2nd Floor, New York, NY 10013, United States. This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit garajcreative.com (the "Site"), use our client portal at my.garajcreative.com, contact us, or engage us for services (together, the "Services").

Garaj Creative operates alongside a related Australian business, Garaj Pty Ltd (garaj.com.au). Where your engagement is with the Australian entity, that entity's privacy policy applies. This Policy covers the Site and the Services provided by Garaj Creative.

By using the Site or the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Site or the Services.

2. Scope

This Policy applies to personal information we collect through the Site, the client portal, our forms, our email and text messaging, our phone calls, and in the course of delivering work to our clients. It does not apply to third-party websites we link to, or to data we process solely as a service provider on behalf of a client (for example, data inside a client's own CRM or website that we maintain - in that case the client's privacy policy governs, and we act on their instructions).

3. Information we collect

Information you give us directly. Your name, business or company name, job title, email address, postal address, telephone and mobile number, the content of your enquiry, your budget and project requirements, files and assets you send us for a project, login credentials for systems you ask us to work on, billing and payment details, and any other information you choose to provide by form, email, text message, phone or during a meeting.

Information collected automatically. When you visit the Site we and our analytics providers may collect your IP address, approximate location derived from it, device and browser type, operating system, referring URL, the pages you view, the links you click, the dates and times of your visits, and similar technical and usage data. We collect this through cookies and similar technologies - see section 7.

Information from third parties. We may receive information about you from advertising and analytics platforms, from publicly available business sources, from referral partners who have your permission to introduce you to us, and from payment processors confirming a transaction.

Information we do not intentionally collect. We do not seek sensitive personal information such as Social Security numbers, government identifiers, health information, biometric data, precise geolocation, or information about race, religion, sexual orientation, or political views. Please do not send us this information.

4. How we use your information

We use personal information to:

• respond to your enquiry and provide the quotes, proposals and information you request;
• schedule, confirm and remind you of consultations and meetings;
• deliver, manage and support the Services you have engaged us for, including requesting the approvals, files and feedback we need to complete your project;
• provide access to and support for the client portal;
• issue invoices, process payments and manage our accounts;
• provide customer support and respond to your questions and complaints;
• operate, secure, troubleshoot and improve the Site and the Services;
• send you newsletters, case studies or marketing communications where you have asked to receive them or where permitted by law, and always with a way to unsubscribe;
• comply with our legal, tax and regulatory obligations, enforce our Terms of Use, and establish, exercise or defend legal claims; and
• detect, investigate and prevent fraud, abuse and security incidents.

5. SMS and mobile information

Where you have given us your mobile number and your consent, Garaj Creative may contact you by SMS or text message about your enquiry, your quote, your bookings, your project and your account.

How you opt in. We only send text messages to people who have expressly asked to receive them, in one of the following ways: by entering a mobile number and ticking the SMS consent checkbox on a form on garajcreative.com; by asking us verbally to text you during a phone call, video call or meeting; by agreeing to receive text messages in a signed proposal, service agreement or client onboarding document; or by texting our business number first. We record the date, time and source of your consent. We never buy, rent or obtain mobile numbers from third parties.

What we send. Replies to your enquiries, quotes and proposals and follow-ups on them, appointment confirmations and reminders, project progress updates, requests for information or approvals we need to complete your work, and invoice and account notifications. We do not send unsolicited marketing by text message.

No sharing of mobile data. No mobile information will be sold, rented or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Your mobile number is disclosed only to the messaging service providers we use strictly to deliver the messages you have asked to receive - for example our SMS gateway provider and our customer relationship management system - and those providers are contractually prohibited from using it for their own marketing.

Frequency, charges and opting out. Message frequency varies and depends on your enquiry or the stage of your project. Message and data rates may apply. You can opt out at any time by replying STOP to any message from us, after which you will receive one confirmation message and no further texts. Reply HELP to any message, email hello@garajcreative.com, or call (646) 205-2152 for assistance. Carriers are not liable for delayed or undelivered messages.

Consent to receive text messages is never a condition of purchasing any product or service from us. Opting out of SMS does not affect the Services we provide to you - we will simply continue to contact you by email or telephone. Full details of our messaging program are set out in the SMS Messaging Terms section of our Terms of Use.

6. How we share your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not sold or shared personal information in the preceding twelve months.

We disclose personal information only in these circumstances:

• Service providers. Vendors who perform functions on our behalf under contract, such as website and email hosting, customer relationship management, SMS and email delivery, scheduling, cloud storage, analytics, accounting and payment processing. They may use the information only to provide services to us.
• Professional advisers. Our lawyers, accountants, insurers and auditors, where reasonably necessary.
• Related entities. Garaj Pty Ltd (Australia), where your project is delivered by our combined team. Our mobile data restriction in section 5 applies without exception, including to related entities.
• Legal and safety. Where required by law, subpoena, court order or regulator, or where we reasonably believe disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or a security incident.
• Business transfer. In connection with a merger, acquisition, financing or sale of assets, subject to the acquirer honoring this Policy. Mobile opt-in data and consent are not transferred for marketing purposes.
• With your direction. Where you ask us to share information, for example with a hosting provider, domain registrar or platform we are configuring on your behalf.

7. Cookies and tracking technologies

The Site uses cookies and similar technologies to keep the Site working, remember your preferences, understand how the Site is used, and measure the effectiveness of our advertising. Cookies fall into these categories:

• Strictly necessary - required for the Site and portal to function and to keep them secure. These cannot be switched off.
• Analytics - help us understand which pages are visited and how the Site performs.
• Advertising - used by advertising platforms to measure campaign performance and, where applicable, to show you our ads on other sites.

You can control cookies through your browser settings, and you can usually opt out of analytics and advertising cookies through the relevant provider's own controls. Blocking some cookies may affect how parts of the Site work.

Do Not Track and Global Privacy Control. Browsers may transmit a "Do Not Track" signal; there is no common industry standard for responding to it and we do not currently respond to it. Where required by applicable law, we treat a Global Privacy Control (GPC) signal as a valid opt-out request for the browser that sends it.

8. How long we keep your information

We keep personal information only as long as necessary for the purposes described in this Policy. In general: enquiry records are kept for up to two years from your last contact with us; client project records, contracts and deliverables are kept for the life of the engagement and for seven years afterwards to meet tax, accounting and legal requirements; records of SMS consent and opt-out are kept for as long as we may need to demonstrate compliance, and opt-out records are kept indefinitely so that we do not message you again; and website analytics data is kept in accordance with the retention settings of our analytics providers. When information is no longer needed we delete it or de-identify it.

9. How we protect your information

We maintain administrative, technical and physical safeguards designed to protect personal information, including access controls on a need-to-know basis, encryption in transit, multi-factor authentication on our core systems, vendor due diligence, and staff confidentiality obligations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information we will notify you and any regulator as required by law.

10. Your privacy rights and choices

Everyone. You may ask us to access, correct or delete the personal information we hold about you, ask us to stop contacting you, or ask a question about this Policy, by emailing hello@garajcreative.com. You can unsubscribe from marketing emails using the link in any such email, and from text messages by replying STOP.

Residents of US states with comprehensive privacy laws (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others as those laws take effect) may have the right to: confirm whether we process your personal information and access it; obtain a copy in a portable format; correct inaccuracies; delete it; opt out of sale, targeted advertising, or profiling with legal or similarly significant effects (note that we do not sell personal information, share it for cross-context behavioral advertising, or engage in such profiling); and appeal a decision we make about your request.

To exercise a right, email hello@garajcreative.com with the subject line "Privacy Request" and tell us which right you wish to exercise. We will verify your identity, usually by confirming information we already hold or by confirming control of the email address on file, and will respond within the timeframe the applicable law requires (generally 45 days, extendable once). You may use an authorized agent where the law allows; we may ask for proof of authorization. We will not discriminate against you for exercising any privacy right. If we deny your request you may appeal by replying to our decision, and we will respond to the appeal within the period the law allows.

California "Shine the Light". California residents may request information about personal information disclosed to third parties for their direct marketing purposes. We do not make such disclosures.

11. Children's privacy

The Site and the Services are intended for businesses and for adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Third-party sites and services

The Site links to third-party websites and services that we do not control. We are not responsible for their content or their privacy practices, and this Policy does not apply to them. Review their privacy policies before providing personal information.

13. International users

The Site is operated from the United States and our systems and service providers may store and process information in the United States, Australia and other countries. If you access the Site from outside the United States, you understand that your information may be transferred to, stored in, and processed in countries whose data protection laws may differ from those in your own country.

14. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top shows when it was last revised. If we make material changes we will take reasonable steps to notify you, for example by posting a notice on the Site or emailing you. Your continued use of the Site or the Services after the changes take effect means you accept the revised Policy.

15. Contact us

Questions, requests or complaints about this Policy or your personal information:

Garaj Creative
447 Broadway, 2nd Floor
New York, NY 10013
United States

Email: hello@garajcreative.com
Phone: (646) 205-2152