Privacy Policy
Last updated: 6 October 2026. This policy explains what data this website is designed to process, why, and what choices you have.
1. Scope and site identity
This Privacy Policy applies to creative-dynamics.online and its public pages. Creative Dynamics is presented as an independent educational website about prostatitis and related urinary or pelvic-health topics. No registered company name, registration number, VAT number or tax identifier was supplied for publication, so this policy does not invent one.
Operational correspondence details supplied for the website are Ground Floor, Delta Towers, Westlands, Nairobi 00400, Kenya; +254 790 999 149; [email protected].
2. Categories of data this site may process
Contact form data
If you use the contact form, the site receives the name, email address, subject and message you choose to submit. The form also uses an anti-spam honeypot and a session token to reduce automated or forged submissions.
Technical and server data
The site code itself does not build behavioural profiles. However, the hosting environment may create standard server logs containing technical information such as IP address, request time, requested path, response status, browser user-agent and referrer. The exact hosting provider is not identified in the supplied project data, so this policy does not name or invent one.
Cookie preference
The website can store a small first-party preference cookie named cd_consent so it remembers whether you selected essential-only or permitted analytics. Contact-form sessions may also use a PHP session cookie. No advertising cookie is intentionally set by the current build.
3. Why data is processed
Contact data is used to receive, route and respond to website enquiries; maintain correspondence where needed; investigate abuse or technical problems; and protect the site against automated submissions. Technical logs, where generated by the server, may be used for security, availability, troubleshooting and abuse prevention. Cookie preferences are used to respect your stated choice about optional analytics.
4. Kenyan data-protection framework
The site is targeted to Kenya and is designed with the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021 in mind. Those rules establish data-protection principles and rights including transparency, access, objection, correction and deletion in applicable circumstances. The Office of the Data Protection Commissioner (ODPC) is Kenya’s supervisory authority for personal-data protection.
This policy is an operational description, not a legal opinion about which specific legal basis applies to every possible interaction. Where consent is relied upon, it should be freely given and capable of withdrawal. Where processing is necessary to respond to a request, only data reasonably needed for that purpose should be used.
5. Sensitive health data
Kenyan law treats personal data relating to health as highly protected. The public contact form is intentionally not designed to collect medical records, laboratory results, diagnosis details, prescriptions, identification documents or detailed symptom histories. Please do not submit them.
Creative Dynamics is not a healthcare provider and does not use the contact form to provide diagnosis or treatment. If you need medical advice, contact a qualified healthcare professional through an appropriate healthcare channel.
6. Cookies, local storage and analytics
In the current build, GA4, Google Tag Manager, Cookiebot, reCAPTCHA and Google Maps identifiers are not configured. Therefore the site does not intentionally load those services. The consent mechanism is present so future analytics configuration can remain conditional on user choice.
If GA4 or GTM is later configured, the template is designed to load analytics only when the cd_consent preference is set to analytics. Advertising-related storage is not part of the current configuration. The Cookie Policy gives more detail.
7. Recipients and third parties
Contact messages are intended for the website operator at [email protected]. Technical data may be processed by the hosting infrastructure required to serve the website. Because no hosting company or email-service provider was supplied, none is named here. If a real affiliate relationship is later activated, related tracking and recipient details should be disclosed before deployment.
8. International transfers
No dedicated cross-border transfer mechanism is implemented in the current site code. Hosting or email infrastructure could involve processing outside Kenya depending on the services chosen by the operator. The operator should assess those providers and apply appropriate safeguards before deployment where required.
9. Retention
The site does not create a local database of contact submissions. Email messages received through the form should be retained only for as long as reasonably needed to answer the enquiry, maintain necessary records, resolve disputes or meet legal obligations. Server-log retention depends on the hosting environment and should be configured proportionately. The consent preference cookie is set for approximately 180 days unless cleared earlier.
10. Your data-protection rights
Depending on the circumstances, Kenyan data-protection law may give you rights to be informed about processing, request access, object to processing, request correction of false or misleading information, seek deletion where applicable, and exercise other rights provided by law. You may also be able to raise a complaint with the Office of the Data Protection Commissioner.
To make a privacy request concerning this website, email [email protected]. We may need enough information to identify the relevant correspondence without collecting unnecessary identification data.
11. Security and data minimisation
The contact form uses server-side validation, a CSRF token, a honeypot field and length limits. The website does not ask users to create accounts. These measures reduce some risks but no internet service can guarantee absolute security. The strongest privacy practice here is minimisation: do not submit sensitive health material through a general website inbox.
12. Children
The content is written for adults seeking general health information. The website does not intentionally solicit personal data from children. A child or guardian seeking health support should use an appropriate healthcare service rather than the general site contact form.
13. External and affiliate links
The intended business model is affiliate publishing, but no partner or affiliate destination is configured in this build. If affiliate links are added later, the privacy impact—including cookies, click identifiers, partner recipients and any cross-border processing—must be reflected in this policy before those links are activated.
14. Changes to this policy
This policy may change when the site’s features, integrations, hosting arrangements or legal requirements change. Material changes should be reflected by updating the date and the relevant sections.
15. Contact
Email: [email protected]
Phone: +254 790 999 149
Address: Ground Floor, Delta Towers, Westlands, Nairobi 00400, Kenya
This document describes the current implementation and supplied project data. It does not invent a legal entity or professional healthcare role that was not provided.