kreate Compliance & Data
Hub
kreate by Kreative Clan
Onboarding · Trust

Your data, handled with care

Exactly how we treat your accounts and data — ownership, consent, PDPL and GDPR alignment, retention and how you stay in full control from day one.

The principle

You own everything. We operate with permission.

Every account, audience and dataset stays yours. We work through role-based access you grant and can withdraw at any moment.

How your data is handled

Six commitments, in plain English

The rules we operate under for every client, aligned with Saudi PDPL and GDPR principles.

Data ownership

Accounts, pixels, audiences and leads belong to you. We never claim or transfer ownership.

Role-based access

We use least-privilege roles on your accounts — never shared passwords or full ownership.

Consent & cookies

Marketing tags wait for consent. Analytics stays privacy-safe with no PII in events.

PDPL & GDPR aligned

Lawful basis, data-subject rights and minimisation principles are respected throughout.

Retention

We keep only what a live campaign needs, for as long as it’s needed, then remove it.

Clean offboarding

If we stop working together, access is revoked and assets stay intact and yours.

The line we draw

Always & never

A simple boundary that keeps you in control and your data safe.

What we always do

  • Request the minimum role needed, on your own accounts.
  • Keep your business the owner of pages, pixels and audiences.
  • Fire marketing tags only after consent, via Consent Mode v2.
  • Hand back clean access and documentation if we part ways.

What we never do

  • Take ownership of your ad accounts or business assets.
  • Move your audiences or data to accounts you don’t control.
  • Store payment card details or sensitive personal data.
  • Lock you in — you can revoke access in a few clicks.
Platforms we work through

Who processes what

The ad and analytics platforms involved, and how control stays with you on each.

PlatformWhat it processesYour control
MetaAd delivery, pixel/CAPI events, custom audiencesYou own the assets; we hold partner access
Google (Ads & GA4)Ad delivery, analytics, conversionsYou own the property/account; we’re linked users
LinkedInAd delivery, Insight Tag, lead gen formsYou own the page/account; we’re a role user
TikTok / SnapAd delivery, pixel events (if in scope)Shared via your Business Center
A formal Data Processing Agreement (DPA) is available on request and can be signed alongside your contract.

Want the DPA or have a question?

We’re happy to sign a Data Processing Agreement and walk your team or legal through exactly how access and data are handled.