Privacy Policy

Creative Nomads ("we", "us") is a curated directory operated by Marketing Treats that connects Indonesian remote workers with global employers. This policy explains what personal data we collect, how we process it, and the rights you have under the EU General Data Protection Regulation (GDPR).

By using Creative Nomads you agree to this policy. If you do not agree, please do not create an account or submit personal data through our website.

Data controller: Marketing Treats (operating Creative Nomads).
Contact: marketingtreats.id@gmail.com

Talent accounts. When you create a profile, we collect: full name, headline, bio, profile photo, portfolio images and titles, skills, role type, availability, English level, hourly rate range, LinkedIn URL, portfolio website URL, and the email address you sign up with.

Employer accounts. When you sign up to hire, we collect: full name, company name, company website, and the work email address you sign up with.

Contact requests. When an employer contacts a talent through our form, we store the employer's identity, the talent contacted, the message, and any optional budget or timeline notes.

Cookies. We use a single first-party cookie to remember your cookie-consent choice. We do not use analytics, advertising, or third-party tracking cookies.

• To create and maintain your account.
• To display approved talent profiles publicly so employers can browse and contact them.
• To deliver contact requests from employers to talents via email, including the employer's reply-to address.
• To review and approve or reject submitted talent profiles.
• To send transactional emails (e.g. verification, approval notices).

Talent email addresses are never displayed publicly. All employer-to-talent communication is routed through our contact form.

We process your personal data on the following legal bases under the GDPR:

• Consent — when you create a profile and choose what to publish.
• Contract — to operate the directory service you signed up for.
• Legitimate interest — to maintain quality through admin review and to keep the platform secure.

We use trusted infrastructure providers to operate the service. They process data on our behalf under data processing agreements:

• Lovable Cloud — hosting, database, authentication, and file storage for talent profiles and portfolio images.
• Transactional email provider — to deliver verification, approval, and contact-request emails.

We aim to keep all personal data within the European Union (Frankfurt region) where technically possible.

We retain account data for as long as your account exists. Contact-request records are retained for up to 24 months to help us moderate and improve the service. You can request deletion at any time (see below).

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at marketingtreats.id@gmail.com. We will respond within 30 days.

We use only one cookie, cn_cookie_consent, to remember your choice on our consent banner. It expires after 365 days. No analytics, no advertising, no third-party trackers are present on this site at this time.

We use row-level security on our database so that talents can only modify their own profiles, employers can only access their own contact requests, and administrative actions are gated by a server-side role check.

We may update this policy as the service evolves. Material changes will be highlighted on the homepage or via email. The "Last updated" date at the top of this page always reflects the current version.

Questions, deletion requests, or anything else — write to marketingtreats.id@gmail.com.