Design Sparks

Design Sparks handles a wide range of user information through their services, from basic account details to payment data and uploaded content. Understanding how this information is collected, used, and protected is crucial for users to make informed decisions about their privacy. This guide explores Design Sparks' data handling practices, including their approaches to consent, security, and user rights under privacy regulations.

Data Collection Practices

Design Sparks collects several types of user information through their services, including account credentials, service usage data, troubleshooting/support data, payment information, and uploaded content. When users register or use third-party sign-on access, the company collects name and contact information, business contact information, marketing preferences, and account login credentials.

The company processes this information for various purposes, including providing and improving services, fulfilling contractual obligations, providing access and support, and maintaining business operations. Service usage records, including page access logs and browser/device information, help the company improve its platform and display dynamic content. Uploaded content is retained only during processing and then discarded, while personal information is held only when necessary for business operations or legal requirements.

Throughout the collection process, Design Sparks requires explicit consent for each specific use of personal information. Consent is obtained through affirmative action and can be easily withdrawn by users. The company securely stores personal information in backup archives and isolates it from further processing until deletion is possible. All collected information is handled in compliance with UK and EU data protection regulations.

Information Usage and Processing

After collection, Design Sparks employs user data across multiple business operations. The company analyzes service usage records to enhance platform functionality and display dynamic content tailored to user preferences. Data is also utilized for customer support purposes, allowing the company to address service inquiries and maintain operational efficiency.

Financial data, including credit card numbers and billing addresses, is protected through secure processing methods to facilitate subscription payments and manage financial transactions. The company employs session cookies to maintain user identification across multiple page interactions while storing non-sensitive query settings such as language preferences and time filters.

Design Sparks processes uploaded content directly within their application's memory during the upload procedure, then securely removes the data after completion of the processing cycle. When retaining personal information, the company maintains detailed records of consent obtained through specific affirmative actions for each data use purpose. Users have the ability to easily withdraw their consent at any time, and the company maintains accurate documentation of these consent requests for compliance verification.

Consent and Data Management

Design Sparks requires explicit, affirmative consent for each specific use of personal information, and records of consent are maintained for compliance verification. Consent can be obtained through various means, including registration for services, third-party sign-on access, and direct communication with the Data Protection Officer.

The company can provide users with their personal data in a structured, commonly used, and machine-readable format upon request. Users can transmit this data to another controller without hindrance from Design Sparks, as documented in the Privacy Policy. The company acknowledges that while their services utilize artificial intelligence systems, including ChatGPT developed by OpenAI, to process user-provided information and generate heuristic reasoning for creativity suggestions, they do not guarantee the accuracy, appropriateness, or usefulness of these suggestions. Users are advised to use the suggestions at their own discretion and bear full responsibility for any consequences arising from their use.

Design Sparks provides specific guidelines for using their services with minors. While the service generates suggestions intended to entertain and educate minors and children under 16, the appropriateness of these suggestions varies significantly. The adult user is responsible for assessing the specific maturity level, sensitivities, and personal factors of each minor when evaluating potential risks of any app-generated suggestions. The adult user must apply their own knowledge and understanding of the particular minor when making determinations about sharing app-generated suggestions.

The company's liability disclaimer states that they disclaim any liability for the adult user's implementation of any app-generated suggestion with minors. By allowing minors access to the app's output, the adult user accepts complete accountability for undertaking their own informed risk assessment.

Data Security and Storage

CebAI securely stores personal information in dedicated backup archives, isolating it from further processing until deletion is possible. The company adheres to strict data management protocols, ensuring that sensitive information remains protected through comprehensive access controls and regular security audits.

Cookies play a crucial role in maintaining user sessions and managing query settings within the Design Sparks application. These files contain minimal data used for anonymous unique identification, with the company employing session cookies to recognize users across multiple page interactions. All cookie-related data is stored locally on the user's device and not shared with third parties, enhancing both data security and user privacy.

To further protect user information, Design Sparks implements robust security measures throughout its data processing pipeline. This includes regular security audits, encryption protocols for data transmission, and secure data storage practices. The company complies with UK and EU data protection regulations, maintaining detailed records of consent for each specific data use purpose.

In the event of data breaches or security incidents, Design Sparks maintains strict incident response protocols. The company works closely with external security experts to address any vulnerabilities promptly, ensuring that user information remains protected through proactive security measures. All data processing activities are subject to periodic review by an independent third-party auditor, providing additional assurance of compliance with established security standards.

The company's data retention policies ensure that personal information is retained only for as long as necessary. Uploaded content is processed directly within the application's memory and securely removed after completion of processing cycles. Personal information is retained only when required for business operations or legal obligations, with all data securely deleted or anonymized when no longer needed. Backups are maintained until deletion is possible, at which point all data is irreversibly deleted to protect user privacy.

Design Sparks provides users with clear control over their personal data through straightforward privacy settings and easy-to-use account management tools. Users can manage their cookie preferences, update their contact information, and control their marketing options directly through the account settings interface. The company also enables users to submit Subject Access Requests within one calendar month, allowing them to view and verify the information held about them.

Your Rights and Control

Users have several rights regarding their personal information held by Design Sparks, outlined in the company's Privacy Policy and accessed through straightforward account management tools. To exercise these rights, individuals can contact the Data Protection Officer via email at info@designsparks.io.

Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format. This enables users to download their information for their own purposes or transfer it to another service provider if desired. The company processes requests for personal data within one calendar month, allowing users to verify the information held about them.

For data accuracy, users can request rectification of any incorrect information. The company maintains records of consent for each specific use of personal information, ensuring that any corrections are processed in accordance with the original affirmative action required to obtain consent.

Users have the right to have their data erased when it is no longer necessary for the purposes for which it was collected. The company follows defined retention policies, securely deleting or anonymizing data when it is no longer needed for business operations or legal requirements. Backups containing personal information are maintained until deletion is possible, at which point all data is irreversibly deleted to protect user privacy.

The right to restrict processing allows users to limit how their data is used by Design Sparks. This might include preventing further marketing communications or limiting the types of services accessed through the platform. The company complies with all requests for data portability, enabling users to transfer their personal information to another controller without interference from Design Sparks.

To manage these rights effectively, the company provides clear options within their account settings interface. Users can easily update their cookie preferences, manage their contact information, and control their marketing options to maintain their privacy preferences. These controls help users maintain their personal data in alignment with their evolving privacy needs and preferences.