Privacy Policy
Privacy Policy
Privacy Policy
Privacy Policy
KD Capital AB
Last updated: 24 July 2026
1. Who we are
Creators Amplify is a brand operated by KD Capital AB, a company registered in Sweden with its registered office in Gothenburg (the "Company", "we", "us", "our").
We are the data controller for the personal data described in this policy. If you have any questions about how we handle your data, our contact details are at the end of this document.
2. What we collect
We only collect what we need to run our business and deliver our services.
Information you give us:
Name, email address, phone number
Company name, role, website and social media handles
Information you provide when booking a call or filling in an application or contact form (revenue, audience size, business goals, and similar)
Billing and invoicing details
Anything you send us in emails, messages, calls or shared documents
Information we collect automatically:
IP address, browser and device type, approximate location
Pages visited, time on site, referral source
Cookie and pixel data (see section 7)
Information from third parties:
Analytics and advertising platforms (for example Meta, Google, LinkedIn, TikTok)
Scheduling, CRM and payment providers
Publicly available business and social media information
We do not intentionally collect sensitive personal data, and we ask that you don't send it to us.
3. Why we use it, and our legal basis
What we use it forLegal basis (GDPR)Responding to enquiries and booking callsLegitimate interest / steps prior to a contractDelivering our services and managing the client relationshipPerformance of a contractInvoicing, payment and bookkeepingLegal obligationImproving our website, services and marketingLegitimate interestSending marketing emails and running adsConsent, or legitimate interest where permittedPreventing fraud and protecting our legal rightsLegitimate interest
Where we rely on consent, you can withdraw it at any time. Withdrawing consent doesn't affect anything we did lawfully before you withdrew it.
4. Who we share it with
We never sell your personal data.
We share it only with:
Service providers who process data on our behalf — hosting, email, CRM, scheduling, analytics, advertising, payment processing, accounting and cloud storage. These providers act on our instructions under written agreements.
Our team and subcontractors, where they need it to deliver your project.
Professional advisers, such as accountants and lawyers.
Authorities, where we're required to by law.
5. When your data leaves the EU
Some of the tools and providers we rely on are based outside the EU/EEA, most commonly in the United States. That means your data may be stored or processed there.
In plain terms: countries outside the EU/EEA don't always give personal data the same level of legal protection that Sweden and the rest of the EU do. So before we use a provider outside the EU/EEA, we make sure one of the following is in place:
The European Commission has formally decided that the country in question protects personal data to an adequate standard, or
The provider has signed the EU's Standard Contractual Clauses — a set of contractual commitments that legally bind them to protect your data to EU standards, backed by any additional safeguards required.
If neither is available, we don't use the provider.
6. How long we keep it
We keep personal data only for as long as we have a genuine reason to keep it.
That reason might be an ongoing relationship or open project, an unresolved enquiry, an accounting or legal obligation, or the need to establish or defend a legal claim.
Once none of those reasons apply, we delete or anonymise the data. We review what we hold from time to time, and where we no longer need something, we may simply delete it. You can also ask us to delete your data at any time — see section 8.
7. Cookies and tracking
Our website uses cookies and similar technologies to make the site work, understand how it's used, and measure our advertising. Non-essential cookies are only set with your consent, which you can change or withdraw at any time through your browser settings or our cookie banner where available.
8. Your rights
Under the GDPR you have the right to:
Access the personal data we hold about you
Have inaccurate data corrected
Have your data erased ("right to be forgotten")
Restrict or object to how we process your data
Receive your data in a portable format
Withdraw consent at any time
Object to direct marketing at any time
To exercise any of these, just email us. We'll respond within one month.
If you're not happy with how we've handled your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
9. Security
We use appropriate technical and organisational measures to protect your data, including access controls, encrypted connections and reputable service providers. No system is completely secure, but we take this seriously and will notify you and the relevant authority where required if a breach occurs.
10. Children
Our services are aimed at businesses and are not directed at anyone under 18. We don't knowingly collect personal data from anyone under 18. If we become aware that we have, we'll delete it.
11. Changes to this policy
We may update this policy from time to time. The current version is always the one published on our website, with the date it was last updated at the top.
KD Capital AB
Last updated: 24 July 2026
1. Who we are
Creators Amplify is a brand operated by KD Capital AB, a company registered in Sweden with its registered office in Gothenburg (the "Company", "we", "us", "our").
We are the data controller for the personal data described in this policy. If you have any questions about how we handle your data, our contact details are at the end of this document.
2. What we collect
We only collect what we need to run our business and deliver our services.
Information you give us:
Name, email address, phone number
Company name, role, website and social media handles
Information you provide when booking a call or filling in an application or contact form (revenue, audience size, business goals, and similar)
Billing and invoicing details
Anything you send us in emails, messages, calls or shared documents
Information we collect automatically:
IP address, browser and device type, approximate location
Pages visited, time on site, referral source
Cookie and pixel data (see section 7)
Information from third parties:
Analytics and advertising platforms (for example Meta, Google, LinkedIn, TikTok)
Scheduling, CRM and payment providers
Publicly available business and social media information
We do not intentionally collect sensitive personal data, and we ask that you don't send it to us.
3. Why we use it, and our legal basis
What we use it forLegal basis (GDPR)Responding to enquiries and booking callsLegitimate interest / steps prior to a contractDelivering our services and managing the client relationshipPerformance of a contractInvoicing, payment and bookkeepingLegal obligationImproving our website, services and marketingLegitimate interestSending marketing emails and running adsConsent, or legitimate interest where permittedPreventing fraud and protecting our legal rightsLegitimate interest
Where we rely on consent, you can withdraw it at any time. Withdrawing consent doesn't affect anything we did lawfully before you withdrew it.
4. Who we share it with
We never sell your personal data.
We share it only with:
Service providers who process data on our behalf — hosting, email, CRM, scheduling, analytics, advertising, payment processing, accounting and cloud storage. These providers act on our instructions under written agreements.
Our team and subcontractors, where they need it to deliver your project.
Professional advisers, such as accountants and lawyers.
Authorities, where we're required to by law.
5. When your data leaves the EU
Some of the tools and providers we rely on are based outside the EU/EEA, most commonly in the United States. That means your data may be stored or processed there.
In plain terms: countries outside the EU/EEA don't always give personal data the same level of legal protection that Sweden and the rest of the EU do. So before we use a provider outside the EU/EEA, we make sure one of the following is in place:
The European Commission has formally decided that the country in question protects personal data to an adequate standard, or
The provider has signed the EU's Standard Contractual Clauses — a set of contractual commitments that legally bind them to protect your data to EU standards, backed by any additional safeguards required.
If neither is available, we don't use the provider.
6. How long we keep it
We keep personal data only for as long as we have a genuine reason to keep it.
That reason might be an ongoing relationship or open project, an unresolved enquiry, an accounting or legal obligation, or the need to establish or defend a legal claim.
Once none of those reasons apply, we delete or anonymise the data. We review what we hold from time to time, and where we no longer need something, we may simply delete it. You can also ask us to delete your data at any time — see section 8.
7. Cookies and tracking
Our website uses cookies and similar technologies to make the site work, understand how it's used, and measure our advertising. Non-essential cookies are only set with your consent, which you can change or withdraw at any time through your browser settings or our cookie banner where available.
8. Your rights
Under the GDPR you have the right to:
Access the personal data we hold about you
Have inaccurate data corrected
Have your data erased ("right to be forgotten")
Restrict or object to how we process your data
Receive your data in a portable format
Withdraw consent at any time
Object to direct marketing at any time
To exercise any of these, just email us. We'll respond within one month.
If you're not happy with how we've handled your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
9. Security
We use appropriate technical and organisational measures to protect your data, including access controls, encrypted connections and reputable service providers. No system is completely secure, but we take this seriously and will notify you and the relevant authority where required if a breach occurs.
10. Children
Our services are aimed at businesses and are not directed at anyone under 18. We don't knowingly collect personal data from anyone under 18. If we become aware that we have, we'll delete it.
11. Changes to this policy
We may update this policy from time to time. The current version is always the one published on our website, with the date it was last updated at the top.
