1. Who we are
CleverPhraseWorks (“we”, “us”), registered at 56070 Dechant-Plein-Strasse 15 Koblenz, Germany, is the data controller for personal data processed through this website and our client engagements. Contact: [email protected].
2. Data we collect
We process identity and contact details you submit (name, email, phone, company), project brief content, billing data required to fulfil contracts, and technical data such as IP address, browser type, and cookie identifiers necessary to operate the site.
3. Purposes and legal bases
Under the EU General Data Protection Regulation (GDPR), we process data to: respond to inquiries and prepare quotes (Art. 6(1)(b) pre-contractual measures); deliver contracted copywriting services (Art. 6(1)(b)); comply with tax and accounting duties (Art. 6(1)(c)); protect the site against abuse (legitimate interests, Art. 6(1)(f)); and, where granted, send marketing updates with your consent (Art. 6(1)(a)), which you may withdraw at any time.
4. Recipients and processors
Personal data may be shared with trusted processors — hosting, email, project collaboration, and payment providers — strictly under Art. 28 processing agreements. Payment card details are handled by our payment processor; we never store full card numbers.
5. International transfers
Where processors operate outside the European Economic Area, transfers rely on adequacy decisions or Standard Contractual Clauses (SCCs) as required by Chapter V GDPR.
6. Retention
Inquiry data is retained for up to 24 months after the last contact unless a contract requires longer storage. Contractual and invoice records are kept for the statutory German retention periods (typically 6–10 years).
7. Your rights
You have rights of access, rectification, erasure, restriction, portability, and objection under GDPR Arts. 15–21. You may lodge a complaint with your supervisory authority. California residents have rights under the CCPA/CPRA to know, delete, and opt out of the “sale” or “sharing” of personal information — we do not sell personal data. To exercise any right, email [email protected].
8. Security
We apply TLS encryption, access controls, and least-privilege practices appropriate to the risk, and review safeguards regularly.