Privacy

Last updated 17 October 2026

This covers the kredi-lab.com website, the waitlist, the newsletter, buying KREDI Lab, and the information the plug-in sends to our license and update servers.

Who we are

Formal Imaging Ltd, Holed Stone Barn, Stisted Cottage Farm, Hollies Road, Braintree, Essex, CM77 8DZ, United Kingdom, is the data controller. Reach us at hello@kredi-lab.com.

The waitlist

What we collect

• Your email address, required, so we can email you at launch.
• Your first name, optional, used only to address you by name.
• Which link brought you here: when you arrive from one of our emails, the link carries a short campaign label and the signup records it, so we know which mailing you responded to. Arriving any other way is recorded simply as “direct”.

Why, and on what basis

On the basis of your consent, given by ticking the box on the signup form and then confirming via the link we email you. We use double opt-in, so nothing is added to the list until you click that link. We record the fact and time of confirmation as evidence of consent.

Who processes it

The list is held by SendPulse, which sends the confirmation email and any later announcements on our behalf as a processor under contract. See SendPulse’s privacy policy.

How long we keep it

Until you unsubscribe, or until the launch campaign concludes and the list is no longer needed, whichever comes first. Records of consent may be retained separately for as long as needed to demonstrate compliance.

How to leave

Every email carries an unsubscribe link. You can also write to hello@kredi-lab.com and we will remove you. Withdrawing consent does not affect the lawfulness of what came before.

The newsletter

If you sign up for KREDI Lab news, on the website or after buying, we collect your email address and which form you used. We send occasional news about new looks, features and offers.

The basis is your consent, given by submitting the form and then confirming via the link we email you. As with the waitlist, it is double opt-in and we record the time of confirmation. The list is held by SendPulse as our processor. We keep your address until you unsubscribe, using the link in every email or by writing to hello@kredi-lab.com.

Buying KREDI Lab

Purchases are handled by Creem, our merchant of record. Creem collects your payment details under its own privacy policy; we never see your card number. Creem tells us your email address, name and order details so we can issue your license, answer support questions and process refunds. The lawful basis is performance of a contract, plus our legal duty to keep sales records.

Trial, license and updates

KREDI Lab runs on your Mac inside Final Cut Pro. Your footage and projects never leave your machine.

To start the trial or activate a license, the plug-in sends our license server the email address you enter and details of the Mac: an anonymous hardware identifier, the computer’s name and specification, the macOS and plug-in versions, and the IP address it connected from. We use them to enforce the trial and the two-Mac limit, to let you restore your license on a new Mac, and to help with support. When the plug-in checks for updates, or you download it, our update server records the IP address and version. The lawful basis is performance of a contract (your license) and our legitimate interest in preventing misuse of trials and licenses.

Cookies and your choice

On your first visit we ask before setting any cookie. If you reject, or do not answer, nothing below is set. Your choice is remembered in your browser’s local storage, not in a cookie; clear your browser’s site data for kredi-lab.com to be asked again.

Advertising measurement

If you accept, we load the Meta Pixel from Meta Platforms Ireland Ltd. It sets cookies (such as _fbp, for up to 90 days) and tells Meta which of our pages you visit, so we can measure and improve our ads on Facebook and Instagram. Meta may link this to your Meta account if you have one. This rests on your consent, which you can withdraw at any time as described above. See Meta’s privacy policy.

Affiliate referrals

If you arrive through a partner’s referral link and accept cookies, Affonso, our affiliate platform, sets a cookie, affonso_referral, that lasts 60 days. It identifies the referral so the right partner is credited; it holds nothing about you. If you then buy KREDI Lab, that ID is passed with the order so the partner who sent you is paid their commission. If you did not come through a referral link, or you reject, no referral cookie is set. If you reject but buy during the same visit, the referral in the link you arrived on is still passed with the order so the partner is credited; nothing is stored on your device.

The film

The film on the home page is hosted by Bunny.net. Its player loads with the page, so Bunny receives your IP address and technical data necessary to deliver it; the video itself is only streamed once you press play. Bunny may set storage on your device as part of playback. See Bunny.net’s privacy policy.

Analytics

We use Umami, self-hosted on our own server. It is cookieless and collects no personal data: page URL, referrer, screen size, browser, country and whether the waitlist form was sent (not what was in it), derived from a hashed value that is discarded daily and cannot be traced back to you or used to follow you between sites. Nothing is sent to a third party; the script is served from this domain. This rests on our legitimate interest in knowing which pages are read.

Server logs

Our web server records each request: IP address, timestamp, the page requested and browser. This is necessary to operate and secure the site, our legitimate interest in running a functioning, non-abused service. The signup endpoint also counts recent requests per IP address in memory, to limit automated abuse; that count is not written to disk. Logs are deleted after 30 days.

Who else sees it

• Creem processes payments and refunds.
• SendPulse runs the waitlist and its emails.
• SendGrid (Twilio) delivers license emails, such as restore links.
• DigitalOcean hosts our website and license servers, in London.
• Cloudflare stores and delivers the plug-in download.
• Bunny.net streams the film on the home page.
• Affonso runs our affiliate programme.
• Meta measures our advertising, only if you accept cookies.

We do not sell, rent or share your information with anyone else. Apart from the Meta Pixel above, which runs only with your consent, we do not use it for advertising. Some of these providers may process data outside the UK under the safeguards described in their own policies.

How long we keep it

• Waitlist: as described above.
• License and activation records: for as long as your license exists, so you can restore it on a new Mac. Deactivating a Mac removes its record.
• Sales records: as long as UK tax law requires.

Your rights

You can ask for a copy of what we hold, ask us to correct or delete it, restrict or object to how we use it, ask for it in a portable form, or withdraw consent at any time. Write to hello@kredi-lab.com and we will deal with it within 30 days.

If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner’s Office, or to the data protection authority where you live.