Privacy Policy

Asira Solutions Ltd (company number 14987950), 2 Station Road, Purton, Swindon, England, SN5 4AQ, is the data controller for personal data processed through ugccreators.co.uk. Contact us about anything in this policy at hello@ugccreators.co.uk.

We are established in the United Kingdom, so we handle personal data in line with the UK GDPR and the Data Protection Act 2018, and with the EU GDPR where it applies to users in the EEA.

• Account data — name, email, password hash, role. To create and secure your account. Lawful basis: performance of a contract.
• Creator profile data — headline, biography, location, rates, niches, social handles and follower counts, portfolio images and video. Published so brands can find you. Lawful basis: contract.
• Brand data — company name, website, industry, budget band. Lawful basis: contract.
• Messages and attachments — content you send through the platform. To deliver the messaging feature. Lawful basis: contract.
• Payment details you choose to give — where a creator adds bank details to a payment request, we store the account name, sort code, account number and whether it is a personal or business account, along with any document they attach. We do not take payments: this is passed to the one brand on that job so they can pay the creator directly, and is not shown to anyone else, not published, and not sent in any email. Giving them is optional — a creator can invoice separately instead. Lawful basis: performance of a contract.
• Technical data — IP address, browser type and server logs, generated automatically. To keep the service secure and working. Lawful basis: legitimate interests.

We do not knowingly collect data from anyone under 18, and we do not sell personal data.

Messages between brands and creators are stored so both sides keep a record of what was agreed, and so a dispute over a job can be looked at against what was actually said.

We may also review messages — including by automated checks that look for contact details and payment links — to enforce the rules in our terms and to detect fraud, spam and abuse. The lawful basis is our legitimate interest in keeping the marketplace safe. We do not read messages routinely, and we do not use them for advertising or profiling.

An automated check never suspends an account on its own; anything it flags is looked at by a person before any action is taken, and you can contest a decision under “Your rights” below.

Some creator profiles were created from contact lists gathered before this marketplace existed, where people had signed up with us — for example through a Calendly booking or a Training Academy application.

Those profiles hold only a name and email address, are not publicly visible, and do not appear in the marketplace unless the person claims the profile and it is approved. We rely on legitimate interests to contact those individuals once about a service closely related to the one they originally signed up for.

If that is not you, reply to the email or write to hello@ugccreators.co.uk and we will delete the record. You do not need to give a reason.

We use a small number of processors, each handling data only on our instructions:

• Vercel — hosting and delivery of the website.
• Neon — database hosting. Our database is located in the UK (London region).
• Cloudflare R2 — storage of portfolio images and video.
• Resend — transactional email such as profile-approval notifications.
• Vercel Analytics — counts page views so we know which parts of the site are used. It sets no cookies and does not identify you or follow you between sites. Lawful basis: legitimate interests.
• Cloudflare Turnstile — an anti-spam check on the sign-up and contact forms. It looks at browser characteristics to tell people from bots. It does not track you across websites and is not used for advertising. Lawful basis: legitimate interests, in keeping the platform free of automated abuse.

We may also disclose data where legally required, or to establish or defend legal claims. Your profile content is, by design, visible to other users of the marketplace once published.

We are a UK company and your data is stored in the UK and EEA. Some of our processors are based elsewhere, so personal data may be transferred outside the UK. Where that happens we rely on appropriate safeguards, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

Account and profile data is kept while your account is open and for up to 12 months afterwards, so it can be restored if you return. Messages are kept while both accounts exist. Server logs are kept for up to 90 days. Unclaimed imported profiles are deleted if not claimed within 24 months.

Bank details added to a payment request are kept with that job’s record, because the record is what either side relies on if there is a disagreement about whether it was paid, and both may need it for their accounts for several years. They cannot be edited once the request is sent — a change means sending a new request — and you can ask us to erase them under section 8.

If you are in the UK or EEA you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing, including profile visibility;
• receive your data in a portable format;
• withdraw consent where we rely on it.

Email hello@ugccreators.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner’s Office at ico.org.uk, or your local supervisory authority.

Passwords are stored hashed, never in plain text. Traffic is encrypted in transit. Access to the production database is restricted. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect a problem with your account.

One thing worth knowing: portfolio media is served from public storage URLs so it can be displayed to brands. Treat anything you upload as publicly accessible, and do not send confidential material as a message attachment.

We use a single essential cookie to keep you signed in. It is not used for advertising or tracking, and there is no third-party analytics or advertising cookie on the site. If that changes we will add a consent banner and update this policy first.

See also our Terms of Service.