Privacy Policy
Last updated 20 August 2026
This is a working draft prepared for UGC Creators, not legal advice. Have it reviewed by a qualified lawyer before relying on it — particularly the liability, intellectual property and governing-law sections.
1.Who controls your data
SKU Group LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA, is the data controller for personal data processed through ugccreators.co.uk. Contact us about anything in this policy at hello@ugccreators.co.uk.
Because we serve users in the UK and EEA, we handle personal data in line with the UK GDPR and EU GDPR where they apply.
2.What we collect and why
- Account data — name, email, password hash, role. To create and secure your account. Lawful basis: performance of a contract.
- Creator profile data — headline, biography, location, rates, niches, social handles and follower counts, portfolio images and video. Published so brands can find you. Lawful basis: contract.
- Brand data — company name, website, industry, budget band. Lawful basis: contract.
- Messages and attachments — content you send through the platform. To deliver the messaging feature. Lawful basis: contract.
- Technical data — IP address, browser type and server logs, generated automatically. To keep the service secure and working. Lawful basis: legitimate interests.
We do not knowingly collect data from anyone under 18, and we do not sell personal data.
3.Creators we contacted from existing lists
Some creator profiles were created from contact lists gathered before this marketplace existed, where people had signed up with us — for example through a Calendly booking or a Training Academy application.
Those profiles hold only a name and email address, are not publicly visible, and do not appear in the marketplace unless the person claims the profile and it is approved. We rely on legitimate interests to contact those individuals once about a service closely related to the one they originally signed up for.
If that is not you, reply to the email or write to hello@ugccreators.co.uk and we will delete the record. You do not need to give a reason.
4.Who we share it with
We use a small number of processors, each handling data only on our instructions:
- Vercel — hosting and delivery of the website.
- Neon — database hosting. Our database is located in the UK (London region).
- Cloudflare R2 — storage of portfolio images and video.
- Resend — transactional email such as profile-approval notifications.
We may also disclose data where legally required, or to establish or defend legal claims. Your profile content is, by design, visible to other users of the marketplace once published.
5.International transfers
We are a US company, so personal data may be transferred outside the UK and EEA. Where that happens we rely on appropriate safeguards, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses with our processors.
6.How long we keep it
Account and profile data is kept while your account is open and for up to 12 months afterwards, so it can be restored if you return. Messages are kept while both accounts exist. Server logs are kept for up to 90 days. Unclaimed imported profiles are deleted if not claimed within 24 months.
7.Your rights
If you are in the UK or EEA you have the right to:
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing, including profile visibility;
- receive your data in a portable format;
- withdraw consent where we rely on it.
Email hello@ugccreators.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner’s Office at ico.org.uk, or your local supervisory authority.
8.Security
Passwords are stored hashed, never in plain text. Traffic is encrypted in transit. Access to the production database is restricted. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect a problem with your account.
One thing worth knowing: portfolio media is served from public storage URLs so it can be displayed to brands. Treat anything you upload as publicly accessible, and do not send confidential material as a message attachment.
9.Cookies
We use a single essential cookie to keep you signed in. It is not used for advertising or tracking, and there is no third-party analytics or advertising cookie on the site. If that changes we will add a consent banner and update this policy first.
See also our Terms of Service.