Last updated: Draft — not yet in force
Privacy Policy
This policy explains how we handle personal data submitted through this website — in particular through the creator application and contact forms. We collect as little as possible and use it only for the purposes described below.
1. Who is responsible for your data
The data controller is [TO CONFIRM], registered at [TO CONFIRM], registration number [TO CONFIRM]. Privacy contact: [TO CONFIRM].
If we appoint an EU representative or Data Protection Officer, their details will be listed here. [TO CONFIRM]
2. What we collect
Through the creator application form we collect:
- Professional/display name, email address, country of residence and preferred language
- Confirmation that you are 18 or older (a yes/no declaration — no ID documents)
- Creator platform and social media links you choose to share
- Information about your experience, niche (non-explicit categories), challenges, goals, services of interest and current representation
- An optional approximate monthly revenue range
- Your message, preferred contact method and, if chosen, a WhatsApp number or Telegram username
- Your consent choices and the time of submission
Through the contact form we collect your name, email, topic and message.
We also process limited technical data needed to secure the site (for example a one-way hash of your IP address used for abuse prevention — we do not store raw IP addresses with submissions).
3. What we never collect through this website
Age and identity verification, where required, only happens later during onboarding through a secure, separate process.
- Passwords or login credentials for any platform
- Government ID documents, dates of birth or financial account details
- Photos, videos or any explicit content
4. Why we use it and our legal bases
Some information you choose to share (for example, the nature of your content niche) may be considered sensitive. Please share only what you are comfortable with; where special-category data is involved, we rely on your explicit consent and you may withdraw it at any time.
- To assess your application and take steps at your request before entering into an agreement — Art. 6(1)(b) GDPR (pre-contractual measures).
- To contact you about your application or message — your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time.
- To keep the website and forms secure and prevent abuse — our legitimate interests, Art. 6(1)(f) GDPR.
- To measure website usage with analytics cookies — only with your consent, Art. 6(1)(a) GDPR.
- To comply with legal obligations where applicable — Art. 6(1)(c) GDPR.
5. Who we share it with
Application data is accessible only to the team members who review applications. We use service providers (processors) to operate the website and receive submissions — such as hosting, form-delivery/storage and email providers — under data processing agreements. Current providers: [TO CONFIRM].
We do not sell personal data and do not share it with platforms, advertisers or other agencies.
6. International transfers
Where data is transferred outside the EU/EEA or your country, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions. [TO CONFIRM]
7. How long we keep it
You can ask us to delete your application at any time.
- Applications that do not proceed: deleted after [TO CONFIRM] (recommended: no longer than 12 months).
- Applications that lead to an agreement: retained as part of the client relationship under a separate notice.
- Contact messages: deleted after [TO CONFIRM] (recommended: 12 months).
- Security logs: kept for a short period strictly necessary for abuse prevention.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Have your data erased
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting earlier processing
- Lodge a complaint with your local data protection authority
To exercise these rights, contact [TO CONFIRM]. We will respond within the time required by applicable law (one month under the GDPR, extendable in limited cases). Residents of other jurisdictions — for example under Brazil's LGPD, Mexico's LFPDPPP, Argentina's Law 25.326 or Colombia's Law 1581 — have comparable rights, which we will honour. [TO CONFIRM]
9. Age requirement
This website and our services are intended only for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it promptly.
10. Security
Submissions are transmitted over encrypted connections (HTTPS), validated on our server and delivered only to access-controlled systems. We apply data minimization and limit access to people who need it. No method of transmission or storage is completely secure, but we work to protect your data appropriately.
11. Changes to this policy
We will update this policy when our practices change and indicate the date of the latest version at the top of this page.