Privacy policy

Last updated 6 October 2026

The short version. We only collect what you send us through our forms, plus basic analytics if you allow cookies. We use it to reply to you, match creators to paid briefs and run our business. We never sell your data.

Questions or requests: info@theugc.agency

Who we are

This website, theugc.agency, is run by THEUGCAGENCY LTD, trading as The UGC Agency, a company registered in England and Wales (company number 17025943), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the controller of the personal data described in this policy.

What we collect and why

When	What we collect	Why, and our legal basis
You send a brand enquiry or "Start a campaign" form	Name, work email, company website, phone (optional), the service and budget you choose, how you found us, your message	To reply, quote and plan your campaign. Legitimate interests, or steps before a contract at your request.
You apply to our creator network	Email, name, Instagram and TikTok handles, link to your videos, niches, followers, rate, country, gender, age range	To review your work and match you with paid briefs. Your consent, which you can withdraw at any time.
You book a call	What you enter in the booking form (via Calendly)	To hold the call. Steps before a contract.
You email us	Your email and what you write	To reply. Legitimate interests.
You browse the site, if you accept analytics cookies	Pages visited, device and browser, rough location, how you arrived, and how you scroll and click (heatmaps and session recordings, with anything typed into forms hidden)	To see how the site is used and which ads bring enquiries. Your consent.

We don't ask for payment details on this website, and we don't need sensitive information about you. Please don't include it in your messages.

How we use it

To reply to enquiries, prepare quotes and plans, and run campaigns we agree with you.
To review creator applications and, when a brief fits, contact you about it. If you're shortlisted for a campaign, we share your profile and work with that brand.
To keep our records, invoices and legal obligations in order.
To improve the website and measure which pages and ads lead to enquiries.

We may use AI tools to help us sort enquiries and draft replies. A person reads every enquiry and every reply before it's sent. We don't make decisions about you that have legal or similar effects purely by automated means.

We won't add you to marketing emails unless you ask us to, and every marketing email will let you unsubscribe.

Who we share it with

We never sell your data. We share it only with the services that help us run the agency, under agreements that protect it:

Website hosting and our own servers, where forms and our creator database are stored
Google (Workspace email and calendar, Analytics, Ads conversion measurement, reCAPTCHA spam protection)
Microsoft Clarity (heatmaps and session recordings, only if you accept analytics cookies; what you type into forms is hidden)
Asana (managing enquiries), Calendly (booking calls), Slack and Telegram (internal team notifications)
AI providers that help us draft replies, under terms that stop them using your data to train their models
Brands we work with, when you're a creator shortlisted for their campaign
Our professional advisers, and authorities where the law requires it

Some of these providers are based outside the UK, for example in the United States. Where your data leaves the UK or the European Economic Area, we rely on adequacy decisions or standard contractual clauses to protect it.

How long we keep it

Brand enquiries: up to 2 years after our last contact, or longer if we work together and the records are needed for contracts and accounts.
Creator applications: while you're in our network. Ask us at any time and we'll remove you.
Invoices and accounting records: 6 years, as UK law requires.
Analytics data: up to 14 months.

Cookies

We use cookies that the site needs to work, Google Analytics and Google Ads cookies to measure visits and enquiries, and Microsoft Clarity only if you accept it in the cookie banner. You can change your choice at any time from the cookie settings on the site. More detail is in our cookie policy.

Your rights

You can ask us to access, correct or delete your data, to restrict or object to how we use it, to move it to another provider, and to withdraw consent at any time. Email info@theugc.agency and we'll reply within one month.

If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

Security

We use encrypted connections, limited access and reputable providers to protect your data. No system is perfectly secure, but we act quickly if something goes wrong.

Children

Our creator network is for adults aged 18 and over, and we don't knowingly collect data from children. Where a campaign features a child, we work only through their parent or guardian, who applies, signs the agreement and is paid. We follow the licensing rules where the child lives.

Changes

We'll update this page if how we handle data changes. The date at the top shows the latest version.