Skip to content
Upfluence Agency

Privacy policy

Last updated: 2 October 2026

This policy explains how Upfluence Agency uses personal data when you visit upfluenceagency.co.uk, apply to join us as a creator, work with us as a creator or brand, or get in touch. It is written for people in the United Kingdom and follows the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Upfluence Agency is the controller of your personal data. We are a business established in the Netherlands and work with TikTok as an approved LIVE Creator Network in the UK.

  • Upfluence Agency
  • Kwikstaartlaan 42, 3704 GS Zeist, Netherlands
  • Dutch Chamber of Commerce (KvK) number: 90396367
  • Email: info@upfluenceagency.nl

2. The data we collect and where it comes from

When you visit the website

We do not use analytics, advertising or tracking tools. Our hosting provider keeps standard technical server logs (such as IP address, browser type, the page requested and the time) to run and secure the website.

Some pages show the public TikTok profile pictures of creators we work with. These are loaded through a third-party service, unavatar.io. When your browser loads these pictures, it connects to unavatar.io, which therefore receives your IP address and browser details.

When you apply as a creator

Your first and last name, age, email address, phone number, TikTok username, number of followers, how many days and hours you stream per month, whether you already stream on TikTok LIVE, the languages and categories you stream in, and anything else you choose to tell us.

When you contact us

Your name, company (if given), email address, phone number (if given), the subject and your message.

When you work with us as a creator

Through our creator app (upfluence.app) and our internal management system, we also process:

  • account details: name, email address, phone number, date of birth, Discord username and TikTok username;
  • performance data that TikTok shares with us through LIVE Backstage, such as diamonds, LIVE hours, days live, followers and rankings;
  • data about bonuses, payouts and your participation in campaigns;
  • information you enter in the app, such as the pre-stream check-in, support requests and contact with your manager;
  • the public chat from your LIVEs (viewer name and message), so that you and your manager can look back at and analyse your LIVEs;
  • the outcome of the age check and identity verification (see section 4).

Concerns raised with our welfare officer are stored separately. Only the welfare officer can read them; managers and owners have no access.

When we look for new creators

We use public information about TikTok LIVE creators: your TikTok username, public rankings and estimates based on them, and whether TikTok shows you as available to join a creator network in LIVE Backstage. This data comes from TikTok's public rankings and from LIVE Backstage, not from you directly.

When you work with us as a brand

The names, job titles and business contact details of the people we deal with, and our correspondence with them.

3. Why we use your data and our lawful basis

  • Assessing your creator application and getting in touch with you about it: steps you ask us to take before entering into an agreement (Article 6(1)(b) UK GDPR).
  • Replying to messages sent through the contact form or by email: our legitimate interest in answering enquiries (Article 6(1)(f)).
  • Working with you as a creator, including the app, your manager, campaigns, bonuses and payouts: performance of our agreement with you (Article 6(1)(b)).
  • Working with brands and running campaigns: performance of our agreement, or our legitimate interest in managing our business relationships (Article 6(1)(b) and (f)).
  • Age check: our legitimate interest in making sure only adults go LIVE through our network, as TikTok requires, and in protecting young people (Article 6(1)(f)).
  • Identity re-verification using a stored face reference: your explicit consent (Article 6(1)(a) and Article 9(2)(a)). See section 4.
  • Finding new creators from public data: our legitimate interest in approaching creators who may want to join us (Article 6(1)(f)). You can object at any time.
  • Support access to your app account by an administrator, and keeping the website and app secure: our legitimate interest in providing support and preventing misuse (Article 6(1)(f)).
  • Bookkeeping and tax: our legal obligations (Article 6(1)(c)).
  • Marketing emails: we only send these with your consent (Article 6(1)(a)), and you can unsubscribe at any time.

Where we rely on legitimate interests, we have weighed them against your interests and rights. You can ask us for more detail about this.

Giving us the details in the application form is voluntary, but we can't assess your application without them. To join our network you must be 18 or over.

4. Age check and identity verification

TikTok only allows people aged 18 and over to go LIVE and to send or receive gifts. We therefore check your age when you join or first log in to the app. We use our processor Didit for this.

Age check. You take a selfie that is checked for a real person in front of the camera (liveness) and used to estimate your age. If the estimate is inconclusive, Didit asks you for an identity document. We only store the outcome (for example "age confirmed"), the method, the date and a session reference. We do not store the photo, the estimated age or details from your identity document.

Identity re-verification. With your explicit consent, Didit stores a reference of your face for as long as you work with us. This lets us check later that you are the person using your account, so that nobody else, and no minor, goes LIVE through your account. This face reference is biometric data, a special category of personal data. You don't have to agree: if you don't consent, or withdraw your consent later, a member of our staff will verify your identity in another way, for example by checking an identity document. When you stop working with us, or withdraw your consent, we have the face reference deleted at Didit.

Decisions made automatically. If you don't pass the age check, you won't get access to the app. If you think the outcome is wrong, contact your manager or info@upfluenceagency.nl. A member of staff will then review your situation personally.

5. Who we share your data with

We never sell your personal data. We share it only where needed, with:

  • TikTok: as a LIVE Creator Network we exchange data with TikTok through LIVE Backstage, for example to invite you and to receive your performance data.
  • Service providers who process data for us under a contract: Supabase (database and app hosting), Lovable (website hosting), Resend (email), Didit (age check and identity verification), Tikfluence (TikTok rankings and LIVE data) and TikHub (TikTok profile and ranking data). unavatar.io loads public TikTok profile pictures on this website.
  • Community platforms: we use Discord and WhatsApp to communicate with creators. If you use them, their own privacy policies also apply.
  • Brands we run campaigns with, only where this is needed for a campaign you take part in.
  • Authorities, where the law requires it or to protect our rights.

6. International transfers

We are based in the Netherlands. The UK recognises the countries of the European Economic Area as providing adequate protection, so your data can flow to us without extra safeguards. Some of our service providers are based in, or use servers in, the United States. In those cases we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, or otherwise on the ICO's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for more information about these safeguards.

7. How long we keep your data

  • Contact form messages and creator applications: 2 years after our last contact.
  • Creator profile data: for the duration of our partnership plus 5 years.
  • Contracts and financial records: 7 years (statutory retention period).
  • Outcome of the age check and identity verification: for the duration of our partnership plus 1 year.
  • Face reference for identity re-verification (at Didit): until our partnership ends or you withdraw consent.
  • Logs of support access by staff: 12 months.
  • Imported performance data files: 12 months.
  • Scouting data of creators who don't join us: up to 12 months after they last appeared in a ranking.
  • Website server logs: as briefly as our hosting provider allows for security purposes.

8. How we protect your data

We use appropriate technical and organisational measures, including encrypted connections (TLS), role-based access, logging of staff access and regular reviews of our security. Support access by an administrator to your app account only happens with a recorded reason, for up to 30 minutes, and is logged. Concerns raised with the welfare officer are never visible during such access.

9. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict how we use your data;
  • receive your data in a commonly used format and have it transferred (data portability);
  • object to our use of your data based on legitimate interests, including for finding new creators;
  • object to direct marketing at any time;
  • withdraw your consent at any time, without affecting what we did before;
  • ask for a person to review a decision made automatically, such as the outcome of the age check.

To use any of these rights, email info@upfluenceagency.nl. We will respond within one month. If your request is complex, we may extend this by up to two more months and will tell you why.

10. Complaints

If you are unhappy with how we use your personal data, please tell us first at info@upfluenceagency.nl. We will acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113. Because we are established in the Netherlands, you can also contact the Dutch data protection authority, the Autoriteit Persoonsgegevens.

11. Cookies and similar technologies

This website does not use cookies or similar technologies for analytics, advertising or tracking, so we don't ask for cookie consent. If we ever add such technologies, we will ask for your consent first where the law requires it and update this policy.

12. Children

Our services are for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we find out that we have, we will delete it.

13. Changes to this policy

We may update this policy when our services or the law change. The latest version is always on this page. If we make significant changes, we will tell creators and brands we work with by email.

14. Contact

Questions about this policy or your personal data? Email info@upfluenceagency.nl or write to Upfluence Agency, Kwikstaartlaan 42, 3704 GS Zeist, Netherlands.