Privacy policy

1. Who we are

Rize Agency is a trading name of Nova Ascendia Ltd, a company registered in England and Wales (company number 16943946). Registered office: 2nd Floor College House, 17 King Edwards Road, Ruislip, HA4 7AE.

Nova Ascendia Ltd is the controller of the personal data described in this policy. That means we decide how and why it is used, and we are responsible for it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Contact us about anything in this policy, or to use your rights, at general@rizeagency.com. We haven’t appointed a data protection officer; this address reaches the person responsible for data protection.

2. What we collect and why

When you visit the website

• Technical data. Like every website, our hosting provider receives your IP address, browser and device details, the pages you request, the referring page and the time. It is used to deliver the site, keep it secure and fix faults. Lawful basis: our legitimate interests in running a secure website.
• Analytics (only if you accept analytics cookies). Google Analytics 4 records which pages you view, how you arrived, your approximate location (country or city, from your IP address), device and browser. Hotjar records heatmaps and recordings of how pages are used (clicks, taps, scrolling, mouse movement and what is typed into ordinary form fields; passwords, email addresses and numbers are hidden). We use this to understand and improve the site. Lawful basis: your consent.
• Advertising measurement (only if you accept marketing cookies). Google Ads tells us whether someone who clicked one of our adverts went on to visit or apply, and Google may use this for ad measurement and personalisation. Lawful basis: your consent.

Nothing optional is set or loaded until you choose it in the cookie banner, and you can change your mind at any time. The cookie policy lists every cookie.

Some pages show videos from Vimeo. We load them in Vimeo’s “do not track” mode, so Vimeo doesn’t set cookies, but your browser still connects to Vimeo (which sees your IP address) when a video loads.

When you apply to work with us (creator application)

When you apply through our application form, we collect:

• Identity and contact details: your name and any creator or stage name, email address, phone number, and the country or city you live in.
• Social media and platform details: your social media handles and profile links (for example Instagram, TikTok and X) and links to the creator platforms you use (for example OnlyFans or Fanvue), plus audience figures such as follower or subscriber counts.
• Earnings information: what you currently earn from your platforms, which you may give as a range or with screenshots.
• Age verification: your date of birth and confirmation that you are 18 or over. We may also ask to see proof of age (such as a photo ID) before we work with you.
• Anything else you choose to tell us in the form or in later messages, such as your goals and the kind of content you create.

We also look at the public profiles and platform pages you link to. We use all of this to assess and manage your application: to decide whether we can help you, to contact you about it, and, if we go on to work together, to set up our agreement.

Lawful bases: taking steps at your request before entering into a contract with you (UK GDPR Article 6(1)(b)); our legitimate interests in assessing applicants, keeping a record of our decisions and preventing fraud (Article 6(1)(f)); and, for age verification, our legitimate interest in, and the platforms’ requirement for, working only with adults.

We don’t ask for “special category” information (such as health, sexual orientation or sex life). Because some creator platforms host adult content, an application may reveal such information indirectly. Where it does, we use it only to assess your application, and we rely on your explicit consent, which you give when you submit the form and can withdraw at any time.

When you refer a creator (referral program)

• About you (the referrer): your name, email address, phone number and social media handles, and, if a referral fee becomes due, the details we need to pay you. We use this to run the referral program and pay referral fees. Lawful basis: contract (the referral program terms), and legal obligation for payment and tax records.
• About the creator you refer: their name, contact details and social media or platform links that you give us. We use them to contact the creator about working with us. Lawful basis: our legitimate interests in growing our business. Please only refer people who are 18 or over and happy to be contacted. We tell referred creators where we got their details when we first contact them (and within one month at the latest), and they can ask us to delete them at any time.

When you email us

We use your name, email address and what you write to reply to you and keep a record of the conversation. Lawful basis: our legitimate interests in responding to enquiries (or steps before a contract, if you’re asking about working with us).

Records we must keep

If we work with you or pay you, we keep the records that tax, company and accounting law require. Lawful basis: legal obligation.

3. How long we keep it

4. Who we share it with

We don’t sell personal data. We share it only with:

• Service providers who process it for us, under contracts that require them to protect it and use it only on our instructions: Vercel Inc. (website hosting), Google (business email and documents through Google Workspace, and Google Analytics and Google Ads when you consent), Hotjar Ltd (analytics, when you consent), Vimeo (embedded videos), and the provider that stores our application forms.
• Professional advisers such as our accountants and lawyers, where needed.
• Authorities such as HMRC, the police or a court, when the law requires it.
• A buyer or successor if our business, or part of it, is sold or reorganised, under the same protections as this policy.

We never pass your application details to brands, platforms or other third parties without telling you first.

5. International transfers

Some of our providers are based in, or use staff and systems in, the United States, including Google and Vercel. Hotjar is based in the European Union, which the UK recognises as giving adequate protection, and uses some US-based providers of its own. When personal data goes outside the UK, we make sure it is protected by one of the safeguards UK law allows: a UK adequacy decision (for example the UK Extension to the EU–US Data Privacy Framework, the “UK–US data bridge”, where the US company is certified), or the ICO’s International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Ask us for a copy of the relevant safeguard at general@rizeagency.com.

6. Decisions about you

People at Rize Agency review every application. We don’t make decisions about you by automated means alone.

7. Keeping your data safe

We limit access to the people who need it, use reputable providers with strong security, and delete data when we no longer need it. If a breach puts your rights at risk, we will tell you and the ICO as the law requires.

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you and get a copy;
• have inaccurate data corrected and incomplete data completed;
• have your data erased in some circumstances;
• restrict how we use your data in some circumstances;
• object to our use of your data where we rely on legitimate interests, and object at any time to direct marketing;
• data portability: receive data you gave us in a machine-readable format, or have it sent to another organisation, where we rely on consent or contract;
• withdraw consent at any time where we rely on it. For cookies, use “Cookie settings” at the bottom of any page. Withdrawing doesn’t affect what we did before.

To use any of these rights, email general@rizeagency.com. It’s free. We may ask you to confirm your identity, and we will reply within one month (we can extend this by up to two months for complex requests, and will tell you if we do).

9. Complaints

If you’re unhappy with how we have handled your data, please tell us first at general@rizeagency.com so we can try to put it right. You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

10. Under-18s

We work only with adults. Our services, application and referral forms are not for anyone under 18, and we don’t knowingly collect data about under-18s. If we find we have, we delete it.

11. Changes to this policy

We will update this policy when our practices change, and change the “Last updated” date at the top. If a change significantly affects how we use data we already hold about you, we will tell you directly.