Privacy Policy.
Last updated 13 August 2026
This policy explains what personal data Fluencer collects, why we collect it, how long we keep it, and what you can ask us to do with it. It covers our website at www.fluencer.co.uk and the Fluencer portal.
We are the data controller for the information described here. If you want to contact us about your data, email hello@fluencer.co.uk.
What we collect
When you fill in a form
Our contact, free audit and creator signup forms collect your name and email address, and depending on the form your phone number, company name, website, industry, monthly marketing budget, social handles, audience size and whatever you write in the message field. We also record the browser user-agent string with the submission to help us identify automated spam.
When you create an account
We collect your email address, a password, your name, and whether you are joining as a brand or a creator. Passwords are hashed by our authentication provider; we never see or store the password itself.
Brands additionally give us a company name and, optionally, a website. Creators additionally give us a handle, niche, biography, location and the social accounts they choose to link.
When you link a social account
If you link an Instagram, TikTok or YouTube profile, we record the platform, the handle, and the follower and engagement figures we verify. We do not receive your social platform password, and linking an account does not give us or any brand the ability to post as you, read your messages, or access your account. You can unlink at any time from your portal, and doing so deletes anything we hold for that connection.
When you use the portal
We store the campaign briefs, applications and messages you create so the platform can function, along with a session cookie that keeps you signed in. That cookie is strictly necessary — without it you cannot stay logged in — so we do not ask for consent for it.
Why we collect it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Reply to an enquiry, audit request or creator application | Legitimate interests — you contacted us and expect a reply |
| Create and run your account, match brands with creators, run campaigns | Performance of a contract with you |
| Verify that a linked social account genuinely belongs to you | Legitimate interests — brands must be able to trust the network |
| Keep records of payments and invoices | Legal obligation — UK tax and accounting rules |
| Send marketing emails about our services | Consent, which you can withdraw at any time |
Who we share it with
We do not sell your personal data, and we never share one client’s data with another. We use a small number of processors to run the service:
- Supabase — database and authentication. Our data is hosted in the London (eu-west-2) region.
- Vercel — website and application hosting.
- Resend — transactional and notification email.
Where a processor transfers data outside the UK, that transfer relies on UK International Data Transfer Agreements or equivalent safeguards.
When a brand books a creator through Fluencer, we share the details needed for that campaign to happen — typically the creator’s name, handle, verified audience figures and the deliverables agreed. A brand never receives access to a creator’s social account credentials.
How long we keep it
- Enquiries that do not become clients — up to 24 months from your last contact with us.
- Account and campaign data — for as long as your account is open, then up to 12 months after you close it.
- Invoices and payment records — 6 years, as UK tax law requires.
- Marketing contacts — until you unsubscribe.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate;
- delete your data, where we have no overriding obligation to keep it;
- restrict or object to how we use it, including for marketing;
- send your data to another provider in a portable format;
- withdraw consent, where consent is the basis we rely on.
Email hello@fluencer.co.uk and we will respond within one month. If you are not satisfied with our response you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Cookies
We use a strictly necessary cookie to keep you signed in to the portal. We do not currently run advertising or analytics cookies on this site. If that changes we will ask for your consent first and update this policy.
Security
Access to your data is enforced at the database level, so one account cannot read another’s records. Credentials for linked social accounts are held separately from application data and are not reachable through our public API. We use encrypted connections throughout.
No system is perfectly secure. If a breach affects your rights and freedoms we will tell the ICO within 72 hours and contact you without undue delay.
Children
Fluencer is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
Changes
If we make a material change to this policy we will update the date at the top and, where the change affects you significantly, tell account holders by email.
Questions about any of this? Email hello@fluencer.co.uk or use our contact form.