1. About this Privacy Policy

This Privacy Policy explains how Influolist collects, uses, stores and shares personal information when you:

• visit influolist.com;
• create or use an Influolist account;
• purchase or manage a membership;
• submit a creator or brand profile;
• apply for a collaboration opportunity;
• join a Creator Interest List or Brand Pitch;
• communicate with Influolist;
• subscribe to marketing communications;
• participate in a campaign; or
• otherwise use our website, dashboard or services.

Please read this Privacy Policy carefully so that you understand how your personal information will be used.

2. Who is responsible for your information?

The organisation responsible for your personal information is:

Trading name: Influolist
Privacy email: influolist@gmail.co

In this Privacy Policy, “Influolist”, “we”, “us” and “our” refer to the organisation identified above.

For data-protection purposes, Influolist is normally the controller of personal information collected through its website, memberships and services.

Brands may become separate and independent controllers when they receive Creator information for a campaign or collaboration. This is explained further below.

3. Who this policy applies to

This policy applies to personal information relating to:

• Influolist Members;
• Creators and influencers;
• representatives and employees of Brands;
• prospective Members;
• website visitors;
• newsletter subscribers;
• people contacting Influolist;
• suppliers and business contacts; and
• individuals appearing in Creator content submitted to Influolist.

4. Personal information we collect

The information we collect depends on how you use Influolist.

4.1 Identity and contact information

This may include:

• your name;
• email address;
• telephone number;
• postal or delivery address;
• country or general location;
• username;
• account identification number;
• business or trading name; and
• information needed to verify your identity or authority.

4.2 Account and membership information

This may include:

• account login details;
• membership type;
• membership start and renewal dates;
• subscription status;
• cancellation information;
• account preferences;
• dashboard activity;
• services and resources accessed; and
• correspondence about your membership.

We do not ask you to provide passwords for your social-media accounts.

4.3 Creator profile information

Creators may provide information including:

• social-media usernames and profile links;
• profile photograph;
• biography;
• content niche or category;
• location;
• follower numbers;
• audience demographics;
• engagement statistics;
• reach and performance information;
• examples of previous content;
• portfolio or media-kit information;
• content preferences;
• Brand preferences;
• rates or compensation expectations;
• availability;
• product sizes or delivery information;
• collaboration history; and
• photographs, videos or other content.

Some of this information may already be publicly available through your social-media profiles.

4.4 Brand and business information

Where you represent a Brand, agency or other organisation, we may collect:

• your name and job title;
• business email address;
• business telephone number;
• company name;
• company website;
• registered or trading address;
• campaign information;
• billing information;
• details of products or services;
• Creator selection criteria;
• campaign budgets;
• communications with Creators; and
• evidence that you are authorised to represent the Brand.

4.5 Campaign and application information

When you apply for or participate in an opportunity, we may collect:

• your application answers;
• the opportunity applied for;
• suitability information;
• shortlisting notes;
• Brand decisions and feedback;
• campaign deliverables;
• deadlines;
• content approval information;
• content links;
• performance results;
• payment or gifting arrangements;
• delivery information;
• complaints or disputes; and
• communications between Influolist, Creators and Brands.

4.6 Payment and transaction information

We may collect:

• membership payments;
• transaction dates;
• amounts paid;
• currency;
• subscription or order numbers;
• billing name and address;
• payment status;
• refunds;
• failed-payment information; and
• limited payment-method information supplied by our payment provider.

Full card details are normally collected and processed directly by the relevant payment provider rather than stored by Influolist.

4.7 Communications

We collect information contained in:

• contact forms;
• emails;
• direct messages;
• support requests;
• complaints;
• survey responses;
• reviews;
• testimonials; and
• other communications with Influolist.

4.8 Marketing information

This may include:

• whether you have subscribed to marketing;
• your marketing preferences;
• when and how you subscribed;
• communications sent to you;
• whether emails were opened or links selected; and
• when you unsubscribed.

4.9 Technical and website information

When you use our website or dashboard, we may collect:

• IP address;
• device type;
• browser type;
• operating system;
• approximate location;
• login times;
• pages visited;
• referring website;
• links selected;
• cookie identifiers;
• shopping-cart activity;
• website interactions;
• error and security logs; and
• information about how you use our website.

Further information is provided in our Cookie Policy.

4.10 Fraud, safety and compliance information

We may collect information necessary to:

• verify users;
• investigate suspicious activity;
• protect accounts;
• prevent payment fraud;
• investigate complaints;
• enforce our Terms and Conditions; and
• comply with legal or regulatory requirements.

5. Information we do not normally collect

Influolist does not normally need to collect special-category information such as information about:

• health;
• disability;
• race or ethnicity;
• religion;
• political opinions;
• trade-union membership;
• sex life or sexual orientation;
• genetic information; or
• biometric identification.

Please do not provide this information unless it is genuinely relevant to a specific campaign or request.

Where special-category information is required, we will explain why it is needed and identify an appropriate legal condition. We may ask for your explicit consent where appropriate.

6. How we obtain personal information

We collect information:

Directly from you

For example, when you:

• create an account;
• purchase a membership;
• complete a Creator or Brand profile;
• apply for an opportunity;
• join a Creator Interest List;
• contact us;
• submit content;
• subscribe to emails; or
• participate in a campaign.

From publicly available sources

We may review information that you have made public through:

• social-media profiles;
• websites;
• Creator portfolios;
• business directories;
• Companies House; and
• other legitimate public sources.

From Brands, agencies and Creators

A Brand or agency may provide information about a campaign participant, representative or Creator.

Creators may also identify or tag Brands with which they would like to collaborate.

From our service providers

We may receive information from providers involved in:

• website hosting;
• account management;
• recurring subscriptions;
• payment processing;
• forms;
• email delivery;
• analytics;
• fraud prevention; and
• customer support.

7. How and why we use personal information

We use personal information only where we have a lawful reason to do so.

7.1 Creating and administering accounts

We use identity, contact and account information to:

• create your account;
• authenticate logins;
• provide dashboard access;
• manage preferences;
• communicate about your account; and
• provide membership services.

Lawful basis: Performance of our contract with you or taking steps at your request before entering into a contract.

7.2 Processing memberships and payments

We use payment, billing and subscription information to:

• process membership purchases;
• collect recurring payments;
• send order and renewal information;
• manage cancellations;
• process refunds;
• investigate failed or disputed payments; and
• maintain financial records.

Lawful bases: Performance of our contract, compliance with legal obligations and our legitimate interests in administering payments and preventing fraud.

7.3 Providing collaboration opportunities

We use Creator profile and application information to:

• display opportunities;
• receive applications;
• assess basic eligibility;
• create shortlists;
• introduce Creators to Brands;
• coordinate collaborations;
• communicate campaign information; and
• record campaign outcomes.

Lawful bases: Performance of our contract, taking steps at your request and our legitimate interests in operating a creator-collaboration platform.

7.4 Confirmed Influolist campaigns

Where Influolist is formally working with a Brand, we may share selected application and profile information with that Brand or its authorised agency.

The opportunity form will explain:

• which Brand is involved;
• what information may be shared;
• why it will be shared; and
• any campaign-specific requirements.

Lawful bases: Performance of our contract, taking steps at the Creator’s request and our legitimate interests in administering the campaign.

7.5 Creator Interest Lists and Brand Pitches

Influolist may invite Creators to join a list that we intend to present or pitch to a Brand even where that Brand has not yet formally instructed Influolist.

These forms will be clearly identified as a Creator Interest List, Brand Pitch or similar.

We will not present your private contact details or Creator profile to a Brand as part of this type of list unless:

• you have voluntarily applied or opted in;
• the form explains that the Brand may not yet be working with Influolist;
• the information to be shared is identified; and
• you have been given a genuine choice.

For optional Brand Pitch lists, we will normally rely on your consent. You may withdraw before the information is submitted by contacting us.

Once information has already been sent to a Brand, we may not be able to retrieve copies already received. We may, however, pass on an appropriate withdrawal or deletion request.

7.6 Supporting Brands

We use Brand representative and campaign information to:

• verify the Brand;
• communicate about campaigns;
• identify suitable Creators;
• administer opportunities;
• process fees;
• manage deliverables; and
• deal with complaints or disputes.

Lawful bases: Performance of a contract and our legitimate interests in operating and protecting the service.

7.7 Customer support and communications

We use contact and communication information to:

• answer questions;
• provide support;
• investigate problems;
• deal with complaints;
• confirm changes or cancellations; and
• keep appropriate records.

Lawful bases: Performance of our contract and our legitimate interests in providing support and managing our business.

7.8 Service and legal communications

We may send messages concerning:

• your membership;
• payment;
• security;
• applications;
• campaign outcomes;
• cancellations;
• important service changes;
• changes to policies; and
• legal or regulatory matters.

These are service communications rather than optional marketing communications.

Lawful bases: Performance of our contract, legal obligation and legitimate interests.

7.9 Marketing

We may send information about:

• new collaboration opportunities;
• Influolist services;
• Creator resources;
• membership offers;
• relevant events; and
• business updates.

We will send electronic marketing where:

• you have consented;
• the law otherwise permits it in relation to an existing customer; or
• the communication is sent to a business contact in circumstances permitted by law.

You can unsubscribe at any time by using the unsubscribe facility in the communication or contacting us.

Unsubscribing from marketing does not cancel your membership or prevent essential service communications.

7.10 Improving and analysing our services

We may use account, website and campaign information to:

• understand how Influolist is used;
• identify popular features;
• improve website performance;
• develop new services;
• measure campaign activity;
• fix technical problems; and
• prepare aggregated business reporting.

Where possible, reports will use aggregated or anonymised information.

Lawful basis: Our legitimate interests in developing, operating and improving Influolist.

7.11 Security and fraud prevention

We may use information to:

• secure accounts;
• detect unauthorised access;
• investigate fraudulent Brands or Creators;
• verify information;
• prevent payment fraud;
• enforce our Terms and Conditions; and
• protect Influolist and its Users.

Lawful bases: Legitimate interests and compliance with legal obligations.

7.12 Legal claims and compliance

We may use and preserve information to:

• comply with tax and accounting requirements;
• respond to regulators or law-enforcement authorities;
• establish, exercise or defend legal claims;
• comply with court orders; and
• protect legal rights.

Lawful bases: Legal obligation and legitimate interests.

8. Our legitimate interests

Where we rely on legitimate interests, these may include:

• operating and improving Influolist;
• connecting Creators and Brands;
• administering memberships;
• protecting users from fraud;
• maintaining network and account security;
• responding to enquiries;
• keeping appropriate business records;
• understanding service performance;
• protecting our legal rights; and
• preventing misuse of our platform.

We consider whether the use is necessary and whether your rights and interests override our interests.

You may object to processing based on legitimate interests. We will consider your request and stop the processing unless we have compelling legitimate grounds or need the information for legal claims.

9. When we share personal information

We do not sell personal information.

We may share information with the following recipients where necessary.

9.1 Brands and agencies

When a Creator applies for an opportunity, we may share the information stated on the relevant form with:

• the named Brand;
• the Brand’s authorised agency;
• an appointed campaign manager; or
• another organisation involved in administering the campaign.

Information shared may include:

• name;
• social-media handle;
• profile links;
• niche;
• general location;
• follower and engagement information;
• audience demographics;
• portfolio examples;
• application answers;
• content preferences; and
• campaign contact information.

We will not routinely give every Brand unrestricted access to Influolist’s entire membership database.

9.2 Brands as separate controllers

After a Brand receives Creator information, it may process that information as an independent controller.

The Brand is responsible for:

• using the information only for lawful purposes;
• providing any additional privacy information required;
• protecting the information;
• responding to relevant privacy rights; and
• not adding Creators to unrelated marketing lists without lawful permission.

Creators should review any privacy information supplied by the Brand.

9.3 Website, membership and payment providers

We may share information with providers that help us operate:

• our website and online store;
• user accounts;
• recurring subscriptions;
• payment processing;
• website hosting;
• forms;
• email communications;
• customer support;
• security; and
• analytics.

Our current website and subscription arrangements may involve providers such as Shopify, Bold Commerce and the payment providers displayed at checkout.

These providers may process information on our behalf or, in some circumstances, as independent controllers.

9.4 Professional advisers

We may share information with:

• solicitors;
• accountants;
• insurers;
• auditors;
• consultants; and
• other professional advisers

where reasonably necessary.

9.5 Authorities and legal recipients

We may disclose information where required or permitted by law to:

• courts;
• regulators;
• tax authorities;
• law-enforcement bodies;
• government departments; and
• fraud-prevention organisations.

9.6 Business transfers

If Influolist is sold, merged, reorganised or transferred, relevant personal information may be disclosed to prospective purchasers and transferred to the new owner.

We will take reasonable steps to ensure that the information remains protected and is used consistently with this Privacy Policy.

10. International transfers

Influolist is based in the United Kingdom, but Creators, Brands and service providers may be located in other countries.

Your information may therefore be transferred to or accessed from outside the United Kingdom.

Where UK data-protection law treats this as a restricted international transfer, we will use an appropriate protection where required, such as:

• UK adequacy regulations;
• an approved international data-transfer agreement;
• the UK Addendum to approved contractual clauses;
• another legally recognised safeguard; or
• a specific legal exception.

Where a Creator voluntarily applies to work with a Brand outside the UK, the relevant opportunity form should identify the Brand’s location or explain that an international transfer may occur.

You may contact us for further information about the protections used for relevant transfers.

11. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

The applicable period depends on:

• the nature of the information;
• the length of your membership;
• whether you are participating in a campaign;
• legal, accounting or tax requirements;
• the possibility of a complaint or dispute;
• security and fraud-prevention needs; and
• whether you have asked us to delete the information.

We normally apply the following approach:

Account and membership information

Kept while your account or membership remains active and afterwards for a reasonable period required for financial records, complaints, disputes and legal claims.

Payment and transaction records

Kept for the period required by applicable tax, accounting and legal obligations.

Creator profiles

Kept while the account remains active. Following account closure, profile information will normally be deleted or anonymised after any necessary administrative and legal retention period.

Opportunity applications

Kept for the duration of the application and campaign process and for a reasonable period afterwards for campaign records, complaints and future auditing.

We will not continue using an unsuccessful application for unrelated opportunities unless the Creator has agreed to this or another lawful basis applies.

Creator Interest Lists

Kept while the pitch or proposed opportunity remains active. Lists that do not progress will normally be deleted or reviewed within 12 months.

Support enquiries and complaints

Kept for a reasonable period after the enquiry or complaint has been closed.

Marketing information

Kept until you unsubscribe or we determine that the information is no longer current.

We may keep a minimal suppression record after you unsubscribe to ensure that we do not send further unwanted marketing.

Security information

Kept for as long as reasonably necessary to investigate incidents, prevent fraud and protect accounts.

Information may be retained for longer where required by law, a court order, regulatory investigation or legal claim.

12. Security

We take reasonable technical and organisational measures to protect personal information against:

• unauthorised access;
• unlawful use;
• accidental loss;
• alteration;
• disclosure;
• destruction; and
• cyberattack.

Measures may include:

• access controls;
• password protection;
• multi-factor authentication where available;
• secure hosting;
• encrypted connections;
• payment-provider security;
• backups;
• staff access restrictions;
• security monitoring; and
• procedures for responding to incidents.

No internet service can be guaranteed to be completely secure. You are responsible for keeping your account password confidential and informing us promptly of suspected unauthorised access.

We will never ask for your social-media password or authentication code.

13. Cookies and similar technologies

Influolist uses cookies and similar technologies to:

• operate the website;
• keep accounts secure;
• remember preferences;
• manage shopping carts and subscriptions;
• understand website use;
• measure performance; and
• support marketing where permitted.

Some technologies are necessary for the website to function. Others will be used only where legally permitted or after obtaining any required consent.

You can manage non-essential technologies through our cookie banner or settings facility.

More information should be provided in a separate Cookie Policy.

14. Your data-protection rights

Depending on the circumstances, you may have the right to:

Access

Ask for confirmation that we process your personal information and receive a copy of it.

Rectification

Ask us to correct incomplete or inaccurate information.

Erasure

Ask us to delete personal information where there is no continuing lawful reason to keep it.

Restriction

Ask us to restrict how information is used in certain circumstances.

Data portability

Receive certain information you provided in a structured, commonly used and machine-readable format, or ask us to transmit it to another organisation where technically feasible.

Object

Object to processing based on legitimate interests.

You have an absolute right to object to your information being used for direct marketing.

Withdraw consent

Withdraw consent at any time where we rely on consent.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

Complain

Make a complaint to the Information Commissioner’s Office.

These rights are not absolute and may be subject to legal conditions or exemptions.

15. How to exercise your rights

To exercise a privacy right, contact:

Email: influolist@gmail.com

Please state:

• your name;
• the email connected to your account;
• the right you wish to exercise; and
• enough information for us to locate the relevant records.

We may ask for reasonable evidence of identity where necessary to protect personal information.

We will respond within the period required by law. We will normally not charge a fee, although the law may permit a reasonable fee or refusal where a request is manifestly unfounded or excessive.

16. Marketing choices

You can stop marketing communications by:

• selecting the unsubscribe link in an email;
• changing available account preferences; or
• contacting influolist@gmail.com.

We may need a short period to process the request.

You may still receive essential communications relating to your membership, payments, account security, applications or campaigns.

17. Automated decisions and Creator selection

Influolist may use filters, categories or matching tools to help organise applications or identify potentially suitable Creators.

However, Influolist does not currently intend to make decisions that produce legal or similarly significant effects based solely on automated processing.

Brands usually make their own final Creator-selection decisions.

Where a significant decision is made solely by an automated process in the future, we will provide any additional information and rights required by law.

18. Public social-media information

Information placed on a public social-media profile may be viewed by Influolist, Brands and other members of the public.

Creators should check their social-media privacy settings and avoid publishing information they do not want to be publicly available.

Deleting information from Influolist does not automatically remove information from:

• your social-media profiles;
• a Brand’s records;
• search-engine results;
• reposted content; or
• third-party websites.

19. Photographs and content featuring other people

Where you submit photographs, videos or content featuring another identifiable person, you are responsible for ensuring that:

• you have an appropriate right or permission to submit it;
• the person understands how the content may be used where required;
• the content does not unlawfully interfere with their privacy; and
• any permissions relating to children have been properly obtained.

Influolist may remove content where privacy or consent concerns are raised.

20. Children

Influolist’s membership service is intended for people aged 18 and over.

We do not knowingly create accounts for or collect membership information directly from children.

If we discover that a person under 18 has provided personal information without an appropriate lawful basis or parental involvement, we may close the account and delete the information.

A parent or guardian who believes that a child has supplied information should contact us.

21. Third-party websites

Our website may contain links to:

• Brand websites;
• social-media platforms;
• campaign forms;
• payment providers; and
• other third-party services.

Influolist is not responsible for how independent third parties collect or use information.

You should review the privacy policy of the relevant third party before submitting personal information.

22. Changes to this Privacy Policy

We may update this Privacy Policy to reflect:

• changes to Influolist;
• new features;
• changes in service providers;
• legal or regulatory developments; or
• changes in how information is used.

The updated version will be published on our website with a revised “last updated” date.

Where a change materially affects how personal information is used, we will provide an appropriate additional notice.

23. Complaints

Please contact us first if you have concerns about how your information has been handled:

Email: influolist@gmail.com

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Making a complaint to Influolist does not affect your right to contact the regulator or bring a legal claim.

24. Contacting us

For questions about this Privacy Policy or the use of personal information, contact:

Influolist
Email: influolist@gmail.com