Privacy and GDPR as a creator

Your data, your rights

As a creator you handle personal data — your own and your fans'. Working with an agency adds another layer. Understand your rights and your responsibilities.

What counts as personal data?

Any information that can identify a person directly or indirectly: name, email, payment details, IP addresses, chat messages and — importantly — content that may reveal special-category data.

Data processing agreement

If an agency can access your data, there must be a data processing agreement covering purpose, duration, security, sub-processors and deletion.

Data minimisation

A good agency only asks for the data it genuinely needs. Chat staff don't need to see ID documents; tax paperwork is for the compliance team only.

International transfers

If staff outside the EU can access your data, appropriate safeguards — such as standard contractual clauses — must be in place.

Your rights

You have the right to access, correct, delete and port your data. A professional agency has clear procedures for all of these.