Privacy statement.
How contenta handles your personal data — what we collect, why, who we share it with, and how to exercise your rights.
Last updated 28 April 2026
This is a working draft. The final statement will be reviewed by counsel before public launch.
Section 01
Who we are & how to contact us
contenta is operated by contenta UK. We are the data controller for personal data processed via the Platform. You can reach us at privacy@contenta.uk.
Section 02
Data we collect
We collect:
- Account data — name, email, password (hashed), role (business or creator).
- Profile data — business name, location, portfolio links, bio, avatar.
- Brief content — what you post or apply to, including descriptions, locations, deliverables, and rewards.
- Messages — communication with other users via the Platform.
- Transactional metadata — when and how the Platform was used (login times, agreements, deliveries).
- Technical data — IP address, device type, browser, basic usage analytics.
Section 03
How we use your data
We use your data to:
- Run the service and keep your account secure
- Match creators to relevant briefs
- Send transactional emails (sign-up confirmation, brief notifications, agreement updates)
- Mediate disputes when they're raised
- Improve the Platform through aggregated analytics
- Send occasional product updates (only with your consent)
Section 04
Legal basis for processing
We process personal data on the following legal bases under UK GDPR:
- Contract — to provide the service you signed up for
- Legitimate interests — to keep the Platform secure, prevent fraud, and improve the service
- Consent — for marketing emails and optional analytics cookies
- Legal obligation — for tax, accounting, and regulatory record-keeping
Section 05
Sharing your data
We share data with the following sub-processors who help us run the service:
- Supabase — database, authentication, file storage
- Mailgun — transactional email delivery
- Vercel — application hosting
We don't sell your personal data, ever. Where we share data with another business or creator (for example, surfacing your application to a brief), it's the minimum necessary for the agreement.
Section 06
International transfers
Some of our sub-processors operate outside the UK. Where data is transferred internationally, we rely on UK Adequacy Regulations, International Data Transfer Agreements, or Standard Contractual Clauses with appropriate safeguards.
Section 07
Retention
We keep account data for as long as your account is active, and for up to 6 years after closure for tax and audit purposes. Brief content, agreements, and messages tied to a delivered piece of work are retained for the duration of the usage licence plus a buffer for dispute resolution.
Section 08
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure (subject to our retention obligations)
- Object to processing based on legitimate interests
- Withdraw consent at any time (for marketing/analytics)
- Receive your data in a portable format
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, email privacy@contenta.uk. We'll respond within one calendar month.
Section 09
Cookies & analytics
We use a small number of strictly-necessary cookies to keep you signed in and the Platform working. Optional analytics cookies are opt-in and you can change your preferences at any time.
Section 10
Changes to this statement
We'll update this statement as the Platform evolves. Material changes will be notified by email and posted in-platform at least 14 days before they take effect.