Privacy Policy.

At People Say, we’re in the business of building trust, not just between brands and creators, but between us and you. As a UK-based agency, we are committed to protecting the privacy of our website visitors, our clients, and the creators we work with. This policy outlines how we handle your data in accordance with the UK General Data Protection Regulation.

1. How We Collect Your Data

We collect information to deliver high-performance UGC and a seamless website experience. This happens in three ways:

  • Direct Interaction: When you fill out a contact form, sign up for a package, or join our creator talent pool.

  • Automated Technologies: As you navigate our site, we use cookies and similar technologies to collect data about your device and browsing patterns.

  • Third Parties: We receive information from our hosting provider (Squarespace) and payment processors (Stripe/PayPal) to facilitate your investment in our services.

2. Types of Data We Collect

  • Website Visitor Data: To power our site analytics, we collect your IP address, browser type, device information, and the web pages you visited prior to coming to our site.

  • Client Data: Company name, contact names, email addresses, phone numbers, and billing information.

  • Payment Credentials: For clients on subscription tiers or utilising our 100% upfront investment model, we securely process payment details via third-party processors.

  • Creator Data: Names, contact details, social media handles, demographic info for brief matching, and payment details for remit purposes.

3. How & Why We Use Your Data

We only process your data when we have a legal basis to do so (Contract, Consent, or Legitimate Interest):

  • Service Delivery (Contract): Managing project updates, brief approvals via the Brand Portal, and asset delivery.

  • Payment Processing (Contract): Processing one-off upfront payments or recurring monthly fees (Autopay) as authorised in our terms.

  • Creator Management (Contract/Legitimate Interest): Matching creators to brand briefs and enforcing non-circumvention tracking to protect our ecosystem.

  • Website Optimisation (Legitimate Interest): Using Squarespace analytics to improve our site’s performance and user experience.

4. Cookies & Tracking

Our website uses cookies - small files stored on your device - to help the site run effectively and provide analytics.

  • Functional & Required Cookies: These allow you to navigate the site and use key features like the Brand Portal.

  • Analytics & Performance Cookies: These collect data on how visitors interact with our site. You can manage your cookie preferences through our site’s cookie banner or your browser settings.

5. Data Sharing & Third Parties

We do not sell your data. We only share it when necessary to run our business:

  • Squarespace: Our website hosting provider. They receive your data so they can provide website and invoicing services to us.

  • Payment Processors: To securely manage Autopay and 100% upfront invoicing.

  • Sub-contractors (Creators): Limited, project-specific data required for content production.

  • Security Tools: We may share data with Google Places API for address auto-completion to improve your checkout experience.

6. International Data Transfers

As we use Squarespace (a US-based platform), your data may be transferred to and stored on servers outside the UK or the European Economic Area (EEA). We ensure that these transfers are protected by standard contractual clauses or other legal safeguards to maintain your privacy rights.

7. Security, Retention & The Brand Portal

  • Confidentiality: We use industry-standard security measures to protect your information.

  • Brand Portal Security: Access to Client IP and final assets is restricted to authorised users. Access is subject to immediate suspension for failed Autopay transactions or non-payment.

  • Retention: We keep your data only as long as necessary for the purposes outlined (e.g., tax records or enforcing the 12-month non-circumvention period).

8. Your Rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. You may also object to processing or request data portability.

Note that some data must be retained for legal or contractual enforcement.

To talk to us about how we use your data or correct data we have on file, get in touch.

Email: support@peoplesay.co.uk

Phone: 01603 336781

A black-and-white pop art style graphic of three human eyes, with a pink quotation mark on each side.