Last updated: 4th December 2025

This Privacy Policy explains how SevenSix Agency Limited (“we”, “us”, “our”) collects, uses, stores, and protects your personal data. It applies to anyone who:

• Visits our website

• Purchases a digital product

• Signs up to our mailing list

• Contacts us or submits a form

• Interacts with us on social media

• Is represented by us as talent

• Works with us as a brand, partner, or supplier

We are committed to protecting your privacy and handling your personal data in a clear, transparent and responsible way.

1. Who we are

SevenSix Agency Limited
167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF
Company Number: 11851970

Email for privacy concerns: hello@sevensixagency.com

We are the “data controller”, meaning we decide how and why your personal data is processed.

2. The data we collect

We collect different types of personal data depending on how you interact with us.

A. Data you provide directly

• Name

• Email address

• Postal address

• Phone number

• Payment details (processed securely by Stripe or PayPal; we do not see full card details)

• Any information you share via forms or email (e.g., enquiries, talent submissions, collaboration interest)

• CVs and job applications sent to us by email

• Data shared when entering competitions, giveaways, or challenges

• Data shared within talent onboarding
  
  

B. Data collected automatically

Through Cookiebot, Google Analytics, Meta Pixel, and Squarespace, we automatically collect:

• IP address

• Browser type

• Device information

• Pages visited and time spent

• How you navigate our website

• Marketing/advertising interactions (if you consent)
  
  

C. Data received from third parties

• Social media platforms (if you interact with our content or ads)

• Payment providers (confirmation of purchase)

• Form tools (Typeform, Flodesk)

• Embedded tools (YouTube, Vimeo, TikTok, Instagram) may collect their own data when you view embedded content
  
  

D. Talent and collaborator data

If you are represented by us or explore representation with us, we may collect:

• Biography details

• Social media handles and performance insights

• Contact information

• Financial information needed for payments

• Contractual details

• Images and media assets

• Right-to-work documentation (if applicable)
  
  

E. Historical sensitive data (Creator Club)

We previously collected special category data (e.g., racial/ethnic background, neurodiversity) for the Creator Club.
We no longer collect this information, but we are still storing it securely under strict controls.

3. How we use your data

A. To provide and improve our services

• Deliver digital products

• Respond to enquiries

• Understand how our website is used

• Improve content, user experience, and performance
  
  

B. For business operations

• Processing payments

• Accounting and financial reporting

• Managing talent relationships

• Managing brand partnerships and collaborations

• Internal analytics and planning
  
  

C. Marketing (with your consent)

• Sending newsletters via Flodesk

• Creating personalised marketing with Meta Pixel or Google Analytics (only if you consent through Cookiebot)
  
  

D. Talent management

For talent we represent, we use data to:

• Pitch talent to brands

• Review performance

• Facilitate bookings, contracts, and payments

• Maintain ongoing talent relationships
  
  

E. Legal or regulatory compliance

• Tax requirements

• Financial reporting

• Responding to legal requests
  
  

4. Legal bases for processing

Under the UK GDPR, we rely on the following legal bases:

Contract

When processing is necessary to deliver a product, represent talent, or fulfil a request.

Legitimate Interests

For activities such as:

• Website security

• Analytics (essential, anonymised)

• Internal planning

• Talent management (non-sensitive data)
  

We only rely on legitimate interests where your rights and freedoms are not overridden.

Consent

We rely on consent for:

• Cookies that are not strictly necessary (analytics, marketing)

• Marketing emails (Flodesk)

• Processing special category data (Creator Club)
  

You can withdraw consent at any time.

Legal obligation

For tax, accounting, and compliance requirements.

5. How we use cookies and tracking

Our website uses Cookiebot by Usercentrics to manage all cookies and tracking tools on our site.

Non-essential cookies (e.g., Meta Pixel, Google Analytics) will only run if you give us permission through the Cookiebot banner.

You can change or withdraw your consent at any time using the “Change cookie settings” link in our footer.

A full Cookie Policy is provided separately.

6. Embedded content and third-party tools

Our website uses embedded services such as:

• YouTube

• Vimeo

• TikTok

• Instagram

• Spotify

• Typeform
  

These providers may collect data about you, use cookies, or track your interaction with embedded content.
Their processing is governed by their own privacy policies.

7. Who we share your data with

We only share your data with trusted third parties that help us run our business, such as:

• Cookiebot by Usercentrics (cookie consent management)

• Flodesk (email marketing)

• Stripe & PayPal (payment processing)

• Squarespace (website hosting)

• Google Analytics (if consented)

• Meta Platforms (if consented)

• Typeform (for forms)

• Google Drive (secure storage accessible only by our team)

• Our accountant (access to purchase data for bookkeeping)
  

We do not sell or rent your data.

Some of these providers may transfer data outside the UK/EU. Where they do, we ensure appropriate safeguards such as Standard Contractual Clauses.

8. How long we keep your data

We keep your data only for as long as necessary:

• Customer purchase information: 6 years (legal obligation)

• Mailing list data: until you unsubscribe

• Contact form messages: 12–24 months

• Talent data: for the duration of representation + up to 6 years

• Job applications: deleted after the role is filled unless you ask us to keep it

• Creator Club sensitive data: securely stored and reviewed annually for deletion

You may request deletion at any time.

9. How we protect your data

We use technical and organisational measures including:

• Secure HTTPS website

• Password protection and access restrictions

• Secure cloud storage (Google Drive)
  Encrypted payment processors (Stripe, PayPal)

• Cookie consent control via Cookiebot

• Staff access limited to those who need it

• Regular review of processing practices

10. Your rights

You have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion

• Object to processing

• Restrict processing

• Withdraw consent

• Move your data to another provider (data portability)

• Complain to the Information Commissioner’s Office (ICO)

To exercise these rights, contact: hello@sevensixagency.com

11. Children’s data

Our website and services are not intended for children under 16.
We do not knowingly collect data from children.

12. Changes to this policy

We update this policy from time to time. The version date will always be shown at the top of the page.

13. Contact us

For questions or concerns about this policy, email:
hello@sevensixagency.com