Legal

Privacy policy.

Last updated · June 2026

01Who we are

STLR Agency Ltd ("STLR", "we", "us") is a creator management agency registered in England & Wales. We are the data controller for the personal information described in this policy. You can contact us about anything privacy-related at hello@stlragency.co.uk.

This policy covers our website at stlragency.co.uk and the information we handle when you apply to, or work with, our agency.

02What we collect

When you apply to work with us, we collect what you provide in the application: your name or alias, email address, optional phone number, social media handles and platforms, an earnings range, and anything you choose to tell us about your goals.

When you become a client, we additionally process information needed to deliver our services: account credentials you authorise us to use, content schedules, performance and revenue data, and payment details required for our agreement.

When you browse the site, our hosting provider may record standard technical logs such as IP address, browser type and pages visited, used for security and to keep the site running.

03How we use it

• To review your application and contact you about it.
• To provide, manage and improve our services under our agreement with you.
• To protect your content and brand, including issuing DMCA takedown requests on your behalf.
• To meet our legal and accounting obligations.
• To keep our website and systems secure.

We do not use your data for third-party advertising, and we do not sell it — ever.

04Our lawful basis

Under UK GDPR, we rely on consent when you submit an application, contract when we deliver services under our agreement with you, legal obligation for record-keeping and tax requirements, and legitimate interests for site security and protecting your content from unauthorised use.

05Confidentiality & who we share with

We never publish, confirm or disclose the identity of anyone on our roster. Internally, your information is accessible only to the team members who need it to do their job, all of whom are bound by confidentiality obligations.

We share data only with service providers essential to running the business — such as hosting, email and accounting providers — under contracts that restrict how they can use it, and with authorities where the law requires it. We never share your details with other creators, brands or third parties without your explicit instruction.

06How long we keep it

Application data from unsuccessful or withdrawn applications is deleted within 6 months unless you ask us to keep it on file. Client data is kept for the duration of our agreement and then for up to 6 years where required for legal, tax and accounting purposes. Technical logs are kept only as long as needed for security.

07Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and confidentiality agreements. No system is perfectly secure, but if a breach ever affects your rights we will notify you and the Information Commissioner's Office as required by law.

08Your rights

Under UK data protection law you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where we have no lawful reason to keep it.
• Restriction & objection — limit or object to certain processing.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — at any time, where consent is our basis for processing.

To exercise any of these rights, email hello@stlragency.co.uk. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

09Cookies

Our website does not use advertising or tracking cookies. Any cookies present are strictly necessary for the site to function. If we ever introduce analytics or other non-essential cookies, we will ask for your consent first and update this policy.

10Children

Our services are strictly for adults. We do not knowingly collect data from anyone under 18, and all applicants must confirm they are 18 or over. If we learn we hold data belonging to a minor, we will delete it immediately.

11Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised, and material changes will be flagged clearly on this page. Continued use of the site after changes means the updated policy applies.