Privacy Policy
Last updated: 19 May 2026
This Privacy Policy explains how Dadvar Consulting Limited (company number: 15449693), registered in England and Wales (“we”, “us”, “our”), collects, uses, and protects personal data when you use the Simplifying platform at simplifying.uk.
We are the data controller for personal data processed through the Platform. We are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data We Collect
Creators
- Account data: email address, password (hashed — we never see it in plain text)
- Profile data: display name, bio, hero headline, brand colours, avatar image (pulled from YouTube or uploaded)
- YouTube channel data: channel name, subscriber count, recent video titles and descriptions — fetched during onboarding to generate your brand profile using AI
- Stripe data: we store your Stripe Connect account ID and account status; full financial data is held by Stripe, not us
- Content: videos, thumbnails, and titles you upload to the Platform
- Usage data: login timestamps, API request logs (for security and debugging)
Viewers
- Account data: email address, password (hashed)
- Subscription data: which Creator you subscribe to, plan type, subscription status
- Marketing consent: whether you have opted in to receive updates from the Creator (optional)
- Usage data: login timestamps, content access logs
All users
- Technical data: IP address, browser type, device information, cookies
2. How We Use Your Data
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Provide and operate the Platform | Contract performance (Art. 6(1)(b)) |
| Process payments via Stripe Connect | Contract performance (Art. 6(1)(b)) |
| Generate AI brand profile during onboarding | Contract performance (Art. 6(1)(b)) |
| Send transactional emails (account confirmation, subscription receipts) | Contract performance (Art. 6(1)(b)) |
| Send Creator marketing emails to opted-in Viewers | Consent (Art. 6(1)(a)) |
| Prevent fraud, abuse, and security incidents | Legitimate interests (Art. 6(1)(f)) |
| Comply with legal obligations (e.g. tax records) | Legal obligation (Art. 6(1)(c)) |
| Improve the Platform | Legitimate interests (Art. 6(1)(f)) |
3. Third-Party Services
We share data with the following third parties to operate the Platform:
- Stripe: payment processing and Creator payout infrastructure. Stripe is a data controller for financial data in its own right. See Stripe’s Privacy Policy.
- Amazon Web Services (AWS): cloud infrastructure (Lambda, DynamoDB, S3, CloudFront, Cognito) hosted in the EU (eu-west-1, Ireland). AWS processes data under standard contractual clauses.
- Anthropic: AI model used during creator onboarding to generate brand suggestions. YouTube channel data (name, video titles, descriptions) is sent to Anthropic for this purpose. See Anthropic’s Privacy Policy.
- Google / YouTube: we query the YouTube Data API v3 during onboarding to retrieve public channel data. No personal data beyond your YouTube channel URL is sent to Google by us.
- Vercel: frontend hosting. See Vercel’s Privacy Policy.
We do not sell your personal data to any third party.
4. Cookies
We use the following cookies:
- auth_token — stores your session after login. Essential for the Platform to function. Expires when you log out or after 30 days.
- __cid — caches the creator ID for a custom domain lookup to avoid repeated API calls. HttpOnly, expires after 1 hour. No tracking purpose.
We do not use advertising, analytics, or tracking cookies. We do not use Google Analytics or any third-party analytics service.
5. Data Retention
- Creator accounts: retained while your account is active. Deleted within 90 days of account closure, except where required for legal or tax obligations (up to 7 years for financial records under UK law).
- Viewer accounts: retained while your account is active. Deleted within 90 days of account closure.
- Access logs: retained for 90 days for security purposes.
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate data
- Erasure: ask us to delete your data (“right to be forgotten”), subject to legal retention requirements
- Restriction: ask us to restrict processing of your data in certain circumstances
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Withdraw consent: where processing is based on consent (e.g. marketing emails), you may withdraw at any time
To exercise any of these rights, email us at privacy@simplifying.uk. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
7. International Data Transfers
Our primary infrastructure runs in AWS eu-west-1 (Ireland) within the UK’s adequacy framework. Where data is transferred outside the UK/EEA (e.g. to Anthropic or Vercel, which operate in the United States), we rely on the UK International Data Transfer Agreement (IDTA) or equivalent safeguards.
8. Children
The Platform is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered, please contact us at privacy@simplifying.uk and we will delete the account promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a notice on the Platform. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.
10. Contact
Dadvar Consulting Limited
27 Edith Road, London, England, W14 0SU, United Kingdom
England and Wales
Email: privacy@simplifying.uk