ShowArc Privacy Notice

Effective date: 30 July 2026
Version: 1.0

1. Who we are

ShowArc Creator Network ("ShowArc", "we", "us" or "our") is operated by Solandra Oleen, a sole trader. Solandra Oleen is the data controller for the personal information described in this notice unless we explain otherwise.

Contact details:

Privacy email:info@showarc.live

Correspondence address:
167-169 Great Portland Street
5th Floor
London
W1W 5PF

Website:https://www.showarc.co.uk/

2. What this notice covers

This notice explains how ShowArc collects and uses personal information about prospective creators, creator applicants, joined or former creators, people who contact creator support, people who request a confidential conversation, website visitors, referrers, business and brand contacts, suppliers, contractors and professional advisers.

ShowArc accepts creator applications only from people aged 18 or over. Initial creator recruitment is available to people resident in the United Kingdom, Guernsey, Ireland, the Isle of Man, Jersey, the Democratic Republic of the Congo, Gibraltar, Malta, and Svalbard and Jan Mayen.

This notice also covers personal information relating to business contacts, suppliers, contractors, brand partners and professional advisers where ShowArc determines how and why that information is used. Where the law of another country or territory gives you additional rights, those rights may also apply.

TikTok and other third-party platforms process personal information for their own purposes under their own privacy notices. ShowArc is not responsible for those third-party privacy notices. ShowArc and TikTok are separate controllers for their own processing unless a specific written arrangement states otherwise.

3. Personal information we collect

Depending on how you interact with ShowArc, we may collect:

  • Identity and contact details, such as name, preferred name, email address, telephone number, country, time zone and communication preferences.

  • TikTok account details, such as username, user ID, profile link, public profile information and publicly visible LIVE content.

  • Creator application information, including content categories, LIVE format, experience, schedule, goals, support priorities and referral source.

  • ShowArc assessment information, including internal assessment scores, recommendations, rationale and development opportunities.

  • Network and onboarding information, including invitation, joining, agreement, policy acknowledgement, coaching and activation milestones.

  • Creator activity and performance information made available lawfully through TikTok tools, official reports or information you provide, such as LIVE activity, Diamonds, performance trends and campaign participation.

  • Creator development information, including goals, coaching notes, review dates, development plans and agreed actions.

  • Support and complaint information, including enquiry category, issue summary, correspondence, outcome and operational case status.

  • Commercial and financial administration information, including agreed commercial terms, invoices, payments and tax information where relevant. ShowArc will not request online-banking passwords or full payment-card credentials.

  • Marketing preferences and records of consent, unsubscribe requests or objections.

  • Website and technical information, such as IP address, browser, device, form-submission data, cookie identifiers and website interactions, depending on the technologies enabled.

  • Business-contact information about brand partners, suppliers, advisers and other professional contacts.

4. Where we get personal information

We may obtain personal information:

  • directly from you, including through forms, applications, agreements, meetings, coaching sessions, support requests, email, telephone or messages;

  • from TikTok, including publicly available profiles and LIVE content, and authorised TikTok systems, reports or communications;

  • from website, CRM, email and document systems used to operate ShowArc, where those systems generate submission, communication, security or technical records;

  • from a creator, team member, referrer, brand partner or professional adviser where it is lawful and appropriate;

  • from our website, HubSpot forms and associated technical systems; and

  • from public authorities, professional advisers or other parties where necessary for legal, safety, fraud-prevention or complaint-handling purposes.

5. Why we use personal information and our lawful bases

UK data protection law requires us to have a lawful basis for each use of personal information. The table below explains the main purposes for which we use information and the lawful bases we rely on.

6. When you need to provide information

You may choose whether to make an enquiry or apply to ShowArc. However, some information is necessary for us to assess an application, take steps towards a creator agreement, administer the creator relationship or respond to a support request. If you do not provide that information, we may be unable to progress the request.

Optional marketing consent is not required to apply, join, receive support or continue a creator relationship with ShowArc.

7. Special category and sensitive information

Our ordinary creator forms, including the Creator Interest, Creator Application and Creator Support forms, must not be used to submit medical information, detailed safeguarding information or other special category information. Please do not submit passwords, authentication codes, banking credentials, payment-card information, unrequested identity documents, evidence files or unnecessary information about another person through those forms.

ShowArc offers a confidential-conversation request route. The public form collects only minimum routing information, such as contact details, safe contact preferences, a broad category and urgency. Please do not enter detailed allegations, medical information, evidence files or unnecessary information about another person in the public form or an ordinary HubSpot Ticket. If further information is needed, an authorised handler will explain the approved secure process and any limits to confidentiality.

Where we process special category information or information about alleged criminal activity, we do so only where it is necessary and where an applicable legal condition permits it. We may disclose information to emergency services, regulators, law-enforcement bodies or other authorities where required or permitted by law, or where necessary to protect someone's vital interests.

8. Who we share personal information with

Access within ShowArc is limited to authorised people who need the information for an approved purpose. We may share personal information only where it is necessary and proportionate with:

  • TikTok and relevant TikTok group entities, where necessary to administer the creator network, verify status, support approved processes or manage platform activity. TikTok processes information for its own purposes under its own privacy notices.

  • HubSpot, which provides our CRM, forms and related communication and operational tools and generally acts as a processor for customer data under its applicable terms and data-processing agreement.

  • Squarespace, which provides website hosting and domain registration, and Google, which provides email, communications and cloud document storage. These suppliers process personal information under their applicable service terms and data-processing arrangements.

  • Electronic-signature, accounting and payment service providers where they are appointed and their services are needed for an approved purpose.

  • Approved contractors, coaches or service providers who need access for a defined ShowArc purpose and are subject to confidentiality and data-protection obligations.

  • Brand or campaign partners where a creator has agreed to participate or the disclosure is otherwise necessary and lawful. Commercial and usage-rights terms should be made clear before sharing beyond initial suitability discussions.

  • Accountants, lawyers, insurers and other professional advisers.

  • Regulators, courts, law-enforcement bodies, emergency services or other public authorities where disclosure is required or permitted by law.

  • A purchaser, investor or successor if ShowArc reorganises, transfers or sells all or part of the business, subject to appropriate confidentiality and legal safeguards.

9. International transfers

Some suppliers and platform providers may access, store or otherwise process personal information outside the United Kingdom, including through group companies and sub-processors. Where a restricted transfer takes place, we use an appropriate lawful mechanism. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another mechanism permitted by UK data protection law.

You may contact us for more information about the safeguards used for a particular transfer.

10. How we protect personal information

We use technical and organisational measures appropriate to the nature of the information and the risks involved. These include controlled access to systems, strong account security, multi-factor authentication where available, data minimisation, secure sharing, controlled exports and deletion, supplier review, and procedures for responding to suspected incidents.

No online service is completely secure. Please do not send passwords, authentication codes or highly sensitive information through ordinary email, direct messages or standard ShowArc forms.

11. How long we keep personal information

We keep personal information only for as long as necessary for the relevant purpose. Eighteen months is our default operational period after the last substantive contact, closure of an application or closure of an ordinary support matter. Longer periods apply where information is needed for an active creator relationship, a contract, tax or accounting obligations, a complaint, a legal claim, safeguarding or another documented legal requirement.

12. Your data protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

  • be informed about how we use your personal information;

  • request access to the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to erase information in certain circumstances;

  • ask us to restrict processing in certain circumstances;

  • object to processing based on legitimate interests and object to direct marketing at any time;

  • receive eligible information in a structured, commonly used and machine-readable format, and ask us to transfer it where the right to portability applies;

  • withdraw consent at any time where consent is the lawful basis; and

  • complain to the Information Commissioner’s Office.

13. Your right to object

You have the right to object to processing based on legitimate interests. We will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for legal claims.

You have an absolute right to object to direct marketing at any time. You can unsubscribe using the link in a marketing email or contact us using the details in section 1.

14. Marketing communications

We will send optional creator education, events, network news or opportunity emails only where the applicable marketing rules allow us to do so. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Operational messages about an application, agreement, support request, policy matter or creator relationship are not marketing messages and may still be sent where necessary for the relevant purpose.

15. Automated decisions and profiling

ShowArc may use internal assessment scores, CRM stages, performance bands or creator-health indicators to organise work and support human review. We do not intend to make creator acceptance, exit, support or other decisions with legal or similarly significant effects solely by automated means.

If this changes, we will update this notice and provide the additional information required by law before starting that processing.

16. Cookies and website information

Our website and embedded HubSpot forms may use cookies or similar technologies. Necessary technologies support security and form operation. We will ask for consent before using non-essential analytics or marketing technologies where required.

Our Cookie Policy and cookie settings provide further information about the technologies used, their purposes, providers and durations, and explain how to change your preferences.

17. Links to other services

Our website or messages may link to TikTok and other third-party services. Those services control their own processing and their privacy notices apply when you use them.

18. Changes to this notice

We will review this notice regularly and update it when our services, suppliers or legal obligations change. We will bring material new uses of personal information to the attention of affected people before beginning the new processing where required.

Effective date: 30 July 2026.

19. How to contact us or complain

Contact ShowArc first if you have a question, want to exercise a right or have a concern about how we use personal information:

Email:info@showarc.live

Post:
167-169 Great Portland Street
5th Floor
London
W1W 5PF

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. If you live or work outside the UK, you may also have the right to complain to the data protection regulator in your country or territory.

ICO website:https://ico.org.uk/

A table outlining purposes, typical information used, and lawful basis for various activities related to managing TikTok creator networks, including responding to inquiries, contacting potential creators, onboarding, coaching, administering activities, handling support, protecting communities, campaigns, accounting, marketing, website operation, and privacy rights requests.
A table outlining record categories and their retention periods, including items like inquiries, creator relationships, support records, complaints, financial records, marketing preferences, privacy requests, cookies, and case records.