YOUR
PRIVACY.

We collect only the data we actually need. Depending on how you interact with us, that may include:

• Identity data: your name, as provided when you contact us or make an enquiry.
• Contact data: your email address and, where relevant, your phone number or business address.
• Business data: your company name, role, and the nature of a sponsorship or partnership enquiry.
• Communications data: any messages you send us via our contact form or by email.
• Technical data: IP address, browser type, device type, pages visited and referral source, collected automatically when you visit our website.
• Usage data: how you interact with our website pages and campaign content.

We collect personal data through the following routes:

• Direct contact: when you complete our contact form, send us an email, or reach out about a sponsorship, campaign or partnership.
• Automated technology: cookies, server logs and similar technologies collect technical and usage data as you browse our website. See the Cookies section below for more detail.
• Third parties: we may receive limited data from analytics providers (such as Google Analytics) and social media platforms where you interact with our content.

We use your personal data for the following purposes only:

• To respond to enquiries — when you contact us about a campaign, sponsorship or partnership.
• To fulfil agreements — to manage brand partnerships, creator relationships and campaign delivery.
• To improve our website — using anonymised or aggregated analytics data to understand how the site is used and where it can be improved.
• To communicate updates — where you have opted in, to send relevant campaign news or updates.
• To comply with legal obligations — where required by law, regulation or court order.

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Legitimate interests (Article 6(1)(f)): for responding to business enquiries, managing campaign relationships and understanding how our website is used. We have assessed that these interests are not overridden by your rights.
• Contract (Article 6(1)(b)): where processing is necessary to fulfil a contract with you — for example, a brand partnership or creator agreement.
• Consent (Article 6(1)(a)): where you have actively opted in to receive communications from us. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): where we are required to process data to comply with a legal or regulatory requirement.

We share personal data only where necessary. The categories of recipient are:

• Service providers: including website hosting providers, email platforms and analytics tools that help us operate our website and business. These parties act as data processors and are contractually required to handle your data securely and only for the purposes we specify.
• Campaign partners: where you are involved in a specific campaign or partnership, relevant parties may need to receive your contact details. We will make this clear at the time.
• Legal and regulatory bodies: where we are required to share data by law, court order, or in connection with legal proceedings.

We keep your data only for as long as necessary for the purposes it was collected, or as required by law.

• Enquiries that do not result in an agreement: contact data is retained for up to 12 months, then deleted.
• Partnership or campaign agreements: relevant data is retained for the duration of the agreement and for up to 6 years thereafter, in line with standard UK contractual limitation periods.
• Website analytics data: typically retained in anonymised or aggregated form in line with our analytics provider’s data retention settings.
• Marketing communications: data is retained until you unsubscribe or withdraw consent, after which it is removed from active lists promptly.

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at the email address in the Contact section below. We will respond within one calendar month.

Our website uses cookies — small text files placed on your device — to help the site function and to understand how it is used.

• Strictly necessary cookies: required for the website to operate correctly. These cannot be disabled.
• Analytics cookies: we use Google Analytics to collect anonymised data about how visitors use our website — pages visited, time on site, and device type. This data is aggregated and does not identify you personally. You may opt out via Google’s opt-out browser add-on or your browser settings.
• Preference cookies: where applicable, to remember any choices you make on the site.

Some of our service providers (including Google Analytics) may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, including:

• Transfers to countries with a UK adequacy decision.
• Use of the UK International Data Transfer Agreement (IDTA) or equivalent standard contractual clauses where no adequacy decision exists.

If you have questions about specific transfer mechanisms, please contact us using the details below.

If you have any questions about this policy, wish to exercise a right, or have a concern about how we handle your data, please contact us:

• Email:
• Post: The Real LOL Club Ltd, 85–87 Saltergate, Chesterfield, Derbyshire, S40 1JS

We aim to respond to all requests within one calendar month. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO):