Privacy notice
Your data, plainly.
What we collect, why we use it, who sees it, how long we keep it, and what you can ask us to do. Last updated 8 October 2026.
- We only collect what you send us, what we record when you sign an NDA, and a little data to keep the site secure.
- We never sell your data, and we use no advertising or tracking cookies.
- To see, correct or delete your data, email partner@trufflestudio.app.
1. Who we are
Truffle Studio is the trading name of T T BRANDING LTD, a company registered in England and Wales (number 12673954) with its registered office at 4 Nutter Lane, Wanstead, London E11 2HY. We are the controller of the personal information described here. If the company changes its name, its number and this notice stay the same.
For anything about your data, email partner@trufflestudio.app.
2. What we collect and why
When you apply to partner
- Your name, email and phone number
- Your social handles and the platforms you use, and where you are based
- Your manager's name and email, if you have one or are applying for a creator
- Your note to us, and anything you tell us about your audience, what fans ask for, what you have sold before, and your ideas and timing
- Why
- To look at your public profiles, review your application, reply to you and talk about working together.
- Legal basis
- Steps you ask us to take before entering into a contract, and our legitimate interest in finding creators to partner with.
If we contact you first
- Your name and public social handles
- The size and focus of your audience, taken from your public profiles
- Contact details you have made public or given us, such as a business email
- Notes of our messages and calls, and when to follow up
- Why
- To find creators who could be a good fit, and keep track of our conversations with them.
- Legal basis
- Our legitimate interest in finding creators to partner with. You can ask us to stop at any time and we will delete these details.
When you sign an NDA with us
- The details in the agreement: your name (or your company's name, number and address), email and address
- Who you are signing as, your position, and your confirmations that you are 18 or over and allowed to sign
- Your typed signature, the date and time, your IP address and your browser details
- A fingerprint of the exact document you signed, and when the link was first opened
- Why
- To make the agreement, send both sides a signed copy, and be able to prove who signed what and when.
- Legal basis
- Entering into and performing a contract, and our legitimate interest in being able to establish, exercise or defend legal claims.
When you open your private concepts page
- That your page or a concept deck was opened, and when
- Which concept you marked as your favourite
- Why
- So our team knows when to follow up and which idea to take further.
- Legal basis
- Our legitimate interest in running the conversation with you well.
To keep the site secure
- The IP address used to send a form or to sign in to our team's desk, and when
- Why
- To stop spam and block repeated wrong passwords.
- Legal basis
- Our legitimate interest in keeping our systems and your information secure.
When you visit the site
- Page views counted by Vercel Web Analytics, which uses no cookies and does not identify you
- Why
- To see which pages people use, in total.
- Legal basis
- Our legitimate interest in understanding how the site is used.
When you email us
- Your email address and what you write
- Why
- To reply and keep a record of the conversation.
- Legal basis
- Our legitimate interest in replying to you, or steps towards a contract if that is what you are asking about.
If you do not give us the details a form asks for, we may not be able to review your application or complete an NDA with you. We do not make decisions about you by automated means alone.
3. Cookies
We set no cookies for visitors. The only cookie on this site keeps our own team signed in to their desk, and it is strictly necessary for that. Our analytics count visits without cookies, which is why there is no cookie banner.
4. Who we share it with
We never sell your data. We share it only with:
- Service providers who run the site for us under contract: Vercel (hosting, file storage and analytics), Neon (our database) and Resend (sending email). They may only use it to provide their service to us.
- People working on your project, if we partner with you, under a duty of confidentiality.
- Professional advisers such as our lawyers and accountants, where needed.
- Authorities or courts, where the law requires it or to establish, exercise or defend legal claims.
5. Data outside the UK
Some of our providers store or process data in the United States or elsewhere outside the UK. When they do, the transfer is protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses with the UK addendum. Email us for details of the safeguard that applies.
6. How long we keep it
- Applications and outreach records
- Up to 2 years after we were last in touch. If we start working together, for as long as we do, plus 6 years.
- Signed NDAs and their signing records
- For as long as the NDA's duties last (up to 7 years after signing, longer for trade secrets), plus 6 years in case of a claim.
- NDAs that were never signed
- Up to 2 years after they were prepared.
- Security logs of IP addresses
- 30 days, then deleted automatically.
- Emails
- Up to 2 years after the conversation ends, unless they belong to a project or agreement above.
After that we delete it, or keep it only in a form that no longer identifies you.
7. Your rights
- See your data
- Ask for a copy of what we hold about you.
- Correct it
- Ask us to fix anything that is wrong or incomplete.
- Delete it
- Ask us to delete your data. We may need to keep a signed NDA to prove or defend a claim, and we will tell you if so.
- Limit or object
- Ask us to stop or limit using your data, including any time we contact you first. We will stop unless we have a strong legal reason not to.
- Take it with you
- Ask for the data you gave us in a format you can reuse.
Email partner@trufflestudio.app to use any of these. It is free, and we will reply within one month. We may ask you to confirm who you are first.
If you are unhappy with how we have handled your data, please tell us so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk.
8. Under 18s
Our site and agreements are for adults. Someone under 18 must not sign an NDA with us or apply on their own. If a creator is under 18, we work only through their parent or guardian. If we learn we hold a child’s details without that, we will delete them.
9. Changes to this notice
If we change how we use your data, we will update this page and the date at the top. If a change affects you significantly, we will tell you directly.