UGC Nation

Privacy Policy

How UGC Nation collects and uses personal data of creators, brands and visitors.

Last updated: [DATE]

Draft — not yet legally reviewed

This document is a working draft. Items in [brackets] must be completed by UGC Nation and the full text reviewed by a lawyer before public launch.

Controller

ORALMENTE S.R.L., Via Eduardo De Filippo 22, 56029 Santa Croce sull'Arno (PI), Italy. VAT IT02376760506, REA 202516. Contact: ciao@ondastudioweb.com — certified email (PEC): 02376760506@impresa.italia.it.

Data we process

Account data (email, password hash, name, username, country, language); profile content you publish (photo, bio, niches, videos, packages, links); requests and private messages between brands and creators; collaboration files and comments in Drop Rooms; technical data needed to run the service (session, security logs).

Purposes and legal bases

Providing the service you signed up for (contract); security, abuse prevention and moderation (legitimate interest); showing your profile in the marketplace only after your explicit opt-in (consent, revocable at any time); legal obligations.

Who can see what

Your public page is visible to anyone with the link. Marketplace listing is visible only if you switch it on. Private messages are visible only to the brand and creator involved. Drop Room files are private and reachable only through expiring, revocable links.

Processors and transfers

We use hosting, database and storage providers acting as processors: [LIST TO CONFIRM]. Transfers outside the EEA rely on [SAFEGUARDS TO CONFIRM].

Retention

Account data is kept while the account is active and deleted or anonymised within [PERIOD] after deletion, except where the law requires longer retention.

Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Write to ciao@ondastudioweb.com. You can also complain to your data protection authority.

Information the owner must provide

  • Data Protection Officer or EU representative, if required
  • Governing law and competent court
  • Hosting / processor list and data transfer safeguards to confirm
  • Minimum age, data retention period and default usage-rights rule
  • Final commission and payment terms once online payments are enabled