The Trusted Creator

Privacy notice

What we collect, why, who sees it, and how long we keep it. We have tried to say it plainly.

Last updated 28 October 2026

1.Who we are

The Trusted Creator runs the certification service on this website and decides how your information is used. Contact: our contact form or .

2.What we collect

  • When you apply: your name, email address, platform, channel link, follower count and a description of what you make.
  • When you sign in: your email address. We use a sign in link, so we do not hold a password.
  • During an audit: the result of your identity and channel checks with a reference, notes by our auditors, your signed declaration, findings, your replies, our decisions, and the files you send as evidence together with a SHA-256 hash of each.
  • If we record the live session, we do it only with your agreement and store the recording as evidence.
  • Records of the emails we send you and whether they were delivered.
  • If you ask to see a creator's evidence: your name, email, organisation and reason, which we pass to the creator and keep with the request.

3.Identity documents

We check identity documents during the live session and record only the result and a reference. We do not keep copies of identity documents.

4.Why we use it

  • To assess your application and carry out the audit you asked for.
  • To issue, maintain and, if needed, remove a certificate, and to keep the public registry accurate.
  • To prevent fraud, including fabricated evidence and misuse of the mark.
  • To meet legal obligations and to handle complaints and appeals.

5.What becomes public

If you are certified, the public record shows your name, the channels covered, the tier, the audit period, the result of each check with a short summary, the titles of the videos sampled, and the evidence index with a hash of each bundle. It also shows the status of your certificate and, if it is removed, a reason code.

We list you in the verified creators gallery only if you agree, and you can change that in your portal. We never publish your evidence files, your email address or the identity check. Someone who wants to see your evidence files can ask, and you decide. If you agree they get a private link that lasts 7 days. Identity and live session recordings are never shared.

6.Who else handles your information

We use a small number of service providers to run the site: a database and private file storage provider, an email delivery provider, and a hosting provider. They process information on our instructions. We do not sell your information and we do not use advertising or analytics trackers.

7.How long we keep it

  • Evidence files: deleted 24 months after your certificate ends, or 24 months after the decision if no certificate was issued. The hashes in the public index stay.
  • Applications we declined: deleted after 12 months.
  • Audit records such as findings and decisions: kept for 24 months after your certificate ends so we can deal with disputes, then deleted on request.
  • The public certificate record and the removal log stay, because the registry depends on them.

8.Your rights

You can ask to see the information we hold about you, correct it, or have it deleted, apart from what we need to keep the public registry accurate or to meet a legal duty. You can also complain to your data protection authority. Use

the contact form

and choose a request about your information.

9.Security

Evidence is stored in private storage and only our auditing team can open it. Each access by staff is logged. Files are encrypted at rest by our storage provider and in transit.

10.Cookies

We set a small number of strictly necessary cookies, only when you sign in, to keep you signed in. There are no advertising or analytics cookies.