On this page 18 sections
- Who we are
- Who this policy covers
- The information we collect
- Where we get your information
- How we use your information and our lawful bases
- Payments
- Social platforms we work on
- Who we share your information with
- International transfers
- How long we keep it
- How we keep it secure
- Cookies
- Marketing and outreach
- Your rights
- Making a request
- Complaints
- Children
- Changes to this policy
Last updated: 11 October 2026. This policy explains how Ritual Network Ltd collects, uses, shares and protects personal data, and the rights you have over it. For any privacy question or data protection request, email data-notice@ritualnetwork.com.
Who we are
Ritual Network Ltd (“Ritual Network”, “we”, “us”, “our”) is a creator management and digital media company based in the United Kingdom. We work with creators, brands and rights holders on YouTube, Facebook, Instagram and TikTok, and we operate the website www.ritualnetwork.com and the creator dashboard my.ritualnetwork.com.
We are the controller of the personal data described in this policy. This means we decide why and how it is processed, and we are responsible for it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
Ritual Network Ltd
12 Chancery Lane, Crowle, Scunthorpe
North Lincolnshire, DN17 4HN
United Kingdom
Registered in England and Wales, company number 09987715
Data protection contact: data-notice@ritualnetwork.com
Who this policy covers
This policy applies to anyone whose personal data we handle, including:
- creators and channel owners we manage, represent, pay or enrol in programmes, and people applying to work with us;
- users of the my.ritualnetwork.com dashboard;
- creators and businesses we contact about our services;
- contacts at brands, agencies, rights holders, platforms and suppliers we work with;
- visitors to our website and people who follow or message us on social media;
- anyone who contacts our support team or makes a request to us.
The information we collect
Depending on how you deal with us, we may collect:
- Identity and contact details: name, business or trading name, email address, phone number, postal address, country of residence and social media handles.
- Channel and account information: channel names, URLs and IDs, audience size, content categories, and the analytics, revenue and performance data that platforms make available to us when your channel is linked to, managed by or enrolled through Ritual Network.
- Dashboard account data: login details, account settings, and records of what you do in my.ritualnetwork.com, such as statements viewed, details submitted and agreements accepted.
- Payment and financial information: payee name, PayPal email, Wise details, UK bank account details, payment history, earnings statements, tax and VAT information, and invoices.
- Identity verification information: where needed to pay you safely, prevent fraud or meet legal obligations, proof of identity and address.
- Contract information: agreements with you, the terms agreed and records of performance under them.
- Communications: emails, support tickets, direct messages and notes of calls or meetings.
- Technical data: IP address, browser and device type, pages viewed and similar information collected when you use our website or dashboard.
We do not intentionally collect special category data (such as health, ethnicity or religious beliefs). Please do not send it to us unless we ask for it for a specific, explained reason.
Where we get your information
- From you, when you apply or enquire through a form on our website, sign an agreement, use the dashboard, contact us or talk to us.
- From platforms, such as YouTube, Facebook, Instagram and TikTok, when you link, authorise or enrol a channel with us, or through the platform tools we use to manage channels and programmes.
- From payment providers, who confirm payment status and payee details.
- From public sources, such as the business contact details and channel information creators publish on their channels and profiles, including channel information retrieved through the YouTube Data API, which we use to identify creators who may be interested in our services.
- From partners, such as brands, agencies or other creators who introduce you to us.
How we use your information and our lawful bases
We only use personal data where we have a lawful basis under the UK GDPR. The table below sets out what we use it for and why.
| Purpose | Lawful basis |
|---|---|
| Assessing applications and onboarding creators | Steps before entering a contract; legitimate interests |
| Managing channels, programmes and brand campaigns under our agreements | Performance of a contract |
| Providing and securing the my.ritualnetwork.com dashboard | Performance of a contract; legitimate interests |
| Calculating earnings, issuing statements and making payments | Performance of a contract |
| Verifying identity, preventing fraud and managing payment risk | Legal obligation; legitimate interests |
| Keeping accounting, tax and VAT records | Legal obligation |
| Answering enquiries and support tickets | Legitimate interests; performance of a contract |
| Contacting creators and businesses about our services | Legitimate interests (see Marketing and outreach) |
| Running and improving our website, dashboard and services | Legitimate interests |
| Non-essential cookies | Consent |
| Establishing, exercising or defending legal claims, and responding to lawful requests from authorities | Legitimate interests; legal obligation |
Our legitimate interests are running and growing a creator management business, paying people accurately and safely, protecting our business and the creators we work with from fraud and misuse, and improving our services. We rely on them only where they are not overridden by your interests and rights.
Where we need personal data to enter into or perform a contract with you, or to meet a legal obligation, we may be unable to work with you or pay you if you do not provide it. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Payments
We pay creators and partners by PayPal, by Wise, or by direct bank transfer for UK bank accounts. We use Pluravida, a US-based company, to compile the earnings and payment data from our YouTube CMS reporting for our creators and our network, and to provide creators with their payment statements. Using an independent provider for this means creators receive their earnings data from a third party rather than only from us. Pluravida receives channel identifiers, earnings and revenue data, payment records and the contact details needed to deliver statements. To make a payment we share the details needed for it with the relevant provider, such as your name, payee email or account details, the amount and a payment reference.
PayPal and Wise are regulated financial services providers. They may also process your data as independent controllers to meet their own legal obligations, including anti-money laundering and fraud checks, under their own privacy policies.
Social platforms we work on
We operate on YouTube, Facebook, Instagram and TikTok. When you link, authorise or enrol a channel with us, or interact with our own pages, those platforms share data with us and we share data with them as needed to manage channels, claim and monetise content, run programmes and campaigns, and receive and reconcile revenue.
The platforms are independent controllers of the data they hold about you, and their own privacy policies apply:
- YouTube and Google: policies.google.com/privacy
- Facebook and Instagram (Meta): facebook.com/privacy/policy
- TikTok: tiktok.com/legal/privacy-policy-uk
You can review and remove the access you have given us at any time through each platform’s account or permission settings. Removing access may stop us providing some services.
YouTube API Services
Our website, dashboard and internal tools use YouTube API Services to retrieve public channel information and, where you authorise it or your channel is linked to us, channel analytics, content and revenue data. By using features that rely on YouTube API Services, you agree to be bound by the YouTube Terms of Service, and Google’s use of data is governed by the Google Privacy Policy.
We use this data only to provide our services to you, as described in this policy. We store it in our own systems for the periods set out in How long we keep it and refresh or delete it in line with YouTube’s developer policies. You can revoke our access to your Google account at any time through your Google security settings.
Who we share your information with
We do not sell personal data. We share it only where needed, with:
Service providers who process data for us
| Provider | What they do for us |
|---|---|
| Pluravida (United States) | Compiling earnings and payment data from our YouTube CMS reporting and issuing payment statements to creators |
| PayPal | Payments to creators and partners |
| Wise (wise.com) | Payments to creators and partners, including international transfers |
| Our UK bank | Direct bank transfers to UK accounts |
| Freshdesk (Freshworks) | Customer support and ticket management |
| Google Workspace (including Gmail, Google Drive and Google Sheets) | Business email, document storage and internal records, including outreach contact lists |
| Hetzner | Hosting of our website, dashboard and email server, and some company mailboxes |
| DigitalOcean | Hosting of our website, dashboard and related systems |
| Vercel | Hosting of our website and processing of website form submissions |
| Mailgun | Delivering website form submissions, such as creator applications and enquiries, to our team by email |
| Cloudflare | Website hosting, content delivery, DNS and security, including protection against attacks and abuse |
| Instantly (instantly.ai) | Managing and scheduling outreach email campaigns |
| Google (YouTube API Services) | Retrieving public channel information and, where you authorise it, channel analytics and revenue data |
| Infinite Influence Ltd | Running, reporting on and paying for our paid influencer marketing campaigns (see below) |
| Google Fonts | Delivering the fonts used on our website |
These providers may only use your data on our instructions and must keep it secure and confidential.
Infinite Influence Ltd, our campaign partner
We run our paid influencer marketing campaigns through Infinite Influence Ltd. When you take part in a paid campaign, or we put you forward for one, we share information about you and the campaign with Infinite Influence so they can plan, run, report on and pay for it on our behalf. This can include:
- your name, contact details and social media handles;
- channel and audience information, such as audience size, demographics, engagement and content categories;
- campaign details, such as the brand, brief, deliverables, timings, fees and usage terms;
- the content you create for the campaign and how it performs;
- contract, invoicing and payment information for the campaign.
If you are a contact at a brand or agency, we share your business contact details and the details of your campaign with Infinite Influence for the same purposes.
Infinite Influence acts as our processor. It may only use this information on our instructions to run our campaigns, must keep it secure and confidential, and does not use it for its own purposes. We remain responsible for it under this policy.
Others
- platforms and programme operators, such as YouTube and Google, where needed to link, manage or enrol your channel or to administer a programme you take part in;
- brands and agencies, where you have agreed to take part in a campaign with them, including through Infinite Influence Ltd as described above;
- professional advisers, such as accountants, lawyers and insurers;
- HMRC, regulators, courts, law enforcement or other authorities where the law requires it, or to establish, exercise or defend legal claims;
- a buyer or investor, or their advisers, if we sell, merge or restructure all or part of our business, under appropriate confidentiality terms.
International transfers
Some of our providers and platforms store or access personal data outside the UK, including in the European Economic Area and the United States. Where data is transferred outside the UK, we make sure it is protected by one of the following: a UK adequacy decision (which covers the EEA and, for certified organisations, the UK Extension to the EU–US Data Privacy Framework), the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another safeguard permitted by UK law. You can ask us for more information about the safeguards used by emailing data-notice@ritualnetwork.com.
How long we keep it
We keep personal data only for as long as we need it for the purposes above, including to meet legal, tax and accounting requirements and to deal with claims. As a guide:
- Contracts, earnings and payment records: the length of our relationship plus six years.
- Accounting, tax and VAT records: at least six years from the end of the financial year they relate to.
- Identity verification records: the length of our relationship plus six years, unless the law requires longer.
- Dashboard accounts: while the account is active, then in line with the contract and payment periods above.
- Support emails, tickets and general enquiries: kept as part of our business records and not routinely deleted, so we have a full history of our dealings with creators and partners if questions, disputes or claims arise later. If you ask us to delete them, we will do so unless we need to keep them for a legal obligation or to establish, exercise or defend legal claims.
- Outreach contact details: up to two years from our last contact if you do not reply or become a client. If you ask us not to contact you, we keep a minimal record of your email address so we can make sure we do not contact you again.
We may keep data for longer where it is needed for an ongoing or likely legal claim or a regulatory investigation.
How we keep it secure
We use appropriate technical and organisational measures to protect personal data, including access controls, encrypted connections, multi-factor authentication on key systems, and limiting access to people who need it for their role. No system is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will tell you and the Information Commissioner’s Office where the law requires it.
Cookies
Cookies are small files stored on your device when you visit a website. Similar technologies, such as your browser’s local and session storage, work in the same way and are covered by this section.
- Our website does not use analytics or advertising cookies. It uses your browser’s session storage only to remember choices you make, such as closing the announcement bar.
- The my.ritualnetwork.com dashboard uses strictly necessary cookies to keep you signed in and to keep your account secure.
- Google Fonts: our website loads fonts from Google’s servers, which means your browser sends your IP address to Google when the page loads.
Strictly necessary cookies and storage do not need your consent. If we introduce analytics, advertising or other non-essential cookies in future, we will ask for your consent first and update this policy. You can block or delete cookies in your browser settings, although the dashboard may not work properly without strictly necessary cookies.
Marketing and outreach
We sometimes contact creators and businesses by email or direct message to introduce our services, using business contact details that are publicly available on their channels or profiles or that have been shared with us. We do this on the basis of our legitimate interest in finding creators who may benefit from working with us, and we keep these messages relevant to your channel or business.
Every outreach email tells you who we are and how to opt out. You can ask us to stop contacting you at any time by replying to the message or emailing data-notice@ritualnetwork.com, and we will stop.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you and receive a copy;
- rectification of data that is inaccurate or incomplete;
- erasure of your data in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to processing based on our legitimate interests, and to direct marketing at any time;
- data portability, to receive data you gave us in a structured, machine-readable format or have it sent to another organisation, where processing is based on consent or contract and carried out by automated means;
- withdraw consent at any time, where we rely on consent, without affecting processing that took place before;
- not be subject to decisions based solely on automated processing that have legal or similarly significant effects.
Some rights have exceptions. For example, we may need to keep payment and tax records even if you ask us to delete them.
Making a request
To exercise any of your rights, or with any question about this policy or how we handle personal data, email:
Please tell us which right you want to exercise and include enough detail for us to find your data, such as your name, the email address you use with us and your channel name. We may ask for proof of identity before we act, to protect your data.
There is normally no charge. We will respond within one month of receiving your request, or of receiving any information we need to confirm your identity. If a request is complex or you send several, we may extend this by up to two further months and will tell you why within the first month.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first at data-notice@ritualnetwork.com so we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint
Children
Our website, dashboard and services are intended for people aged 18 or over. We do not knowingly collect personal data from children. If you believe we hold a child’s data without the right permission, email data-notice@ritualnetwork.com and we will look into it.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the date it was last updated. If we make significant changes that affect you, we will tell you by email or through the dashboard.
Ritual Network Ltd · Registered in England and Wales, company number 09987715
