Privacy Policy
At WE ARE ELIXIR, we are committed to protecting personal data and handling it responsibly, securely, and in line with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains what personal data we collect, how we use it, how we store it, and the rights individuals have in relation to their information.
Who We Are
WE ARE ELIXIR is a creator-focused agency and community. We may collect and process personal data through our website, communications, onboarding processes, creator management systems, and other legitimate business interactions.
This may include interactions with creators, applicants, members of the public, brand partners, service providers, and, where necessary, relevant authorities.
What Data We May Collect
Depending on how someone interacts with us, we may collect and store personal data including:
Full name
Email address
Date of birth
Phone number
WhatsApp contact details or message history where relevant to our communications
TikTok-related account or performance data made available through approved management platforms or tools provided by TikTok
Device and technical information submitted through our website or forms, such as IP address and browser or device details
Internal records, including staff incident reports, safeguarding notes, support logs, and other operational records
Any other information voluntarily provided to us through forms, applications, emails, or direct communication
How We Use Personal Data
We use personal data to support the safe and effective running of WE ARE ELIXIR and to provide our services responsibly.
This may include using personal data to:
Review applications and manage onboarding
Communicate with creators, partners, and members of the public
Verify identity where appropriate
Provide creator management and support services
Maintain internal records relating to welfare, safeguarding, support, and operations
Monitor and improve our website, systems, and services
Comply with legal, regulatory, and safeguarding obligations
Respond to lawful requests from regulators, law enforcement, or other authorities where required
We only process personal data where we have a lawful basis to do so, including consent, contractual necessity, legal obligation, legitimate interests, or safeguarding-related necessity where applicable.
How We Store and Protect Data
We take data security seriously and work to ensure that personal information is protected against unauthorised access, misuse, loss, or disclosure.
Personal data is stored using secure systems and remote servers with access limited to authorised personnel who have appropriate training and responsibilities relating to data protection and confidentiality.
We also work with trusted service providers and platforms that support secure storage, communication, and operational processes. Where third-party providers are used, we take reasonable steps to ensure they handle data in a compliant and secure manner.
Sharing of Data
We do not share personal data unnecessarily.
We may share data where required with:
Trusted service providers who help us operate our services
Platforms relevant to creator management, including TikTok-approved systems where applicable
Professional advisers or compliance partners
Regulators, law enforcement, or safeguarding authorities where legally required or where necessary to protect individuals
Any sharing of personal data is limited to what is necessary and carried out in line with legal obligations and data protection requirements.
Data Retention
We keep personal data only for as long as necessary for the purpose it was collected, including to meet legal, regulatory, operational, or safeguarding requirements.
When data is no longer required, we will securely delete or anonymise it where appropriate.
Your Data Protection Rights
Under UK data protection law, individuals may have the right to:
Request access to the personal data we hold about them
Request correction of inaccurate or incomplete personal data
Request deletion of personal data in certain circumstances
Object to the processing of personal data in certain circumstances
Request restriction of processing in certain circumstances
Request transfer of their data where applicable
Withdraw consent where processing is based on consent
To learn more about your rights, you can visit the Information Commissioner’s Office (ICO) website: https://ico.org.uk
TikTok Data
Where data is processed through TikTok systems or tools, TikTok may also act as a controller or processor of certain information under its own privacy practices.
For more information about how TikTok handles personal data, please refer to TikTok’s Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en
Safeguarding and Age Requirements
We take safeguarding seriously.
While platform rules may allow younger individuals to apply in some cases, WE ARE ELIXIR operates with an 18+ standard for participation. If a parent, guardian, or concerned adult believes that a minor may be involved in our network inappropriately, they should contact us as soon as possible so that we can investigate and take appropriate action.
Contact Us
If you have any questions about this Privacy Policy, want to exercise your data protection rights, or need to contact us about personal data, please email:
If you are unhappy with how your data has been handled, you also have the right to lodge a complaint with the Information Commissioner’s Office.