Privacy Policy

Grace Belgravia ("Grace Belgravia", "we", "our", or "us") is an influencer marketing and collaboration platform operated by LOXA HOLDINGS LTD.

This Privacy Policy explains how we collect, use, store, share and protect personal data when you use the Grace Belgravia platform available at https://gracebelgravia.com.

Grace Belgravia provides a platform that enables brands and influencers to discover each other, collaborate on campaigns, analyse performance metrics and manage influencer marketing activities.

This policy applies to:

• Influencers
• Brands
• Platform users
• Website visitors
• Prospective users

By using the platform you acknowledge the data practices described in this policy.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws, the data controller responsible for your personal data is:

LOXA HOLDINGS LTD
Contact email: [email protected]

3.1 Account Registration Information

When users create an account we may collect:

Influencers

• Name
• Email address
• Social media profile links
• Biography or profile description
• Content categories and keywords
• Profile images
• Location where provided

Brands

• Company name
• Business contact details
• Website URL
• Social media accounts
• Industry category
• Campaign descriptions and collaboration requests

3.2 Social Media Account Data

Users may connect social media accounts including Instagram, Facebook, TikTok, YouTube and other supported platforms. With user authorisation we may access:

• Public profile information and username
• Biography and profile images
• Follower counts and engagement metrics
• Likes, comments, shares and saves
• Post metadata (captions, hashtags, timestamps, URLs)
• Audience insights where provided by the platform
• Campaign performance metrics

This information is retrieved via official developer APIs including the Meta Graph API, TikTok Developer APIs and other authorised platform integrations. Grace Belgravia only accesses data necessary to provide the platform services.

3.3 Platform Usage Data

We automatically collect technical information including:

• IP address
• Device and browser type
• Operating system
• Pages visited and feature usage
• Session activity and platform interaction data

3.4 Cookies and Tracking Technologies

We use cookies and similar technologies to maintain secure sessions, store preferences, improve performance and analyse usage. Users may control cookies through their browser settings. Disabling cookies may affect certain platform features.

4.1 Platform Operation

• Create and manage user accounts
• Allow brands to discover influencers
• Allow influencers to apply to campaigns
• Enable messaging between users
• Manage collaborations and campaigns
• Provide campaign performance analytics

Certain influencer profile information may be visible to registered brands using the platform.

4.2 Analytics and Platform Performance

We analyse data to measure campaign effectiveness, improve influencer discovery algorithms, develop new features and improve user experience. Where possible we use aggregated or anonymised data.

4.3 Communication

We may send platform notifications, onboarding guidance, service announcements, campaign notifications and security alerts. Users may opt out of certain communications.

Consent

Users consent to data processing when registering and linking social media accounts.

Contractual Necessity

Processing is necessary to provide the Grace Belgravia services.

Legitimate Interests

We process certain data to improve our services, maintain platform security and develop new features. Users may withdraw consent at any time.

Grace Belgravia complies with the policies governing data usage from social media platforms including Meta Platform Terms, TikTok Developer Terms and other applicable platform policies.

We do not sell personal data obtained from connected social media accounts. Data retrieved from social media platforms is used solely for influencer discovery, campaign management, performance analytics and platform functionality.

Use of the platform does not imply endorsement by or affiliation with any social media platform.

We may share data with trusted service providers who assist with cloud hosting, analytics, security monitoring and infrastructure services. These providers are contractually required to protect user data.

Where personal data is transferred outside the United Kingdom or European Economic Area, we implement appropriate safeguards including Standard Contractual Clauses and secure data transfer mechanisms.

We retain personal data only for as long as necessary to provide services and comply with legal obligations. Users may request deletion of their accounts at any time.

Users may request deletion of social media data by:

• Disconnecting the social media account in account settings
• Contacting [email protected] with the subject line: “Social Media Data Deletion Request”

We will delete applicable data subject to legal requirements.

We implement appropriate technical and organisational measures including encrypted data storage, access control systems, monitoring and intrusion detection, and regular security assessments. No system can guarantee absolute security but we continuously work to protect user information.

Certain platform features may use automated systems to assist with influencer discovery, campaign matching and analytics insights. These systems do not produce legally binding decisions about users.

Grace Belgravia may use aggregated or anonymised data to improve machine learning models that enhance platform functionality. Such use does not involve the sale of personal data.

Grace Belgravia is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

Under UK GDPR you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of personal data
• Restrict processing
• Request data portability
• Object to certain processing activities
• Withdraw consent

Requests may be submitted to [email protected].

If a personal data breach occurs that is likely to result in a risk to user rights and freedoms, we will notify affected users and relevant authorities as required by law.

We may update this Privacy Policy from time to time. Significant changes will be communicated through the platform or by email.