Privacy Policy

Undercover Genius Ltd · Company no. 14013075 · 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE · Last updated: 14 July 2026

Who we are

Undercover Genius Ltd (“we”, “us”) is a UK ecommerce company. We operate our own online stores (including TikTok Shop stores) and in-house software that helps us run creator affiliate collaborations. This policy explains how we collect, use and protect personal data when you visit our website, contact us, buy from our stores, or work with us as a creator.

What we collect

Website visitors: contact details you submit through our forms (name, email, company), plus basic analytics data (pages visited, device type) via cookies you consent to.

Customers: order details (name, delivery address, email, items purchased) needed to fulfil and support your order. Payments are processed by the relevant marketplace or payment provider — we never see or store full card details.

Creators and business partners: public profile information (e.g. your creator handle and content), contact details you share with us, and collaboration history (samples, commissions, messages exchanged through platform tools).

How we use it

We use personal data to fulfil orders, run creator collaborations, respond to enquiries, improve our services, and meet legal obligations (e.g. tax records). Our lawful bases are contract performance, legitimate interests (running and improving our business) and consent (marketing and non-essential cookies). We do not sell personal data, and we do not share it with third parties except the service providers below.

Who we share it with

Trusted service providers who help us operate: cloud hosting and databases (UK/EU data centres), the marketplaces we sell through (e.g. TikTok Shop, Amazon), delivery carriers, and analytics tools. Each processes data only on our instructions. Platform data (such as TikTok Shop data) is handled in line with the relevant platform’s policies and is never shared with unauthorised third parties.

Where it lives and how it’s protected

Personal data is stored and processed in the United Kingdom and Germany (EU). We protect it with encryption in transit (TLS) and at rest, least-privilege access controls with multi-factor authentication, and monitored, firewalled infrastructure, in line with our internal Information Security & Data Protection Policy.

How long we keep it

Only as long as needed: order records for the periods UK tax law requires, enquiry details while we handle your enquiry, and collaboration data for the duration of the working relationship. When a contractual relationship ends, or on valid request, associated data is deleted from our systems and backups within 30 days.

Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict or port your personal data, and you can object to processing or withdraw consent at any time. Email info@undercovergenius.io and we’ll respond without undue delay. You can also complain to the ICO (ico.org.uk) if you’re unhappy with how we’ve handled your data.

Cookies

Our website uses essential cookies to function, and analytics/marketing cookies only with your consent via the cookie banner. You can change your choices at any time in your browser settings.

Changes

We review this policy regularly and post updates on this page with a revised date.

Contact: info@undercovergenius.io