Privacy Notice
Version 1.0 · September 2026 · OG Capital Ltd
1. Who we are
OG Capital Ltd is the controller of the personal data processed in Creator Club. We are a private limited company registered in England and Wales under company number 15608322, with our registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
We decide on our own why and how your data is used. NovaX8 and other partner companies verify who you are when you sign in and pass us a limited set of details, but they do not control what we do with your data inside the Club.
Contact for privacy matters: privacy@creatorclub.uk
We have not appointed a Data Protection Officer, as we are not required to do so. Members in the European Union and the EEA can contact us at the same address about anything in this notice.
2. What this notice covers
This notice explains what we do with your personal data when you use the Creator Club app or our website at creatorclub.uk, and what rights you have.
Because we are based in the United Kingdom and serve members in the European Union, we comply with both the UK GDPR together with the Data Protection Act 2018, and the EU General Data Protection Regulation (2016/679).
It does not cover the sign-in process operated by NovaX8, or websites of third-party event organisers you reach from the app. Those organisations have their own privacy policies, and we encourage you to read them.
3. What we collect
From your sign-in, NovaX8 passes us your member identifier, your name, your email address and, where available, your phone number.
When you accept our documents, we record which version of the Terms of Membership, Privacy Notice and Community Standards you accepted, together with the date and time, and whether you gave optional marketing consent.
From your use of the Club:
- your weekly self-check — the days you tick for the current week
- your personal goal, a free-text note that is visible only to you
- items you save or like, and your progress through learning content
- which content you open, so we can show what is popular in the Club
When you write to us, we keep the story you submit through "Share your story", and the topic and message of any support request together with the email address your reply goes to.
Technical data collected automatically: device type and operating system version, app version, language and time zone, IP address, error reports, and — if you allow notifications — a push token for your device.
We do not collect payment data, we do not ask for special category data such as health, religion or political views, and we do not want you to send it to us.
4. Why we use your data, and on what legal basis
| What we do | Legal basis |
|---|---|
| Give you access to the Club and run your membership | Performance of a contract — Art. 6(1)(b) |
| Show your personal tools: weekly self-check, private goal, saved items, likes, progress | Performance of a contract — Art. 6(1)(b) |
| Prove which version of our documents you accepted and when | Legal obligation — Art. 6(1)(c), and our legitimate interest in defending claims — Art. 6(1)(f) |
| Review and publish stories you submit | Performance of a contract — Art. 6(1)(b) |
| Answer support requests | Performance of a contract — Art. 6(1)(b) |
| Send you news and event invitations by email or WhatsApp | Your consent — Art. 6(1)(a) |
| Send push notifications about new content and event reminders | Your consent, given in the device permission prompt |
| Decide which stories appear in "Today in the Club" | Legitimate interest — Art. 6(1)(f): showing members relevant content |
| Keep the service secure, prevent misuse, fix faults | Legitimate interest — Art. 6(1)(f): a secure and working service |
| Comply with legal duties and defend legal claims | Legal obligation — Art. 6(1)(c); legitimate interest — Art. 6(1)(f) |
Where we rely on legitimate interests, we have weighed our interest against your rights, and you may object at any time (see section 8).
Your personal goal and your weekly self-check are private. They are stored so we can show them back to you, they are never shown to other members, and we do not share them with NovaX8 or any partner.
5. Who we share it with
We never sell your personal data, and we do not share it for anyone else's advertising.
- Service providers acting on our instructions — Google Cloud, which hosts our backend and database in Ireland and the Netherlands, and our email delivery provider. Each is bound by a written data processing agreement under Article 28 GDPR and may use the data only for us.
- Meta Platforms Ireland — only if you opt in to WhatsApp messages, which are delivered through the WhatsApp Business Platform.
- NovaX8 and partner companies — limited to what is needed to confirm that you are eligible for a membership. We do not pass them your in-app activity, your goal, your saved items or your stories.
- Professional advisers — lawyers, accountants or auditors, where they need it and are bound by confidentiality.
- Authorities and courts — where the law requires it, or to establish or defend legal claims.
- A buyer or successor, if the business or the Club is sold or reorganised. We would tell you beforehand.
If you choose to have a story published, the name you use and the text you submitted become visible to other members of the Club.
When you tap through to an event organiser's page, you leave the app and we do not transmit your personal data to that organiser.
6. Where your data is stored
Our backend and database are hosted by Google Cloud in Ireland and the Netherlands, within the European Union. We do not use analytics, crash reporting or advertising services in the app.
As we are established in the United Kingdom, our staff and advisers in the UK access this data in order to run the Club. Transfers between the EU and the UK are covered by the European Commission's adequacy decision for the United Kingdom, and transfers from the UK to the EEA are permitted under UK law.
The one exception is WhatsApp marketing, if you opt in: those messages are delivered through Meta Platforms Ireland, which may transfer data to the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. If you do not opt in, no data leaves the European Economic Area and the United Kingdom.
7. How long we keep it
| Data | Retention |
|---|---|
| Membership record and sign-in details | While your membership lasts, then 12 months |
| Record of accepted document versions | 6 years after the membership ends, to defend claims |
| Weekly self-check | Current week only |
| Personal goal, saved items, likes, progress | While your membership lasts, then deleted |
| Stories submitted but not published | 12 months after the decision |
| Stories published in the Club | Until you ask us to remove them |
| Support correspondence | 24 months after the request is closed |
| Marketing consent and its withdrawal | 6 years after withdrawal, as proof that consent was given |
| Technical logs and error reports | 12 months |
Backups are overwritten on a rolling cycle of 30 days, so a deleted record may persist in a backup for that period before it disappears.
8. Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- access the personal data we hold about you and receive a copy
- correct data that is inaccurate or incomplete
- erase your data where there is no good reason for us to keep it
- restrict how we use it while a question about it is resolved
- object to processing we base on legitimate interests, and to direct marketing at any time
- portability — receive the data you gave us in a machine-readable format, or have it sent to another controller
- withdraw consent at any time, without affecting what we did before you withdrew it
To exercise any of these, write to privacy@creatorclub.uk. We answer within one month and will tell you if we need longer because the request is complex. Exercising your rights is free, and we do not need a reason from you.
If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to a supervisory authority:
- United Kingdom: Information Commissioner's Office, ico.org.uk
- Italy: Garante per la protezione dei dati personali, garanteprivacy.it
- Elsewhere in the EU or EEA: the supervisory authority in the country where you live or work
9. Marketing and notifications
Email and WhatsApp. When you first enter the Club, you can opt in to receive news and event invitations. These messages are sent by Creator Club, not by NovaX8. The box is separate from the required confirmations, it is unticked by default, and your membership does not depend on it. You can withdraw consent at any time in the app, by using the unsubscribe link in any email, by replying STOP to a WhatsApp message, or by writing to privacy@creatorclub.uk.
Push notifications. If you allow them, we send notifications about new content, event reminders and updates to our documents. We ask for permission when it first makes sense in the app, not on first launch, and you can turn notifications off at any time in your device settings.
Service messages. Regardless of your marketing choice, we may send you messages that are necessary for your membership — for example a change to these documents or a security notice.
10. Security and automated decisions
We protect your data with encryption in transit and at rest, access controls limited to staff who need it, separate development and production environments, logging of administrative access, and regular backups. Our providers are selected for their own security standards and are bound by contract.
No service can be completely secure. If a breach occurs that is likely to result in a high risk to your rights, we will tell you and the relevant supervisory authority without undue delay, as the GDPR requires.
We do not use automated decision-making that produces legal or similarly significant effects for you, and we do not build behavioural profiles of members. The "Today in the Club" selection uses aggregated counts of how often stories were opened, not individual profiles.
11. Members must be 18 or over
Creator Club is only for adults. We do not knowingly collect personal data from anyone under 18. If we learn that a member is under 18, we close the membership and delete the data.
If you believe a person under 18 has given us personal data, write to privacy@creatorclub.uk and we will remove it.
12. Website, changes and contact
Our website. The Creator Club website at creatorclub.uk is an information page. It uses only the storage strictly necessary to remember your language choice, and it sets no advertising or tracking cookies.
Changes to this notice. We may update this notice. Each version carries a number and a date, and the current version is always available in the app under Settings and on this page. If we make a change that significantly affects how we use your data, we will tell you in the app or by email before it takes effect.
Contact
OG Capital Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Company number 15608322
Privacy: privacy@creatorclub.uk · Support: support@creatorclub.uk