Privacy Policy

Last updated: 25 June 2026

1. General Provisions

This Privacy Policy explains how personal data is collected, used, stored and otherwise processed when you access or use genlaren.com (the "Platform") and the services made available through it. The Platform is operated by GENVISTA LTD.

For the purposes of this Privacy Policy, the terms "the Platform", "the Company", "we", "us" and "our" refer to GENVISTA LTD as the operator of the Platform. The terms "you" and "user" refer to any individual who visits the Platform, creates or uses an account, submits a project request, communicates through the Platform, uploads content or materials, applies as an Independent Service Performer, or otherwise interacts with the Platform and its services.

The Company processes personal data in order to operate and administer the Platform, facilitate interactions between Clients and Independent Service Performers, manage user accounts, process project requests, support communications, administer platform functionality, and maintain the secure and reliable operation of the services. Personal data may also be processed to facilitate payments performed through authorised third-party payment service providers, respond to enquiries, comply with legal and regulatory obligations, prevent fraud, misuse or unauthorised activity, and improve the performance, functionality and user experience of the Platform.

The Platform operates as an online environment that enables Clients and Independent Service Performers to connect and collaborate in relation to marketing and creative services. While GENVISTA LTD operates and administers the Platform, creative and marketing services are provided by Independent Service Performers acting on their own behalf. The Company may engage carefully selected service providers to support the operation, maintenance and security of the Platform where such involvement is necessary for legitimate business purposes and subject to appropriate contractual and data protection obligations.

The Company processes personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (EU GDPR). Personal data is processed only where there is an appropriate legal basis and only to the extent necessary for the purposes described in this Privacy Policy.

By accessing or using the Platform, you acknowledge that your personal data may be processed as described in this Privacy Policy. Capitalised terms not defined in this Privacy Policy shall have the meanings assigned to them in the Platform's Terms and Conditions.

For the purposes of applicable data protection legislation, GENVISTA LTD acts as the data controller in relation to the personal data processed through the Platform, except where this Privacy Policy or applicable law expressly provides otherwise.

2. Information We Collect

The Company collects and processes personal data from a variety of sources. This includes information provided directly by users, information collected automatically through the use of the Platform, and, where permitted by applicable law, information obtained from carefully selected third-party sources.

You may provide personal data when creating an account, submitting a project request, applying as an Independent Service Performer, communicating through the Platform, contacting customer support, or otherwise using the services available on the Platform. Such information may include your name, email address, telephone number, account credentials and other information associated with your account. Depending on your use of the Platform, we may also process project-related information, including project descriptions, requirements, instructions, preferences, communications, uploaded files, documents, text, images, videos, design assets, presentations, brand materials and other project-related content. We may also process information contained in support enquiries and other correspondence.

Where an individual applies to become an Independent Service Performer, the Company may additionally process information relating to professional qualifications, areas of expertise, portfolios, supporting documentation and other information voluntarily submitted as part of the application or onboarding process.

The Platform operates as an environment that facilitates collaboration between Clients and Independent Service Performers. Information submitted through the Platform is processed to administer accounts, facilitate project requests, support communications between participants, operate Platform features and fulfil the purposes described in this Privacy Policy. Materials uploaded to the Platform are not considered publicly available and are processed only to the extent necessary for operating the Platform and supporting the requested services.

The Company does not intentionally collect or process special category personal data unless this is required by applicable law or is voluntarily provided by a user. Due to the nature of the Platform, materials uploaded by users may occasionally contain personal data, confidential information or information relating to third parties. You are responsible for ensuring that you have the necessary legal rights, permissions or other lawful basis to provide such information and to permit its processing through the Platform. The Company is not responsible for verifying the ownership, accuracy or legality of materials submitted by users.

When you access or use the Platform, certain technical and usage information is collected automatically. This may include your IP address, browser type, device information, operating system, language preferences, referring pages, approximate geographic location, timestamps, and information about your interaction with the Platform, including pages visited and features used. This information helps us operate, secure, maintain and improve the Platform, detect fraudulent or unauthorised activity, analyse performance and understand how the Platform is used.

In certain circumstances, the Company may receive personal data from third-party sources, including analytics providers, payment service providers, identity verification providers, publicly available sources, business partners or other service providers supporting the operation of the Platform. Such information may include contact details, technical identifiers, transaction-related information or aggregated analytical data and will be processed only where there is an appropriate legal basis.

If you provide personal data relating to another individual, you represent and warrant that you are authorised to disclose such information to the Company and that the relevant individual has been informed, where required by law, about the processing of their personal data in accordance with this Privacy Policy.

3. How We Use the Information

The Company processes personal data only for specified, legitimate and proportionate purposes related to the operation, administration and improvement of the Platform. Such purposes include managing user accounts, facilitating project requests and communications, supporting interactions between Clients and Independent Service Performers, maintaining Platform functionality, protecting the security of the Platform, preventing fraud, abuse and unauthorised activity, complying with legal and regulatory obligations, and improving the quality and reliability of the services available through the Platform.

Personal data is used to create, maintain and administer user accounts, verify contact information where appropriate, authenticate user access, protect account security and ensure the integrity of Platform operations.

Where users submit project requests or participate in projects through the Platform, personal data is processed to facilitate the operation of the Platform, organise project-related communications, support the matching of Clients with suitable Independent Service Performers, enable collaboration between participants, and manage project-related information and deliverables. The Company processes such information solely for the purpose of operating and administering the Platform and does not use personal data for purposes incompatible with this Privacy Policy.

Personal data is also processed to provide customer support, respond to enquiries, resolve technical issues, communicate important information relating to accounts, projects or Platform functionality, and maintain the continuity and quality of the services.

Where permitted by applicable law, the Company may analyse aggregated or individual usage information to understand how the Platform is used, improve its functionality, optimise user experience, develop new features and enhance the overall performance, security and reliability of the Platform.

Payments made through the Platform are processed by authorised third-party payment service providers. The Company does not operate as a payment service provider and does not receive, store or process complete payment card information. The Company may receive limited payment- or transaction-related information necessary for payment confirmation, account administration, financial reconciliation, fraud prevention and compliance with applicable legal and accounting obligations.

All personal data is processed on one or more lawful bases recognised under applicable data protection legislation and only to the extent necessary for the purposes described in this Privacy Policy.

4. Legal Bases for Processing

The Company processes personal data only where it has a valid legal basis under applicable data protection legislation, including the UK GDPR and, where applicable, the EU GDPR.

Depending on the circumstances, personal data may be processed because it is necessary for the performance of a contract or to take steps at your request before entering into a contract, including creating and managing user accounts, facilitating projects, supporting communications and operating the Platform.

The Company may also process personal data where necessary to comply with applicable legal or regulatory obligations, including obligations relating to fraud prevention, financial recordkeeping, regulatory compliance and the protection of users and the Platform.

Where appropriate, personal data is processed on the basis of the Company's legitimate interests, provided that such interests are not overridden by your fundamental rights and freedoms. Legitimate interests may include maintaining and improving the Platform, ensuring its security, preventing fraud and misuse, resolving disputes, protecting legal rights, analysing Platform performance and developing new features or services.

Where required by applicable law, the Company will rely on your consent before processing personal data for specific purposes. You may withdraw your consent at any time; however, such withdrawal will not affect the lawfulness of any processing carried out before the consent was withdrawn.

5. Data Security

The Company implements appropriate technical, organisational and administrative measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access, disclosure or other forms of unlawful processing. Such measures are implemented having regard to the nature, scope and purposes of the processing, the categories of personal data involved and the risks associated with the operation of the Platform.

Access to personal data is limited to authorised personnel and approved service providers who require such access for legitimate business purposes and only to the extent necessary to operate, maintain and support the Platform. The Company maintains internal procedures and security controls intended to preserve the confidentiality, integrity and availability of personal data throughout its processing lifecycle.

Although the Company applies reasonable safeguards to protect personal data, no method of electronic transmission or data storage can be guaranteed to be completely secure. Users are therefore responsible for maintaining the confidentiality of their account credentials, using secure devices and networks when accessing the Platform, and taking appropriate measures to protect their accounts from unauthorised access.

If you believe that your account has been compromised or become aware of any actual or suspected security incident affecting your personal data or the Platform, you should notify the Company without undue delay using the contact details provided in this Privacy Policy.

6. Cookies and Tracking Technologies

The Platform uses cookies and similar technologies to support its operation, maintain account functionality, improve user experience, enhance security and analyse the performance of the Platform. These technologies are used only for legitimate operational purposes and in accordance with applicable laws governing cookies and similar tracking technologies.

Cookies help enable essential Platform functions, including user authentication, session management, secure access to user accounts, communication features and the operation of core Platform functionality. They also contribute to maintaining the stability, reliability and security of the Platform during user sessions.

You may manage or disable cookies through your browser or device settings. Please note that disabling certain cookies may affect the availability or functionality of some features of the Platform, including account access, user preferences and other essential services.

The Platform may use different categories of cookies depending on their purpose. Strictly necessary cookies are essential for the operation, security and accessibility of the Platform and cannot generally be disabled through the Platform. These cookies are retained only for as long as necessary to fulfil their intended purpose.

Performance and analytics cookies help the Company understand how users interact with the Platform by collecting aggregated or de-identified usage information. This information is used to monitor system performance, identify technical issues and improve the quality, functionality and reliability of the Platform.

Functionality cookies enable the Platform to remember user preferences and selected settings, allowing for a more efficient and personalised user experience during future visits.

Security-related cookies are used to help detect suspicious activity, prevent fraudulent or unauthorised access, protect user accounts and maintain the overall security and integrity of the Platform.

Where the Platform uses analytics, marketing or similar optional cookies, such technologies will be implemented in accordance with applicable legal requirements and, where required by law, only after obtaining the appropriate user consent. Users may update or withdraw their cookie preferences at any time, where such options are made available.

Cookies and similar technologies are not intentionally used to collect special category personal data or to create profiles based on sensitive personal information. The specific cookies and technologies used by the Platform may change from time to time as its functionality, security measures and operational requirements evolve.

7. International Data Transfers

The Company does not sell personal data or disclose personal data to third parties for their own independent marketing or commercial purposes.

Personal data may be shared with carefully selected third-party service providers where this is necessary to operate, maintain, secure and improve the Platform. Such service providers may include hosting providers, cloud infrastructure providers, communication services, analytics providers, payment service providers, identity verification providers and other technology partners supporting the Platform. These parties process personal data only on behalf of the Company, in accordance with contractual obligations and applicable data protection laws.

Where necessary for the operation of the Platform, limited personal data may also be made available to other users participating in the same project, including Clients and Independent Service Performers, solely to the extent required to facilitate communications, collaboration and the provision of services through the Platform. Such processing is carried out in accordance with the Platform's Terms and Conditions and applicable privacy obligations.

Where personal data is transferred outside the United Kingdom or the European Economic Area, the Company implements appropriate safeguards in accordance with applicable data protection legislation, including the UK GDPR and, where applicable, the EU GDPR. Such safeguards may include adequacy regulations, Standard Contractual Clauses, or any other lawful transfer mechanism recognised under applicable law.

The Company may also disclose personal data where required to comply with applicable laws, regulations, court orders or lawful requests from competent authorities, or where disclosure is necessary to protect the rights, property, security or legitimate interests of the Company, its users or third parties, investigate suspected fraud or unlawful activity, or enforce the Platform's legal terms and policies.

In the event of a merger, acquisition, corporate restructuring, financing transaction or sale of all or part of the Company's business or assets, personal data may be transferred as part of the relevant transaction, subject to appropriate confidentiality obligations and applicable data protection requirements.

Regardless of where personal data is processed or transferred, the Company takes reasonable steps to ensure that it remains protected in accordance with this Privacy Policy and applicable data protection legislation, and that users continue to benefit from the rights available under such laws.

8. Data Retention

The Company retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including operating the Platform, administering user accounts, facilitating projects and communications, complying with applicable legal and regulatory obligations, resolving disputes and protecting the Company's legitimate interests.

Personal data relating to projects, including project requests, communications, uploaded materials and completed deliverables made available through the Platform, is generally retained for up to one (1) year following the completion of the relevant project. This retention period supports ongoing access to project history, follow-up requests, dispute resolution, business recordkeeping and the continuity of Platform operations. A longer retention period may apply where required by applicable law or where reasonably necessary to establish, exercise or defend legal claims, enforce contractual rights or protect the legitimate interests of the Company.

Account-related information is retained for the duration of the user's relationship with the Platform. Where an account is closed or deleted, certain personal data may continue to be retained for the period required by applicable law or as reasonably necessary to comply with legal, regulatory and accounting obligations, prevent fraud or misuse, resolve disputes, or establish, exercise or defend legal claims.

Technical information, security logs, usage data and analytics information are retained only for as long as necessary to maintain the security, stability, functionality and continuous improvement of the Platform, unless a longer retention period is required or permitted by applicable law.

Retention periods may vary depending on the nature of the personal data, the purposes of processing, applicable legal requirements and the Company's legitimate operational needs. Once personal data is no longer required, it is securely deleted, anonymised or otherwise disposed of using appropriate technical and organisational measures, unless its continued retention is required or permitted by applicable law.

9. Your Rights

Subject to the UK GDPR and other applicable data protection laws, you may have certain rights regarding the personal data processed by the Company. The availability of these rights may depend on the legal basis for processing and the circumstances of each individual case.

You have the right to request confirmation as to whether the Company processes your personal data, obtain access to such data and receive a copy of the personal data held about you. You also have the right to request that inaccurate or incomplete personal data be corrected or updated.

Where permitted by applicable law, you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other lawful basis applies, or where the processing is otherwise unlawful. You may also request that the processing of your personal data be restricted in certain circumstances, including where you contest its accuracy or object to its processing.

Where applicable and technically feasible, you may request to receive the personal data you have provided to the Company, or request that it be transferred to another data controller in a structured, commonly used and machine-readable format.

You have the right to object to the processing of your personal data where such processing is based on the Company's legitimate interests. Where personal data is processed for direct marketing purposes, you may object to such processing at any time. Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of any processing carried out before its withdrawal.

Where provided under applicable data protection legislation, you may also have the right not to be subject to a decision based solely on automated processing, including profiling, where such processing produces legal or similarly significant effects, unless otherwise permitted by law.

To exercise any of your rights, you may contact the Company using the contact details provided in this Privacy Policy. The Company may request reasonable additional information to verify your identity before responding to your request. Requests will be handled in accordance with applicable data protection legislation and within the timeframes prescribed by law.

If you believe that your personal data has been processed in breach of applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority, including the Information Commissioner's Office (ICO) in the United Kingdom, or with another competent supervisory authority where permitted under applicable law.

10. Managing Your Personal Data

You may exercise your data protection rights by contacting the Company using the contact details provided below. Subject to applicable law, you may request access to your personal data, its correction, deletion, restriction of processing, data portability or object to certain processing activities.

Requests relating to personal data may be submitted by email at [email protected].

The Company may request additional information reasonably necessary to verify your identity before processing your request in order to protect personal data against unauthorised access, disclosure or misuse.

The Company will review and respond to all requests in accordance with applicable data protection legislation and within the relevant statutory timeframes. Where the Company is unable to comply with a request, in whole or in part, due to legal, regulatory or other lawful grounds, you will be informed accordingly and, where permitted by applicable law, provided with an explanation of the reasons for that decision.

11. Use by Minors

The Platform and the services available through it are intended solely for individuals who are at least 18 years of age. The Company does not knowingly collect, process or maintain personal data relating to individuals under the age of 18.

If the Company becomes aware that personal data has been submitted by or collected from a person under the age of 18 without an appropriate legal basis, it will take reasonable steps to delete or otherwise securely dispose of such information without undue delay, unless its retention is required by applicable law.

Parents, legal guardians or other authorised representatives who believe that a minor has provided personal data through the Platform may contact the Company using the contact details set out in this Privacy Policy. The Company will review such requests and take appropriate action in accordance with applicable data protection legislation.

12. Legal Disclosures and Compliance

The Company may disclose personal data where such disclosure is required or permitted by applicable law, regulation, court order, legal process or a lawful request from a competent governmental, regulatory or law enforcement authority.

Personal data may also be processed or disclosed where reasonably necessary to establish, exercise or defend legal claims, protect the rights, property, security or legitimate interests of the Company, its users or third parties, investigate or prevent suspected fraud, unlawful activity, security incidents or misuse of the Platform, enforce the Platform's Terms and Conditions or other applicable policies, or ensure the safe, secure and reliable operation of the Platform.

Where appropriate, personal data may also be disclosed to professional advisers, auditors, insurers or other authorised representatives where such disclosure is necessary for legal, regulatory, compliance or legitimate business purposes and is subject to appropriate confidentiality obligations.

Any disclosure of personal data under this section is limited to the information reasonably necessary for the relevant purpose and is carried out in accordance with applicable data protection legislation, appropriate security measures and the principle of proportionality.

13. Changes to the Privacy Policy

The Company may revise or update this Privacy Policy from time to time to reflect changes in the operation of the Platform, developments in applicable laws or regulations, changes in data processing practices, or improvements to the services provided through the Platform. The latest version of this Privacy Policy will always be published on the Platform and will indicate the date on which it was last updated.

Unless otherwise stated, any amendments to this Privacy Policy become effective upon publication on the Platform. Where required by applicable law, or where changes materially affect the way personal data is processed, the Company may provide additional notice by displaying a prominent notification on the Platform, sending an email or using another appropriate communication method. Your continued use of the Platform following the effective date of any changes constitutes your acknowledgement of the updated Privacy Policy. Users are encouraged to review this Privacy Policy periodically to remain informed about how personal data is processed.

Contact Information

If you have any questions regarding this Privacy Policy, wish to exercise your data protection rights or require further information about the Company's processing of personal data, please contact us using the details below.

Operator: GENVISTA LTD

Address: International House, 64 Nile Street, London, United Kingdom, N1 7SR

Email: [email protected]

Phone: +44 736 975 6922