Our Gifting Policy

What you’re agreeing to when we gift you products and you share them online

This agreement is between you and The Beauty Tech Group Trading Limited - which includes our brands Currentbody, Tria, and ZIIP. We've gifted you one or more of our products, and if you post about them on social media (Your Posts), you're agreeing to the terms and conditions that follow. Whenever we say 'we' or 'the Company,' we're talking about The Beauty Tech Group Trading Limited, (Company number 06805380) and whose registered office is Suite 3F1, Glasshouse, Congleton Road, Nether Alderley, Macclesfield, Cheshire, England, SK10 4ZE. 

You promise that if you choose to post about the products we have gifted to you:

you’re legally free to agree to this and you haven’t made and won’t make agreements with anyone else that would get in the way.

Your Posts (except for content we’ve given you to use) won’t break any laws, contracts, or privacy rules, and won’t be offensive or inappropriate. 

Your Posts will follow the rules of any social media platform's you use, UK advertising laws and codes (like the UK Code of Non-Broadcast Advertising and Direct and Promotional Marketing (“CAP Code”) and the UK Code of Broadcast Advertising (“BCAP Code”)) and the Competition and Markets Authority's guidance on influencer endorsements).  You will also follow any other relevant rules or laws in the country where you live (Territory).

You agree to follow the influencer guidelines set out by the Incorporated Society of British Advertisers (ISBA) and Influencer Marketing Trade Body (IMTB) Talent Marketing Code of Conduct when working with us and any equivalent guidelines in your Territory.  But if anything in those guidelines clashes with this agreement, what is written here takes priority. 

You agree to clearly label Your Posts with #ad (or similar disclosure requirements in the Territory) to make sure it’s obvious to your audience that it is an advert before engaging with it. 

Your Posts are your own original content.

Your Posts won’t use our brand names without our prior written consent or mention third party brands. 

You will when asked by us, remove Your Posts if we think they don’t comply with any of the above (1.2 (b) – (g)) and you’ll do that as soon as you can.    

We might give you content to use in Your Posts like images, videos, or captions. If we do provide content, this doesn’t mean you have to post, but if you do use any content we have provided,  you agree that::

You can’t change or edit that content unless we’ve agreed to it in writing first.

We can take back your permission to use it at any time (and if we do, you may need to take down Your Posts).

You’ll  follow any brand guidelines or instructions we give you about how our content can be used.

Outside of this permission, you don’t own or have any rights to use our content.

As long as you agree beforehand, we’re allowed to use Your Posts for our own posting on any organic social medial channels. 

Unless the law says we can’t limit our responsibility, the most we’d ever be responsible for is the retail value of any gifted products. You won’t be able to claim anything from us for missed publicity or lost chances to boost your reputation.

We both agree to follow the laws and rules about handling personal data including the UK Data Protection Act 2018 and the General Data Protection Regulation ((EU) 2016/679).  This promise doesn’t replace or reduce any other responsibilities we already have under those laws—it’s just an extra reminder for us both. 

Our privacy notice is attached and explains how we process your personal data.   

This agreement is just between us —no one else can step in and try to enforce it.

We agree that if there is ever a disagreement or issue about this agreement – even if it isn’t about the contract itself, it will only be handled in accordance with English law and by the courts in England and Wales.

 

Influencer Privacy Policy

This Privacy Policy explains how we use, store and share the information we collect about Influencers, how you can exercise your rights in respect of that information and the procedures that we have in place to safeguard your privacy. This Privacy Policy supplements any other fair processing or privacy notice that may be provided to you from time to time. Please contact us by email at yourdata@currentbody.com if you have any questions, comments or concerns about this Privacy Policy or how we handle your personal information, or if such information changes at any time.

The data controller for all Influencer personal data processing is The Beauty Tech Group Trading Ltd (company number 06805380) with registered office located at Glasshouse, Alderley Park, Congleton Road, Nether Alderley, Cheshire, SK10 4ZE, United Kingdom (“CurrentBody”, “we”, “us”, or “our” in this Privacy Policy).

We are committed to protecting your privacy and complying with the UK GDPR and other applicable data protection rules (including the Data Protection Act 2018 and marketing and cookie laws, together with associated guidance) (the “Data Protection Laws”).

Please note: this Privacy Policy does not cover third party platforms specifically mentioned in this Privacy Policy. We are not responsible for the privacy policies and practices (including use of cookies) of such third parties. We recommend that you check the policy of each website you visit and contact the owner or operator of such website if you have concerns or questions.

What Personal Data We Collect About You

When we use the term “personal data” we mean any information about an individual from which that person can be identified. This doesn’t include, for example, any information which we have anonymised.

We may collect, use, store and transfer different kinds of personal data about Influencers, which we have grouped together as follows:

  • Identity Data includes first name, last name.
  • Contact Data includes your email address, postal address.
  • Background Data includes your biography.
  • Payment Data includes details about your bank such as bank name and account details.

How We Use Your Personal Data

Under the Data Protection Laws, we are required to explain what information we collect from you and how and why we use your personal information (the "processing activity"). We are also required to have a "lawful basis" on which to process your personal information. This is summarised in the table below.

Processing activity: Why we use your personal data

What personal data we use

Lawful basis of processing

Where we collect the information from

How long we keep the information for

To source talent so:

  • We can identify the most suitable talent for our Influencer Marketing requirements
  • Identity Data
  • Contact Data
  • Background Data
  • because it is necessary for our legitimate interests to ensure that Influencers can promote our products in the best possible way

From talent agencies and talent platforms

We keep information regarding sourced talent for 6 years from the date of the talent engagement

To provide a gift to you so:

  • you can post marketing messages about such gifts on social media platforms
  • Identity Data
  • Contact Data

We process this data:

  • because it is necessary for the performance of a contract with you;
  • because it is necessary for our legitimate interests to communicate our products to customers so we can promote our products

From you directly when you interact with us

We keep information about gifts for the length of our relationship with you, 1 year from your engagement date.

To enter into, and administer a contract with you for the promotion of our products so:

  • we can promote our products on multiple social media platforms;
  • we can target a wide range of potential customers
  • Identity Data
  • Contact Data
  • Payment Data

We process this data:

  • because it is necessary for the performance of a contract with you


From talent platforms and talent agencies

We keep information regarding sourced talent for 7 years from the date of the talent engagement

To make payments to you so:

  • you can receive commission for your posts;
  • you can receive compensation from your posts as per the fixed terms agreed
  • Identity Data
  • Payment Data

We process this data:

  • because it is necessary for the performance of a contract with you;
  • because it is necessary to comply with a legal obligation


From you directly when you interact with us

We keep information regarding payments for 6 years from the last payment date and in order to meet accounting and tax regulations

We have determined, acting reasonably and considering the circumstances, that we are able to rely on legitimate interests as the lawful basis on which to process your personal information in certain circumstances (we have stated this above and set out our legitimate interests). We have reached this decision by carrying out a balancing exercise to make sure our legitimate interest does not override your privacy rights as an individual.

We consider that it is reasonable for us to process your information for the purposes of our legitimate interests outlined above as: (a) we process your information only so far as is necessary for such purpose; and (b) it can be reasonably expected for us to process your information in this way. 

We will retain your personal data for the periods set out in the table above, however, we will only retain it for as long as necessary for the purposes set out above and, where we no longer have a need to keep your data, we may delete it earlier than the periods set out above. In some circumstances, you may have a right to ask us to delete your data at any time: please see the "Your Choices and Your Rights" section below.

Who We Share Your Personal Data With

We share your personal data with Group companies for internal business purposes such as contracts management and accounting.

We obtain your personal data from the following third party platforms:

Sprout. Sprout Privacy Policy

Kolsquare. Kolsquare Privacy Policy

Shopmy. Shopmy Privacy Policy

Awin. Awin Privacy Policy

We may also obtain your personal data from talent agencies who provide us with sourced talent subject to our requirements.

International Transfers, Storage, and Retention of Personal Data

We store data, and use service providers, based in the UK and around the world. Consequently, your personal data may be processed in countries outside of the UK or the European Economic Area (EEA), including in countries where you may have fewer legal rights in respect of your personal data than you do under UK law. Where we transfer your personal data outside the UK or the EEA, we will ensure a similar level of protection is afforded to your personal data as UK law would afford it by ensuring that at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Secretary of State. You can find out more information here.
  • For certain service providers, we may use specific contracts which have been approved by the Information Commissioner's Office which give personal data the same protection it has in the UK. You can find out more information here.
  • For certain service providers based in the US, as an alternative to the specific contracts mentioned above, we may also transfer data to them if they are part of the UK US Data Bridge, which requires them to provide similar protection to personal data shared between the UK and the US. You can find out more information here.

Please contact us if you would like more information about these safeguards.

Security

The protection and security of your personal data is important to us, and we have put in place appropriate policies, rules, technical and organisational measures to safeguard your personal data from accidental loss, damage or destruction and unauthorised or unlawful processing. We ensure that all staff who process personal data understand their obligations about the data they process through the enforcement of our policies and procedures around data processing and security.

Automated Decision-Making

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

Your Choices and Your Rights

You have legal rights in relation to your personal data under Data Protection Laws, and these are set out below. You can exercise these rights by contacting us – please see the "Contact Us" section below, but please be aware that there are limitations to these rights, and there may be circumstances where we are not able to comply with your request fully or at all. Where this is the case, we will promptly let you know why. 

What are my rights?

What does this mean?

To be informed:

You have a right to be informed about the personal data that we collect, use and hold about you.

Access:

You have a right to access and receive copies of the personal data we hold about you.

Rectification:

If we hold inaccurate personal data about you, you have a right to ask us to rectify this.

Erasure:

If you'd like us to delete personal data we hold about you, you have a right to ask us to do so. This is commonly known as the right to be forgotten, but this right will only apply where (for example):

  • we no longer need the personal data for the purpose we originally collected it for;
  • we are relying on the lawful basis of your consent to the collection of data, and you withdraw this consent; or
  • you exercise your right to object (as set out below) to our processing of your personal data.

Restriction of processing:

You have a right to limit how we use your personal data in certain circumstances, including (for example) where:

  • you believe that the personal data we hold about you may be inaccurate;
  • we no longer require your personal data to achieve the purpose we collected it for, but you have asked us to retain it so you can establish, exercise or defend a legal claim;
  • you are entitled to ask us to delete your personal data, but you've asked us to restrict the processing of it instead; or
  • you've asked us to stop processing your personal data, and we are considering your request. 

To object:

In certain circumstances, you have a right to object to the processing of your data, and this means that we will stop using it, unless we are able to demonstrate that, on balance, we have legitimate grounds for continuing to process your personal data which overrides your rights, or the data is needed for the establishment, exercise or defence of legal claims.

Data portability:

Where we are processing your personal data and we are relying on the lawful basis of consent or the performance of a contract (where this is the case, this will be set out in the table above) and we are carrying out that processing by automated means, then you have a right data portability. This means that if you ask us to, we will provide your personal data to you in a structured, commonly used and machine-readable format and transfer your personal data to an organisation of your choice.

To withdraw consent:

If we are processing your data and relying on the lawful basis of your "consent" (where this is the case, this will be set out in the table above), then you are entitled to withdraw your consent at any time. You can do this using the details set out in the "Contact Us" section below. 

To complain:

We hope that if you have any queries, comments or concerns about the way we handle your personal data, you will raise these with us in the first instance, and you can do so using the contact details contained in the "Contact Us" section below. However, if you are unhappy with the way we have responded, you have the right to complain to the Information Commissioner's Office, the regulator for data protection in the UK. Their address is: First Contact Team, Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF. You can find more information out at: ico.org.uk/for-the-public/how-to-make-a-data-protection-complaint.

 

Contact Us

We hope that you find this Privacy Policy easy to understand, but if you have any questions, comments or concerns about this policy or how we handle your personal data, you can contact us by:

  • Email at yourdata@currentbody.com
  • Using our Data Subject Access Request Form should you wish to make an access request.

This Privacy Policy was last updated in October 2025.