Privacy Policy

1. Who We Are

RM Agency

Email: Admin@rmagency.com

2. Visitors to Our Website

If you visit our website, we may collect:

• IP address, browser type, and device details
• Behavioural analytics (page visits, time on site) via tools like Google Analytics or Meta Pixel
• Any data you submit via forms (e.g., contact form, newsletter opt-in)

Lawful basis: Consent (cookies, forms); Legitimate Interests (analytics)

Retention: Analytics – 18 months; form submissions – 12 months

3. Applicants and Leads

If you submit an application form (e.g., OnlyFans support inquiry), we may collect:

• Name, email, phone number
• Social media links and demographic details
• OnlyFans earnings and location

Lawful basis: Legitimate Interests (for assessing fit); Consent (where explicitly collected)

Retention: 12 months from submission

4. Clients

If you become a client, we will collect and process:

• Names, emails, addresses, payment details
• Social media and OnlyFans account details
• Influencer content (photos, videos, voice)
• Information submitted in onboarding forms and ongoing updates
• Support-related data: chat logs, content instructions. Account credentials provided by clients are stored exclusively in an encrypted password manager and are never stored in plain text.

Lawful basis: Contract; Legal Obligation (billing); Legitimate Interests (dispute defence)

Retention: Contract data – 6 years; content – duration + 60 days; chat logs (legal defence) – 6 years

5. Subcontractors and Internal Staff

If you work for or with us, we may process:

• Name, email, ID, address, bank details
• Telegram username and access roles
• Performance data and screen monitoring via Hubstaff
• NDA status

Lawful basis: Contract

Retention: Contract + 6 years

6. International Transfers

Some tools we use store data outside the UK (e.g., Telegram, Hubstaff, Google Drive). We ensure all international transfers are covered by appropriate safeguards such as Standard Contractual Clauses (SCCs) and the UK Addendum.

7. Your Rights

Under UK GDPR, you have rights to access, correct, delete, restrict, or object to processing of your personal data. You can also withdraw consent and request data portability. Email Admin@rmagency.com to make a request.

8. Cookies

We use cookies on our website to enhance functionality and gather analytics. Non-essential cookies require your opt-in consent, which can be managed via our cookie banner or browser settings.

9. Confidentiality & Security

We require staff and subcontractors to sign NDAs and follow strict access controls. Data is stored securely, and internal communications (e.g., Telegram) are monitored and retained in compliance with our legal obligations.

10. Children's Data

Our services are not intended for individuals under the age of 18. We do not knowingly collect or process personal data from anyone under 18 years old. If we become aware that personal data has been collected from a minor, we will delete it promptly in accordance with our data protection procedures.

11. Contact and Complaints

If you have questions or concerns, contact:

Email: Admin@rmagency.com

You may also lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or call 0303 123 1113.