Privacy Policy

01

Who we are and the scope of this notice

NovaX Studios Ltd. is a private limited company based in the United Kingdom. For the personal information described in this notice, NovaX Studios Ltd. is the data controller and determines why and how that information is processed.

The controller is NovaX Studios Ltd., company number 17534097, with its registered office at 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. Privacy enquiries and data-protection requests may be sent to contact@novaxstudios.art.

We process personal information under the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025. Where the EU GDPR applies to a particular processing activity, we also apply the relevant EU GDPR requirements.

This notice applies to personal information provided in connection with creator applications, enquiries, professional relationships and other dealings with NovaX. Information may be provided through online forms, email, telephone calls, online or in-person meetings, identity-verification processes and other direct communications. We may retain appropriate written notes of information shared during calls or meetings, but we will not record a call or meeting without giving separate notice where required.

Where consent is the appropriate legal basis, we may store and use personal information that a person has voluntarily provided within the scope of that consent. This notice should be read together with any more specific privacy information provided when additional information is requested.

NovaX is established in the United Kingdom. If our activities make appointment of an EU representative mandatory under Article 27 of the EU GDPR, we will appoint a representative in the European Union and publish its contact details before the relevant processing begins.

02

Personal information we collect

Depending on how a person interacts with NovaX, we may collect and store the following information where it is provided and reasonably needed:

• Full legal nameUsed to identify the person and administer a relationship.
• Date of birthUsed where age or identity must be confirmed.
• Country of citizenshipUsed where relevant to eligibility, verification or contracting.
• Contact detailsEmail addresses, telephone numbers or other details voluntarily provided.
• Application and professional informationInformation submitted through forms or shared in correspondence.
• YouTube channels and public profilesChannel URLs, channel identifiers, handles and other public creator-profile information.
• Monetization evidenceScreenshots or other evidence submitted to demonstrate YouTube monetization and application eligibility.
• Authorized analytics and revenue dataChannel performance, audience, estimated revenue and advertising information accessed through approved read-only YouTube permissions.
• Royalty and payment recordsRoyalty calculations, statements, payment records and related financial reporting.
• Communications and meeting notesRelevant records of emails, calls and meetings.
• Verification informationRequired legal details and the outcome of an identity check.

Please provide accurate and current information. Do not submit personal information about another person unless you are authorised to do so.

Where information comes from

We usually receive personal information directly from the person concerned. We may also receive relevant information from an authorised parent or guardian, a trusted identity-verification provider, a collaborator named in an application, or a public source such as a creator's public channel or professional profile. Where information is obtained indirectly, we will provide the information required by law within the applicable period, normally no later than one month, unless a legal exemption applies.

When information is required

Providing information for a general enquiry is voluntary. Certain information may be required to assess an application, confirm eligibility or identity, prepare or perform a contract, comply with law, or protect the parties from fraud. If required information is not provided, we may be unable to assess an application, enter into an agreement or provide the relevant service.

Special-category and criminal-offence information

We do not ask people to provide special-category information or criminal-offence data through ordinary application or contact channels. If such information becomes necessary, we will identify an additional lawful condition, provide specific notice where required and apply safeguards appropriate to the sensitivity of the information.

YouTube permissions and account security

Where channel information is needed, NovaX may ask a creator to invite a Google account controlled by NovaX to the creator's channel through YouTube Studio channel permissions. NovaX intends to request the Viewer role, or another access level that is read-only in relation to channel content and settings and is identified to the creator before access is granted. Depending on the agreed purpose and access level, this may allow NovaX to view channel details, analytics reports, estimated revenue and advertising-performance data. NovaX will not request a role that permits it to upload, edit, publish or delete content, manage channel permissions, or act as the creator.

A YouTube Studio invitation does not disclose the creator's Google or YouTube password to NovaX. NovaX will never ask a creator to provide that password, a two-factor authentication code, a recovery code or another Google account credential. Creators may review or remove NovaX's channel access through YouTube Studio, although removing access may prevent NovaX from performing analytics, reporting or royalty-related services that depend on that information.

03

How and why we use personal information

We may use the information listed above to:

• receive, review and assess creator applications;
• confirm channel ownership, monetization and application eligibility;
• confirm age and other stated eligibility requirements;
• respond to enquiries and maintain business communications;
• verify identity where required by our policies or an agreement;
• identify suspected fraud, misrepresentation or duplicate applications;
• request further information and communicate an application outcome; and
• administer contracts, analyze authorized channel information, calculate royalties or fees, prepare financial reporting and manage payments.

Our lawful bases

• Contract and pre-contract steps: to consider an application at the person's request, negotiate terms, enter into an agreement and administer an existing agreement.
• Legal obligation: to meet applicable legal, regulatory, accounting and data-protection duties.
• Legitimate interests: to evaluate applications, respond to enquiries, maintain business records, prevent fraud, secure our systems, manage professional relationships and establish, exercise or defend legal claims, where those interests are not overridden by the person's rights and freedoms.
• Consent: for a clearly identified optional purpose where genuine choice and control can be provided. Consent may be withdrawn at any time.

We identify the applicable lawful basis before starting a processing activity. If we intend to use information for a materially different purpose, we will assess whether that use is lawful and provide additional notice before it begins where required.

Automated decision-making

NovaX does not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. Creator applications are reviewed by a person. If this changes, we will provide the information and safeguards required by applicable law before using such a process.

04

Use of Google services

Personal information may be stored using Google services within accounts controlled by NovaX Studios Ltd. Google may process information in connection with providing those services under its own terms, privacy policy and applicable data-protection safeguards. You can read the Google Privacy Policy for further information about Google's practices.

Google and other approved providers may process information outside the United Kingdom or European Economic Area. Where a restricted international transfer occurs, we will rely on an applicable adequacy regulation or decision, or put approved contractual and organisational safeguards in place. Information about the safeguards relevant to a person's data, and a copy where legally available, may be requested by emailing contact@novaxstudios.art.

05

Identity verification

Shortlisted applicants, conditionally accepted applicants, and other individuals whose identity requires verification under our policies or a proposed agreement may be sent a link to a trusted third-party verification platform. Verification may take place before a final acceptance decision or before contracting. This may include a parent or legal guardian acting for a person aged 16 or 17. The platform may ask the person to provide identity documents, images or other evidence directly to it.

NovaX may receive and access the legal identity information and verification result needed to confirm identity and administer the relevant relationship. NovaX will not store copies of identity documents or identification images submitted through the verification platform. We will store only the information provided to us and the information reasonably needed for verification, contracting, legal compliance and record-keeping.

The verification provider processes documents and other information under its own privacy notice and retention practices. The applicable notice will be made available through the verification link before information is submitted.

06

Access, sharing and security

Access to personal information is limited to authorised people who require it for the purposes set out in this notice. Information may be processed through Google and, where applicable, a trusted identity-verification provider. We do not sell personal information. We may otherwise disclose information where required by law, necessary to protect legal rights, or where the applicant has authorised the disclosure.

Other recipient categories may include professional advisers, payment or accounting providers, insurers, law-enforcement bodies, regulators and courts, but only where relevant and lawful. Where a service provider acts as our processor, it must be subject to data-protection terms appropriate to the processing.

We use reasonable technical and organisational measures intended to protect personal information, including access controls and account-security measures. No electronic storage or transmission method can be guaranteed to be completely secure, and people should take care when submitting information online.

Google may process information from locations outside the United Kingdom when providing its services. Where international transfers occur, they are handled subject to Google's contractual terms and the safeguards required by applicable data-protection law.

07

Retention and deletion

If an applicant withdraws before a decision, we will close the application and delete the related information no later than one month after withdrawal.

08

Applicants aged 16 or 17

Applications are open only to people aged 16 or over. An accepted applicant aged 16 or 17 must have the consent of a parent or legal guardian. If the application is accepted, NovaX may require the parent or guardian to complete identity verification. The minor remains the creator, but the parent or legal guardian is responsible for the legal and financial aspects of the relationship. The parent or guardian, not the minor, will enter into and sign the creator agreement and related legal or financial documents in their own capacity as the adult contracting party, subject to their authority to enter into the relevant arrangement. NovaX will not ask the minor to sign those documents. The adult's signature does not by itself transfer rights owned by the minor. Any licence, consent or other authority relating to those rights must be addressed expressly in the relevant agreement and supported by the authority or consent required by applicable law. Applications identified as having been submitted by a person aged 15 or under, or containing false age information, will be rejected and the application data deleted in accordance with the retention section above.

09

Your data-protection rights

Subject to the applicable law, lawful basis and any relevant exemption, individuals may have the right to request access to their personal information, correction of inaccurate information, deletion, restriction of processing, and transfer of certain information in a portable format.

Where processing is based on consent, consent may be withdrawn at any time by emailing us. Withdrawal does not affect processing that was lawful before consent was withdrawn. We will make withdrawal as straightforward as giving consent.

To exercise a right, email contact@novaxstudios.art. We may need to confirm your identity before completing a request. There is normally no charge, although the law permits a reasonable fee or refusal in limited cases. We will respond within the period required by applicable law, normally within one month, subject to any permitted extension for a complex request.

If the EU GDPR applies, individuals also have the rights provided by that Regulation and may exercise them through the same contact address.

10

Questions, complaints and policy changes

Questions or concerns about this policy or our handling of personal information should be sent to contact@novaxstudios.art with the subject line “Data Protection Complaint”. We will acknowledge a data-protection complaint within 30 days, make appropriate enquiries, keep the complainant informed of progress, and communicate the outcome without undue delay.

Individuals may also complain to the UK Information Commissioner's Office. Details are available through the ICO contact page.

Where the EU GDPR applies, an individual may complain to the supervisory authority in the EU or EEA country where they habitually live, work, or believe an infringement took place. The European Data Protection Board publishes a list of national supervisory authorities.

We may update this notice when our processes, services or legal obligations change. The current version and its last-updated date will remain published on this page.