Your information
Privacy notice
This notice explains how Redacted, operated by We Are Elixir Studio Ltd, handles personal information when you visit the public website, use the private creator workspace, take part in creator operations, or interact with our team.
1. Who is responsible for your information
We Are Elixir Studio Ltd is the controller of personal information processed through Redacted unless we tell you otherwise for a specific activity.
2. Information we may collect
The information we process depends on how you use Redacted. It may include:
- Account and identity information, such as your name, TikTok username, user group, role, activity status, login history and securely hashed password.
- Creator workspace activity, including onboarding progress, profile preferences, sticker-book activity and the shortcuts you choose.
- Battle, event and appointment information, including bookings, hosting requests, dates, outcomes and calendar-sync information.
- Campaign information, including assignments, deadlines, TikTok Backstage status, delivery status and creator-safe operational notes.
- Creator support information, such as weekly check-in outcomes, short action summaries and follow-up dates. Redacted is designed so private DMs and unnecessary sensitive details should not be copied into these records.
- TikTok LIVE operational information where the LIVE monitor is enabled, such as creator usernames, whether a monitored account is live, operational status and related delivery/error records.
- Technical and security information, such as session information, IP addresses in audit records, timestamps, system-health records and security or delivery logs.
- Information you send us directly when you contact the team or provide information for a creator service.
3. Where the information comes from
We receive information directly from you, from authorised Redacted team members who manage creator operations, from activity inside the Redacted workspace, and—where a feature requires it—from connected services such as TikTok, Discord or Google Calendar. Some LIVE-status information may come from publicly accessible or authorised TikTok account information.
4. Why we use personal information
| Purpose | Typical lawful basis |
|---|---|
| Provide and administer your Redacted account, creator tools, bookings, events, campaigns and support. | Performance of a contract or steps connected with our creator relationship; and, where appropriate, our legitimate interests in running the service. |
| Manage creator support, manager rotations, check-ins and operational follow-up. | Performance of a contract and our legitimate interests in providing consistent, safe and effective creator support. |
| Operate security, authentication, audit trails, abuse prevention and system health. | Our legitimate interests in keeping Redacted and its users secure, and legal obligations where applicable. |
| Coordinate Discord announcements, Google Calendar appointments, TikTok LIVE monitoring and other configured integrations. | Performance of a contract and our legitimate interests in operating creator services efficiently. Where consent is legally required for a specific activity, we will ask for it. |
| Meet legal, regulatory, safeguarding, dispute-resolution and record-keeping requirements. | Legal obligation and, where relevant, our legitimate interests in establishing, exercising or defending legal rights. |
Where we rely on legitimate interests, we consider the purpose, necessity and impact on you before processing. You can contact us if you want more information about a particular lawful basis.
5. Sensitive information
If we need to process special-category or criminal-offence information for a lawful safeguarding, legal or support purpose, we will only do so where an additional legal condition applies and with appropriate access controls.
6. Who we may share information with
We only share information where it is needed for a legitimate purpose. Recipients may include authorised We Are Elixir and Redacted team members; hosting and infrastructure providers; Discord for configured community or operational notifications; Google for Calendar features; TikTok for platform-related creator operations; and professional advisers, regulators, courts, law enforcement or safeguarding bodies where required or appropriate.
We do not sell personal information.
7. International processing
Some technology providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, we use an available lawful transfer mechanism or rely on an applicable adequacy arrangement. Contact us if you would like more information about safeguards relevant to your data.
8. How long we keep information
We keep personal information only for as long as it is reasonably needed for the purpose it was collected for, the creator or business relationship, security and audit needs, dispute handling, or legal and regulatory obligations. Retention varies by record type. When information is no longer needed, we delete, anonymise or securely dispose of it, subject to proportionate backup and legal-retention requirements.
9. Cookies and similar technology
The Redacted private workspace uses a strictly necessary session cookie to keep users signed in securely and protect authenticated sessions. Strictly necessary cookies do not require optional marketing consent. If we introduce non-essential analytics, advertising or similar cookies, we will update this notice and provide any consent controls required by law before using them.
10. Your data-protection rights
Depending on the circumstances and the lawful basis we use, UK data-protection law may give you rights to access your information, correct inaccurate information, ask for deletion or restriction, object to certain processing, receive certain information in a portable format, and withdraw consent where consent is the lawful basis.
To exercise a right, email info@weareelixir.co.uk. We may need to confirm your identity before acting on a request.
11. Complaints
Please contact us first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO). Information about making a complaint is available at ico.org.uk.
12. Security
We use technical and organisational measures designed to protect personal information, including access controls, password hashing, session protections, restricted administrative areas and controls around private configuration. No internet service can guarantee absolute security, so we also review and improve safeguards as Redacted develops.
13. Changes to this notice
We review this notice when our services, integrations or legal obligations change. If a change materially affects how we use personal information, we will bring the new use to affected people’s attention before it starts where required.