Privacy policy

Last updated 22 September 2026

Who we are

TapLab is the trading name of Revishaan Ltd, registered in England and Wales under company number 14204550, with its registered office at 85 Great Portland Street, London W1W 7LT. We are the data controller for the personal data described in this policy. Questions about your data go to ishaan@taplab.agency or by post to the address above.

What we collect and why

• Brand enquiries. When you request a proposal or contact us we keep your name, email address, company and message so we can reply and, if you go ahead, set up the work. Lawful basis: steps taken at your request before a contract, and our legitimate interest in responding to business enquiries.
• Creator applications. When you apply for representation we keep your name, email address, channel handle or link, what you make and anything you tell us about your audience. We use it to assess the application and to contact you about it. Lawful basis: steps taken at your request before a contract.
• Creators we represent. Under a management agreement we hold your contact, contract and payment details, and we publish a profile on this site with your name, handles, follower counts, photos and embedded videos. We share your public profile and proposed rates with brands we pitch you to. Lawful basis: performance of the management agreement.
• Webinar bookings. When you book a paid webinar we keep your name, email address and booking details. Payments are taken by Stripe; we never see or store your card number. Lawful basis: performance of a contract.
• Portal and dashboard accounts. Creators, clients and staff who log in have an account with an email address and login details, used only to run the service. Lawful basis: performance of a contract and our legitimate interest in securing the service.
• Website analytics. We use Google Analytics 4, Vercel Analytics and a Google Ads conversion tag to understand how the site is used and whether our advertising works. These collect device identifiers, pages viewed, approximate location and the source of your visit. Lawful basis: our legitimate interest in improving the site, and your consent where cookies require it.
• Embedded content. Creator pages embed videos from TikTok, Instagram and YouTube, and the contact page embeds Google Maps. Those services may set their own cookies when the embed loads, under their own privacy policies.

Who we share it with

We do not sell personal data. We use these processors to run the business, each under a data processing agreement:

• Vercel, which hosts the site and provides Vercel Analytics.
• MongoDB Atlas, which stores our database.
• Cloudinary, which stores and serves images.
• Resend, which sends our transactional email.
• Stripe, which processes webinar payments.
• Google, for Analytics, Ads conversion tracking and Maps.

We share creators’ public profiles and proposed rates with brands and their agencies as part of representing them. We will disclose personal data where the law requires it.

International transfers

Some of these processors store data in the United States. Where that happens we rely on the UK extension to the EU-US Data Privacy Framework, or on the UK International Data Transfer Agreement and the EU Standard Contractual Clauses, so that your data has the same protection it would have in the UK.

How long we keep it

• Brand enquiries and creator applications: up to two years after our last contact with you.
• Contracts, invoices and payment records: six years after the end of the tax year they relate to.
• Creator profiles: for as long as the management agreement runs, then removed from the site.
• Account data: for as long as the account is open, then deleted within three months.
• Google Analytics data: for the retention period set in Google Analytics, at most fourteen months.

Your rights

Under UK GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data, where we have no lawful reason to keep it;
• restrict or object to how we use it, including for direct marketing;
• send your data to you or another organisation in a machine-readable form;
• withdraw consent at any time, where consent is the basis we rely on.

Email ishaan@taplab.agency to use any of these rights. We reply within one month. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

Google Analytics and Google Ads set cookies (beginning _ga and _gcl) that identify your browser across visits. Vercel Analytics does not use cookies. Embedded videos and maps may set cookies from TikTok, Instagram, YouTube and Google. You can block or delete cookies in your browser settings, and Google offers a browser add-on that opts you out of Analytics.

Children

Some of the creators we represent and many webinar attendees are under eighteen. For creators under eighteen a parent or guardian is party to the agreement and sees every brief. We do not knowingly collect personal data from children under thirteen without a parent or guardian; if you think we have, tell us and we will delete it.

Security

Data is stored with the processors above over encrypted connections, access is limited to the people who need it to do their job, and accounts are protected by authentication. No system is perfectly secure, so if we discover a breach that puts you at risk we will tell you and the ICO as the law requires.

Changes

We will update this page when our processing changes and show the date at the top. You can also call us on +44 7880 883679.