1. Who we are
My Latino Glow is an independent creator portfolio operated in the United Kingdom. For the personal information described in this policy, My Latino Glow is the data controller unless another service identifies itself as the controller for its own processing.
Contact: mylatinoglow@gmail.com.
2. Scope of this policy
This policy covers the website, collaboration enquiries, the restricted creator-admin area, and social-account connections used to import authorised portfolio content. Instagram, TikTok, and other linked services have separate privacy policies for information they process independently.
3. Information we handle
Website and enquiries
- Contact details and message content that you choose to send by email.
- Basic technical and security information, such as IP address, browser type, requested page, and timestamps, which may be processed in hosting or security logs.
Creator-admin access
- The signed-in manager's account identifier, email address, and optional display name.
- Administrative actions needed to categorise, feature, publish, or hide portfolio videos.
Instagram and TikTok connections
- Account identifiers, display names, usernames, and the permissions granted by the account owner.
- Public video metadata, including video identifiers, titles, captions, posting dates, thumbnails, embed or media links, and public post links.
- Access and refresh tokens issued after the account owner authorises the connection. Tokens are encrypted and kept on the server; they are not placed in public webpage code.
While the full APIs are pending, approved managers may check the public Instagram and TikTok profiles. These profile-import modes use public embed information to collect recent public post links, captions, thumbnails, and identifiers. They do not ask the creator to sign in or collect an access token.
The TikTok connection requests user.info.basic and video.list so the authorised creator's identity and public videos can be displayed and managed in this portfolio. It does not request private messages, contacts, or permission to post content.
4. How and why we use information
- Operate and secure the website: to deliver pages, prevent misuse, troubleshoot problems, and protect the admin area. We rely on our legitimate interests in running a safe and reliable service.
- Respond to enquiries: to discuss requested creator services and possible collaborations. This is based on taking steps at your request before a contract and our legitimate interests in communicating with prospective clients.
- Provide the social portfolio connection: to import, organise, refresh, and display content from an account whose owner has authorised access. This supports the service requested by the account owner and our legitimate interests in maintaining the portfolio.
- Meet legal obligations: where record-keeping, regulatory, security, or law-enforcement requirements apply.
We do not sell personal information, use imported social information for advertising profiles, or make decisions that have legal or similarly significant effects through automated profiling.
5. Sources and sharing
Information comes from website visitors, authorised managers, collaboration contacts, and the Instagram or TikTok APIs after the account owner grants permission. We may share only what is necessary with:
- hosting, database, authentication, security, and technical service providers acting on our behalf;
- Instagram or TikTok when an authorised manager initiates connection, refresh, or API requests;
- professional advisers, regulators, courts, or public authorities where reasonably necessary or legally required; and
- a successor operator if the portfolio or associated business is transferred, subject to appropriate safeguards.
6. International transfers
Some providers and social platforms may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we rely on an applicable adequacy regulation, contractual protections, or another lawful transfer mechanism. You can contact us for more information about the safeguards relevant to your information.
7. Retention
- Enquiry correspondence is normally kept for up to 24 months after the last meaningful contact, unless needed for an active contract, dispute, or legal obligation.
- Admin identity information is kept while the person remains an authorised manager.
- Social profile data, video metadata, and encrypted tokens are kept while the account connection is active or while the content is needed for the portfolio.
- Security and hosting logs are kept according to operational need and the relevant provider's retention controls.
We may retain limited records for longer where necessary to establish, exercise, or defend legal claims or comply with law.
9. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict, or object to processing of your information, and to receive portable information. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.
To exercise a right, email mylatinoglow@gmail.com. We may need to verify your identity before acting. You can also complain to the UK Information Commissioner's Office through ico.org.uk.
10. Disconnecting an account or requesting deletion
The Instagram or TikTok account owner can revoke the app's permission through the relevant platform settings. To request deletion of stored account data, video metadata, or tokens, email mylatinoglow@gmail.comwith the subject “Data deletion request” and identify the connected account. After verifying the request, we will remove information that is no longer required, subject to legal or security retention needs.
11. Children and policy changes
This professional creator portfolio is not directed to children, and we do not knowingly seek children's personal information. We may update this policy when the website, integrations, or law changes. The date at the top shows the latest revision.