Our Privacy Policy

Last updated: April 2026

Noodl Ltd (“we”, “us”, “our”) is a social creative studio based in London. We collaborate with fans, creators, and communities to make culturally relevant work for brands.

This policy explains how we collect, use, and protect your personal data in clear, human language. We act as an independent Data Controller for the information provided to us.

1. Who We Are

Noodl Ltd 3rd Floor, 86–90 Paul Street, London, EC2A 4NE, United Kingdom

Data Protection Officer: Claire Joines

Email: hello@noodl.studio

2. Our Approach to Your Privacy

We follow three core principles:

  • No Unsolicited Data: We never buy lists. Participants self-select to join our network.

  • Pseudonymisation by Default: We "scrub" data of direct identifiers before sharing insights with clients.

  • Explicit Consent: We only collect sensitive information if you specifically agree to share it for research purposes.

3. The Data We Collect

A. Fan Files & Research Participants

When you contribute to a project or join our network, we may collect:

  • Identity Data: Name, email, phone number, and social handles.

  • Demographics: Age, location, and gender.

  • Special Category Data: Some projects involve questions regarding ethnicity, health, or sexuality. These are always optional.

  • Creative Content: Written responses, survey data, photos, video recordings, or audio from interviews.

B. Clients, Partners & Talent

  • Contact details, job titles, and billing information.

  • Portfolio links, social handles, and payment details for collaborators.

4. How We Collect Data

  • Self-Selection: Via public links to forms (Tally.so, Typeform, Google Forms).

  • Community Partners: We work with organizations (e.g., clubs/collectives) who share our links with their members. We never receive member lists directly from these groups.

  • Direct Interaction: Through email, social media DMs, or in-person/virtual research sessions.

5. Why We Use Your Data (Legal Basis)

  • Consent: For joining Fan Files, participating in research, and sharing special category data.

  • Contract: For paying collaborators and delivering agreed work to clients.

  • Legitimate Interest: For improving our website and maintaining a network of people who want to work with us.

6. How We Handle & Share Your Data

We never sell your data. We only share it when necessary:

  • The Data Scrub: Before sharing data with clients, we remove direct identifiers (Names, specific locations, contact info). Participants are assigned codes/pseudonyms (e.g., "Participant 04").

  • Specific Permission: If a unique detail is vital to a creative insight, we will seek your explicit permission before including it in a client-facing report.

  • Service Providers: We use secure cloud tools (Google Workspace, Notion, Airtable). We ensure these providers comply with UK GDPR via Standard Contractual Clauses (SCCs).

7. Data Retention

  • Fan Files Network: We keep contributor data for as long as the network remains active, or until you request deletion. We review our database every 2 years to remove inactive accounts.

  • Research Media: Raw video/audio recordings are deleted 12 months after a project concludes. Anonymised/aggregated insights are kept indefinitely for historical trend analysis.

  • Financial Records: Kept for 6 years for tax purposes.

8. Security Measures

  • Access Control: Files are restricted to the core project team. No client staff have access to raw recordings or non-anonymised data.

  • Protection: We use password-protected systems, two-factor authentication (2FA), and encrypted devices.

  • Agreements: All freelancers and partners sign Non-Disclosure Agreements (NDAs) or Data Processing Agreements (DPAs).

9. Your Rights

Under UK GDPR, you have the right to access, correct, or delete your data. You may also withdraw your consent at any time.

Our Deletion Commitment: While the legal limit is 30 days, we aim to act on deletion requests within 48 hours of receiving your email.

To exercise your rights, email:hello@noodl.studio

10. Cookies

We use cookies to understand website traffic. You can disable these in your browser settings at any time.

11. Changes to This Policy

We may update this policy to reflect new tools or regulations. The latest version will always be right here.