Privacy Policy

1. Who we are

omorfi Talent (“omorfi Talent”, “the Platform”, “we”, “us”, “our”) is a service operated by omorfi group, based in Cyprus.

We operate in Cyprus and the United Kingdom. For the purposes of the EU General Data Protection Regulation (EU GDPR) and the Cyprus Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data (Law 125(I)/2018), and the UK GDPR together with the UK Data Protection Act 2018, we are the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, contact us at info@omorfitalent.com.

2. Who this policy applies to

This policy applies to everyone who uses omorfi Talent, including:

• Talent — creators who join the Platform to create a profile, find and apply for collaboration opportunities, and receive direct requests from Brands; and
• Brands & venues — businesses (restaurants, bars, hotels, gyms, studios, events, product brands and similar) that post collaboration opportunities, browse Talent profiles, and send direct requests to Talent.

It also applies to visitors to our website and apps.

3. The personal data we collect

Information you give us:

• Account details — name, email address, password, and account type (Talent or Brand).
• Profile details — for Talent, this may include your photo, handle, social media links, audience information, location/region, niche, sample content and rates; for Brands, this may include business name, logo, contact person, location and the details of your collaboration offers.
• Content you submit — applications, messages, offers, reviews, and any media you upload.
• Communications — messages you send to us or to other users through the Platform, and your support requests.
• Payment-related data — when bookings are paid through the Platform, we use a third-party payment provider (Stripe). Stripe collects and processes card and payout details directly; we do not store your full card details. We receive limited transaction information (such as amount, status, and a reference) needed to run the marketplace and our commission.

Information we collect automatically:

• Usage data — pages and screens viewed, features used, actions taken, and timestamps.
• Device and technical data — IP address, device type, operating system, browser type, app version, and general location inferred from IP.
• Cookies and similar technologies — see Section 9.

Information from third parties:

• If you sign up or connect using a third-party service (e.g. a social platform), we may receive basic profile information you have authorised that service to share.
• Analytics and infrastructure providers acting on our behalf.

We do not intentionally collect special categories of data (such as health, religion or political views). Please do not submit such data through the Platform.

4. Why we use your data, and our legal bases

Where we rely on legitimate interests, we have balanced our interests against your rights. You can object — see Section 8.

5. How we share your data

omorfi Talent is a marketplace, so some sharing between users is core to the service:

• Between Talent and Brands. Talent profiles are browsable and searchable by Brands on the Platform, so that Brands can discover Talent and send direct requests. When a Talent applies to an Offer, a Brand sends a Talent a Request, or a Brand and Talent connect, the relevant profile, application, request and contact information is shared with the other party so the collaboration can proceed. If you join as Talent, please only include in your profile information you are comfortable making visible to Brands.
• Service providers (processors). We use trusted third parties to host, run and support the Platform — including Supabase (cloud hosting, database, authentication and storage), email delivery, analytics, customer-support tools, and our payment provider Stripe (which processes payments, payouts and identity verification for Talent). They process data only on our instructions, or under their own terms where they act as a controller for payments, and under a data-processing agreement where applicable.
• Legal and safety. We may disclose data where required by law, to enforce our Terms, or to protect the rights, safety and property of our users or the public.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, your data may be transferred, subject to this policy.

We do not sell your personal data.

6. International data transfers

Where your data is transferred outside the European Economic Area or the United Kingdom (for example to a service provider based elsewhere), we ensure an appropriate safeguard is in place — typically the European Commission’s Standard Contractual Clauses, the UK’s International Data Transfer Agreement / Addendum, or transfer to a country covered by an adequacy decision (the EU and UK currently recognise each other as adequate). You can request details of these safeguards using the contact in Section 1.

7. How long we keep your data

We keep your personal data only as long as necessary for the purposes set out above:

• Account and profile data — for as long as your account is active, and for a reasonable period afterwards in case you reactivate.
• Communications and collaboration records — for a limited period after the connection, to handle disputes and support.
• Data we must keep by law (e.g. tax and accounting records) — for the period required by Cyprus law.

When data is no longer needed, we delete or anonymise it.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”), in certain circumstances.
• Restrict processing in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, contact us at info@omorfitalent.com. We will respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy). In the United Kingdom, this is the Information Commissioner’s Office (ICO) (www.ico.org.uk). EU users may also complain to the authority in their own country.

9. Cookies and similar technologies

We use cookies and similar technologies to operate the Platform, remember your preferences, keep you signed in, and (with your consent) measure usage. You can manage non-essential cookies through our cookie banner and your browser settings. For full details, see our Cookie Policy.

10. How we protect your data

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and secure infrastructure. No system is perfectly secure, but we work to protect your data and to notify you and the authorities of a breach where the law requires.

11. Children

omorfi Talent is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the Platform or by email. The “last updated” date at the top shows the latest version.

13. Contact us

omorfi group
Email: info@omorfitalent.com