Privacy notice

Last updated 18 October 2026

Who we are

The controller is Blackforge AS, org.nr 937 768 532, Fjogstadvegen 32, 4350 Kleppe, Norway. Contact: business@blackforgeworks.com. This notice applies under the GDPR and the UK GDPR.

What data we hold

Public channel information: channel name, subscriber count, links to public videos and timestamps where a brand's product appears.
Business contact details that the creator, or the creator's manager or agency, has published on YouTube: an email address and, where shown, a name. This can include a manager's details.
Video titles, captions and descriptions, used to confirm that a product is really used.
Public comments, in aggregate only (for example overall sentiment). We do not keep individual commenters' data.

We never ask for logins or access to accounts. This website has no forms, cookies or trackers.

Where it comes from

Public YouTube pages only: channel pages, video pages, descriptions and captions. We do not obtain data from the creator directly before first contact.

Why we use it

To find creators who already use a brand's products.
To contact them (or their business address) with a short, relevant business message.
To introduce a creator to a brand if the creator agrees, and to manage opt-outs.

Legal basis: legitimate interest

Art. 6(1)(f): matching brands with creators who already use their products. Our assessment is documented. In summary: the purpose is genuine and lawful; we need the data to reach the right people; and the impact is low because the data is public, professional and used for a business reason. We reduce the risk by using only business-published addresses, avoiding personal and free-mail addresses for UK and EU individuals, never sharing a creator's identity without consent, sending at most one follow-up, offering a one-line opt-out and keeping a suppression list. If you think your interests outweigh ours, tell us and we will stop.

Who receives it

Brands whose products appear in a creator's videos may receive public, non-identifying evidence of fit. A creator's identity (channel name and contact) goes to a brand only with the creator's consent. We do not sell data.

Processors: Zoho Mail (EU data centre) for email, and Cloudflare for website hosting and delivery. They act on our instructions.

International transfers

Our processors store data in the EU/EEA or rely on recognised safeguards such as adequacy decisions or standard contractual clauses. If a creator agrees to an introduction to a brand outside the EEA, for example in the US, we send only what the creator has approved.

How long we keep it

Contact details are deleted 12 months after our last contact with you, or immediately if you object. If you opt out, we keep only your email address on a suppression list, so we never contact you again.

Your rights

You can object to us contacting you or using your data at any time, and opt out of all contact. Reply "stop" to any message or email business@blackforgeworks.com. We add you to the suppression list within 24 hours. This right is absolute for direct marketing (art. 21(2)-(3)).

You also have the right to access, correct, delete, restrict and (where it applies) port your data, and to withdraw consent. There is no charge. We answer within one month.

Automated decisions

We make no decisions based solely on automated processing that have legal or similarly significant effects on you.

Complaints

You may complain to Datatilsynet (Norway), the ICO (UK) or your local data protection authority.