← Back to Home

Privacy Policy

Last updated: March 2026  ·  Illyria Talent Agency  ·  Bucharest, Romania

1. Who We Are

Illyria Talent Agency ("Illyria", "we", "us", "our") is a sole trader business (PFA) registered in Romania, operating the website illyria.agency. We represent diaspora creators for brand partnerships.

Data controller: Illyria Talent Agency, Bucharest, Romania
Contact: [email protected]

2. What Data We Collect

We only collect data that is necessary for operating our agency. This includes:

  • Contact form data: name, email address, country, content language, platform, follower count, and profile information submitted via our website forms
  • Email correspondence: any emails you send to [email protected]
  • Business data: for signed talent and brand clients, we may hold contract details, payment information, and campaign records
  • Website analytics: we use Cloudflare's built-in analytics which collects anonymised traffic data with no cookies and no personal identifiers

We do not use advertising trackers, third-party analytics cookies, or sell any data to third parties.

3. How We Use Your Data

We use the data you provide solely to:

  • Respond to your enquiry or application
  • Assess whether you are a fit for our talent roster or brand partnerships
  • Manage our ongoing business relationship if we work together
  • Send you relevant communications about campaigns, opportunities, or updates (you can opt out at any time)

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Under GDPR, we process your data on the following legal bases:

  • Consent: when you submit our contact form, you consent to us using your details to respond
  • Legitimate interests: for ongoing business communications with talent and brands we work with
  • Contract performance: when we have a signed agreement with you

5. How Long We Keep Your Data

  • Enquiries with no follow-up: deleted after 12 months
  • Active talent and brand relationships: kept for the duration of our working relationship plus 3 years for legal and accounting purposes
  • Contracts and invoices: kept for 10 years as required by Romanian law

6. Who We Share Data With

We do not sell or share your personal data with third parties for marketing purposes. We may share limited data only in these circumstances:

  • Brand clients: if you are a signed talent, we share your media kit and relevant profile information with brands as part of campaign pitching — always with your knowledge
  • Service providers: we use Gmail (Google) for email and Cloudflare for website hosting and email routing. Both operate under EU Standard Contractual Clauses
  • Legal requirements: if required by law or regulatory authority

7. Your Rights Under GDPR

As a data subject under GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data ("right to be forgotten")
  • Restriction — ask us to limit how we use your data
  • Portability — request your data in a portable format
  • Object — object to us processing your data for legitimate interests
  • Withdraw consent — at any time, where consent is the legal basis

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Romania, this is the ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) at dataprotection.ro.

8. Cookies

Our website does not use tracking cookies, advertising cookies, or third-party analytics cookies. Cloudflare may set a strictly necessary security cookie (__cf_bm) for bot protection. This cookie does not track you across websites and expires within 30 minutes.

No cookie consent banner is required for strictly necessary cookies under GDPR.

9. Data Security

We take reasonable technical and organisational measures to protect your data, including encrypted email transmission (TLS), HTTPS on all web pages, and access controls limiting who can view personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active contacts of significant changes by email. The date at the top of this page reflects the most recent update.

Contact Us

For any privacy-related questions or to exercise your rights:

Illyria Talent Agency
Bucharest, Romania
[email protected]
illyria.agency