Privacy Policy

Welcome to uTrending, our website at www.utrending.com (our “Website”). This Privacy Policy explains which Personal Data we collect from you via our Website and Platform, what we use it for, when we delete it and how your data is protected.

utrending.com is operated and maintained by Ziken Labs Società a Responsabilità Limitata Semplificata, Via Vittore Carpaccio 18, 00147, Rome, Italy (“Ziken Labs”, “we”, “us”, “our”). If you want to contact us or if you have any questions, you can reach us by email using zikenlabs@gmail.com, or write to us at the above address.

1. Why do we have a privacy policy?

We will only use your Personal Data in accordance with the applicable data protection laws, in particular Italy’s data protection laws and the EU’s General Data Protection Regulation (“GDPR”) and only as described in this Privacy Policy.

2. What is personal data?

Personal Data is information that makes it possible to identify a natural person. This includes in particular, your name, date of birth, address, telephone number, e-mail address but also your IP address. Anonymous data exists if no personal reference to the user can be made.

3. What is processing?

“Processing” means and covers virtually any handling of data.

4. When can we process your personal data?

All Personal Data that we obtain from you will only be processed for the purposes described in more detail below. In particular, we collect Personal Data only if:

you have given your consent;
the data is necessary for the fulfillment of a contract / pre-contractual measures;
the data is necessary for the fulfillment of a legal obligation;
the data is necessary to protect the legitimate interests of our company and business.

We process and store your Personal Data only for the period of time required to achieve the respective processing purpose or for as long as a legal retention period exists (in particular for commercial and tax compliance purposes, where applicable). Once the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.

5. Data transfers

In certain cases, it is necessary to transmit the processed Personal Data in the course of data processing. In this respect, there are different recipient bodies and categories of recipients.

Internal

If necessary, we transfer your Personal Data within Ziken Labs. Access to your Personal Data is only granted to authorized personnel who need access to the data due to their job, e.g., to respond to requests, manage campaigns, provide support, or for compliance purposes.

External bodies

Personal Data may be transferred to selected service providers and partners in the following instances:

to host, operate and secure the Website and Platform;
to communicate with you and provide customer support;
to manage campaign operations, project coordination and deliverables;
to use analytics and marketing services (where enabled via cookies/consent);
to process payments where uTrending facilitates or administers compensation and fees (if applicable);
to comply with legal obligations or respond to lawful requests by public authorities.

We generally do not transfer Personal Data to countries outside the EEA. However, if we do, we ensure that processing is governed by appropriate safeguards (such as Standard Contractual Clauses) to ensure a high level of data protection.

6. Security of your data

Our Website and Platform are hosted on servers located in the EEA or otherwise protected by appropriate safeguards. We employ appropriate security measures to help protect your Personal Data and guard against access by unauthorized persons. Data storage is on secure systems in certified data centers and information is encrypted wherever possible. We undergo periodic reviews of our security policies and procedures to ensure that our systems are secure and protected.

However, as the transmission of information via the Internet is not completely secure, we cannot guarantee the security of your information transmitted to our Website or Platform.

7. Your rights and privileges

Under the GDPR, you can exercise the following rights: the right to access; the right to rectification; the right to erasure; the right to restrict processing; the right to object to processing; the right to data portability; updating your information, withdrawing your consent and objecting.

If you believe that the information we hold about you is inaccurate or request its rectification, deletion, or object to its processing, please do so by contacting us.

Access request

In the event you want to make a Data Subject Access Request, please contact us. We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days, we will tell you why and when we will be able to respond. If we are unable to provide you with any Personal Data or to make a correction requested by you, we will tell you why.

Complaint to a supervisory authority

The supervisory authority in Italy is the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome. We would appreciate the opportunity to address your concerns before you contact the Garante or any other supervisory authority.

What we do not do

We do not request Personal Data from minors and children; we do not intentionally process Special Category Data without specific and expressly given consent; we do not sell your Personal Data.

8. Purposes of use of personal data and legal basis

Hosting

The hosting service used by us for the purpose of operating our Website and Platform is Hostinger (or another provider as indicated on the Website). In doing so, the hosting provider processes inventory data, contact data, content data, usage data, meta data and communication data of customers, interested parties and visitors, on the basis of our legitimate interests in an efficient and secure provision of the Website and Platform.

Collection of access data and log files

We, or our hosting provider, collect data on every access to our Website on the basis of our legitimate interest. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL, IP address and the requesting provider. Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) and then deleted, unless a longer retention is required for evidentiary purposes.

Cookies

For the processing of personal data using cookies and similar technologies on our Website, please refer to our Cookie Policy. The legal basis for the use of cookies is our legitimate interest or your consent when you agree to the use of technically non-essential cookies.

Where required by applicable law, we obtain consent for the use of technically non-essential cookies via a cookie consent tool. When you enter our Website, the following Personal Data may be processed: your consent(s) or revocation; IP address; browser/device information; time of your visit.

Content management system

We may use content management tools (e.g., WordPress or equivalent) to publish and maintain content on our Website. This may involve the processing of technical data and any information you submit via forms or user interactions.

Analytics

For business reasons, we may analyze anonymized or aggregated data on web and server traffic patterns, website interactions and browsing behavior. Where required, analytics tools (e.g., Google Analytics) are used only based on your consent. For further information, please refer to our Cookie Policy.

Contact options (brands and influencers)

We process and store Personal Data provided via contact forms, email or direct enquiries solely for the purpose of processing and responding to your request and contacting you. This usually includes your name, email address, the topic and the message content. Your IP address may also be processed for technical and legal protection reasons. The legal basis is our legitimate interest, pre-contractual measures, contractual necessity and/or your consent.

Brand requests and project scoping

If you are a Brand, we process information necessary to understand your request and propose a solution, such as contact details, company information, campaign objectives, target audience, budget ranges, timelines and any materials you share with us. The legal basis is pre-contractual measures and contractual necessity, and in some cases legitimate interest.

Influencer onboarding and profile data

If you are an Influencer, we may process data necessary to evaluate, onboard and manage your participation in the uTrending network. This may include contact details, social profile links, public performance metrics, categories of content, audience characteristics and operational details needed to coordinate collaborations. The legal basis is pre-contractual measures, contractual necessity and legitimate interest.

Campaign coordination and communications

We process Personal Data required to coordinate campaigns, communications and deliverables between Brands and Influencers. This may include emails, messages, briefs, approvals, reporting and operational documentation. The legal basis is contractual necessity and legitimate interest.

Payments and invoicing (if applicable)

If uTrending administers service fees or facilitates compensation flows, we process billing details, invoicing data and transaction references. Payment data is typically processed by third-party payment providers, and we do not store full card details in the ordinary course of business. The legal basis is contractual necessity and legal obligations (e.g., accounting and tax compliance).

Administration, financial accounting, office organization, contact management

We process data in the context of administrative tasks, business organization and compliance with legal obligations, such as archiving and bookkeeping, where applicable. The processing bases are our legal obligations and our legitimate interests.

Promotional use of your data

We may use your data within the legally permissible scope for marketing purposes, e.g., to inform you about Platform updates, services, case studies or relevant opportunities. Where required, we do so based on your consent. The legal basis is legitimate interest and/or consent (depending on the channel and jurisdiction).

If you register for our newsletter, we use the data required for this purpose to send you updates on the basis of your consent. Unsubscribing is possible at any time via the link in the newsletter or by contacting us. After unsubscribing, we will delete your email address unless we are legally permitted to retain it.
Working with us (suppliers and partners)

If you enter into a contract with us as a supplier, partner or service provider, we process the Personal Data required to manage the relationship, including support, correspondence, invoicing and contractual obligations. The legal basis is contractual necessity, legal obligations and, in some cases, your consent.

General

We are present on social media on the basis of our legitimate interest (for example: Instagram, TikTok, YouTube, X and other platforms). If you contact or connect with us via social media, we and the relevant platform may be jointly responsible for certain processing activities. The Personal Data collected when contacting us is used to handle your request and the bases are your consent and our legitimate interest.

Market research and advertising

Your data may be processed for market research and advertising purposes by the social media platforms. This may include usage profiles based on your behavior. The legal basis is our legitimate interest and the legal bases used by the relevant platform, as described in their policies.

When you visit our profiles and interact with us and others

When you visit our social media profiles, we process your actions and interactions with our profile (e.g., messages, enquiries, comments) and your publicly viewable profile data (e.g., name and profile picture). The legal basis is our legitimate interest and your consent.

10. How do we make changes to this policy?

We may change our Privacy Policy from time to time. When we change our Privacy Policy, we will publish the updated policy on our Website. Please check this Privacy Policy regularly. Subject to applicable law, changes take effect when published. Where legally required, we may take additional steps to inform you of material changes and may request that you agree to these changes.

11. Effective date

January 4, 2026