Effective Date: 30th May 2026

This Privacy Policy ("Policy") explains how SocialXOnline collects, uses, stores, protects, shares, and processes personal information.

SocialXOnline is operated by Creswick Media Limited ("SocialXOnline", "we", "our", or "us").

This Policy applies to all users, creators, members, businesses, visitors, buyers, sellers, subscribers, and other individuals who access or use the SocialXOnline Platform.

By accessing or using the Platform, you acknowledge that your information may be processed in accordance with this Policy.

1. OUR COMMITMENT TO PRIVACY

SocialXOnline is committed to protecting user privacy and processing personal information responsibly.

We aim to comply with:

* UK GDPR

* Data Protection Act 2018

* Privacy and Electronic Communications Regulations (PECR)

* Online Safety Act obligations where applicable

* Other applicable data protection laws

2. DATA CONTROLLER

For the purposes of UK GDPR and applicable data protection laws:

Data Controller:

Creswick Media Limited

Trading Name: SocialXOnline

England & Wales

Email: privacy@socialxonline.com

Website: https://www.socialxonline.com

3. INFORMATION WE COLLECT

We may collect information directly from users, automatically through Platform usage, from verification providers, payment providers, and other authorised third parties.

Information may include:

Account Information

* Name

* Username

* Email address

* Date of birth

* Account preferences

* Profile information

Contact Information

* Email addresses

* Communication preferences

* Support correspondence

Verification Information

* Government-issued identification

* Verification photographs

* Selfie verification images

* Age verification information

* Identity verification information

* Business verification information

Creator Information

* Creator profiles

* Payout details

* Business information

* Tax information

* Monetisation information

Marketplace Information

* Purchase history

* Sales history

* Delivery information

* Transaction records

Payment Information

SocialXOnline does not store raw payment card information.

Payment processors may collect:

* Payment method details

* Transaction information

* Billing information

* Payment verification information

We may receive limited payment-related information necessary to process transactions and maintain records.

4. INFORMATION COLLECTED AUTOMATICALLY

When users access the Platform, we may automatically collect:

* IP addresses

* Device identifiers

* Browser information

* Operating system information

* Session information

* Log information

* Usage analytics

* Security information

This information helps us operate, secure, and improve the Platform.

5. CONTENT INFORMATION

We may collect information relating to content uploaded to the Platform, including:

* Images

* Videos

* Livestream information

* Audio files

* Messages

* Marketplace listings

* Metadata

This information may be processed to provide Platform services.

6. AUDIT LOGS

SocialXOnline maintains audit logs relating to Platform activity.

Audit records may include:

* Login activity

* Verification activity

* Content uploads

* Moderation actions

* Marketplace activity

* Livestream activity

* Account changes

* Security events

* Transaction activity

Audit records help us:

* Prevent fraud

* Investigate abuse

* Resolve disputes

* Comply with legal obligations

* Protect users

7. HOW WE USE YOUR INFORMATION

We may use information to:

* Create accounts

* Verify identity

* Verify age

* Provide services

* Process transactions

* Process subscriptions

* Enable creator payouts

* Operate livestreams

* Moderate content

* Detect fraud

* Investigate abuse

* Improve Platform functionality

* Comply with legal obligations

* Communicate with users

8. LEGAL BASIS FOR PROCESSING

We may process information where:

Contractual Necessity

Processing is necessary to provide Platform services.

Legal Obligations

Processing is necessary to comply with legal requirements.

Legitimate Interests

Processing is necessary for:

* Security

* Fraud prevention

* Platform operation

* Content moderation

* Business administration

Consent

Where required, we may request user consent before processing specific information.

8A. LEGAL BASES FOR PROCESSING

Processing Activity Legal Basis

Account Registration Contractual Necessity

Membership Services Contractual Necessity

Creator Services Contractual Necessity

Payment Processing Contractual Necessity

Creator Payouts Contractual Necessity

Age Verification Legal Obligation / Legitimate Interest

Identity Verification Legal Obligation / Legitimate Interest

Fraud Prevention Legitimate Interest

Content Moderation Legitimate Interest

Security Monitoring Legitimate Interest

Online Safety Compliance Legal Obligation

Audit Logging Legitimate Interest

Marketing Communications Consent where required

9. AGE VERIFICATION PROCESSING

Age verification information may be processed to:

* Verify user age

* Prevent underage access

* Comply with legal obligations

* Protect users

* Support Online Safety Act compliance

Verification information may be processed by authorised verification providers.

10. CONTENT MODERATION PROCESSING

Information may be reviewed for moderation purposes.

Moderation activities may include:

* Automated review

* Manual review

* Compliance review

* Safety review

* Investigation review

Moderation processing helps maintain Platform safety and compliance.

11. FRAUD PREVENTION

Information may be processed to:

* Detect fraud

* Detect account abuse

* Detect payment fraud

* Detect chargeback abuse

* Detect verification fraud

* Protect users and creators

Security and fraud systems may operate automatically or manually.

12. MEDIA STORAGE

User-generated media is stored using third-party cloud storage services. SocialXOnline currently utilises Bunny.net and related infrastructure providers for media storage and delivery. Media is not generally stored on SocialXOnline application servers. Storage providers may process information necessary to store and deliver content.

13. MEDIA PROTECTION

To protect creators and intellectual property, uploaded content may be processed using technologies including:

* Watermarking

* Fingerprinting

* Hashing

* Duplicate detection

* Content protection systems

These measures help prevent unauthorised distribution and protect creator rights.

14. WHO WE SHARE INFORMATION WITH

We may share information with:

Service Providers

* Hosting providers

* Cloud storage providers

* Content delivery providers

* Verification providers

* Payment providers

* Analytics providers

Professional Advisors

* Lawyers

* Accountants

* Auditors

* Compliance professionals

Authorities

Where legally required, information may be disclosed to:

* Law enforcement

* Courts

* Regulators

* Government agencies

15. INTERNATIONAL TRANSFERS

Information may be transferred and processed outside the United Kingdom where necessary. Where international transfers occur, SocialXOnline will take reasonable steps to ensure appropriate safeguards are implemented.

16. DATA RETENTION

Information is retained only for as long as reasonably necessary to:

* Provide services

* Comply with legal obligations

* Prevent fraud

* Resolve disputes

* Maintain audit records

* Protect Platform integrity

Retention periods may vary depending upon the type of information involved.

17. VERIFICATION DATA RETENTION

Verification information is retained only for as long as reasonably necessary.

Typical retention periods may include:

Failed verification submissions: up to 90 days

Approved verification records: up to 6 years

Verification audit records: up to 6 years

Fraud investigation records: up to 6 years

Longer retention periods may apply where required by:

Court orders

Regulatory requirements

Payment provider obligations

Fraud investigations

Legal claims

Verification media is securely deleted when retention is no longer required.

Verification media is securely deleted when retention is no longer required.

18. ACCOUNT DELETION

Users may request account deletion through available Platform tools.

Deletion requests may result in:

* Removal of profile visibility

* Removal of public content

* Closure of account access

Certain information may be retained where required for:

* Legal obligations

* Fraud prevention

* Regulatory compliance

* Audit requirements

* Dispute resolution

19. SECURITY

SocialXOnline implements technical and organisational measures designed to protect personal information.

Security measures may include:

* Encryption

* Access controls

* Audit logging

* Monitoring systems

* Malware scanning

* Authentication controls

* Infrastructure security measures

No system can guarantee absolute security.

20. USER RIGHTS

Subject to applicable laws, users may have rights including:

* Access rights

* Rectification rights

* Erasure rights

* Restriction rights

* Portability rights

* Objection rights

Requests may be submitted to: privacy@socialxonline.com

Additional verification may be required before requests are processed.

20A. DATA SUBJECT RIGHTS

Subject to applicable law, users may have the following rights regarding their personal information:

Right of Access

The right to obtain confirmation regarding whether personal information is being processed and to obtain access to such information.

Right to Rectification

The right to request correction of inaccurate or incomplete personal information.

Right to Erasure

The right to request deletion of personal information where applicable legal grounds exist.

Right to Restrict Processing

The right to request restriction of processing in certain circumstances.

Right to Data Portability

The right to receive certain personal information in a structured, commonly used, and machine-readable format.

Right to Object

The right to object to processing based upon legitimate interests where applicable.

Right to Withdraw Consent

Where processing is based upon consent, users may withdraw consent at any time.

Right to Lodge a Complaint

Users have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Complaints may be submitted through:

Information Commissioner's Office (ICO)

Nothing in this Policy affects any statutory rights available under applicable data protection laws.

21. MARKETING COMMUNICATIONS

Users may receive service-related communications necessary for account operation.

Marketing communications may be provided where permitted by law.

Users may opt out of marketing communications at any time.

22. CHILDREN'S PRIVACY

SocialXOnline is not intended for individuals under eighteen (18) years of age.

We do not knowingly permit minors to use the Platform.

If we become aware that information relating to a minor has been collected unlawfully, we may take steps to remove such information and restrict the associated account.

23. AUTOMATED DECISION-MAKING

Certain Platform functions may utilise automated systems relating to:

* Fraud prevention

* Content moderation

* Verification reviews

* Security monitoring

Human review may be available in appropriate circumstances.

24. CHANGES TO THIS POLICY

SocialXOnline reserves the right to modify this Policy at any time.

Updated versions will be published on the Platform.

Continued use of the Platform following publication constitutes acceptance of updated versions.

25. CONTACT INFORMATION

Privacy enquiries may be directed to: privacy@socialxonline.com or legal@socialxonline.com

SocialXOnline is a trading name of Creswick Media Limited England & Wales

Website: https://www.socialxonline.com