Legal and compliance
UK GDPR
In one sentence
The UK's carbon copy of EU GDPR, in force since Brexit. Substantively identical for UGC purposes; the ICO enforces. Recordkeeping, consent and revocation requirements match EU GDPR.
Read more on this
Strategy
GDPR + UGC Compliance: The Operational Manual for 2026
GDPR treats reused customer content as personal-data processing: consent per asset, a searchable audit trail, and a 30-day end-to-end withdrawal SLA.
Strategy
GDPR, consent and UGC
UGC shows identifiable people, so it is personal data under GDPR. A defensible programme records scoped permission, honours removal requests, and minimises what it holds.
Strategy
How to legally collect UGC from Instagram and TikTok
A repost is not permission. To put a customer's photo or video on your store or in an ad you need a documented licence, with a recorded reply that grants it.
See it working on a live store.
Real storefronts using the thing this page defines.
