Privacy Policy

Last updated 30 September 2026

This policy explains what personal information the DDA Creators Dashboard (the "Dashboard", at dda.kellystudio.work) holds, why, and what your choices are.

Who is responsible

The Dashboard is an internal tool used by DDA, a talent management agency, to record creator deals, commission, invoices and payouts. DDA decides what information goes into it and what it is used for, so DDA is responsible for that information (the "controller").

The Dashboard is owned, built, hosted and maintained by Kelly Studio, and DDA subscribes to it. Kelly Studio is registered in Malaysia (SSM 202603231674 (CT0168738-K)) at 74 Jalan Datuk Sulaiman 6, Taman Tun Dr Ismail, 60000 Kuala Lumpur. Kelly Studio handles the information only to run the Dashboard for DDA and on DDA's instructions (a "processor").

What we hold

Your login: your name, username, role and job title, and the email address and phone number an admin adds for you. Your password is stored only as a one-way hash, so nobody (including Kelly Studio) can read it.
Activity records: when you sign in or out, failed sign-in attempts on your username, the changes you make (for example editing a deal or a target), and the IP address each of those came from. These keep the records accurate and the Dashboard secure.
Business records DDA enters: details of creators, brands, agencies and their contacts (names, emails, phone numbers, social handles), deals, fees, commission, invoices, payment dates, notes and targets.
Preferences: settings you choose, such as your start page or sign-out timer.

Why we use it

To let you sign in and to show you the parts of the Dashboard your role allows.
To run DDA's business: tracking deals, invoicing brands, paying creators and reporting on performance.
To keep a trustworthy record of who changed what, and to protect accounts from misuse.

The basis for this is DDA's legitimate interest in running its business and securing its systems, and, for creator and contact details, performing DDA's contracts with creators and brands. Nothing in the Dashboard is used for marketing, sold, or shared for advertising.

Cookies

The Dashboard sets one cookie: a session cookie that keeps you signed in. It is strictly necessary, so there is no cookie banner. There are no analytics, tracking or advertising cookies.

Other services the Dashboard uses

Hosting: a private server rented by Kelly Studio. The data is stored there and protected with an encrypted (HTTPS) connection.
Google Fonts supplies the typeface, and jsDelivr supplies the animation player on this log in page. Your browser contacts them directly, so they see your IP address, as with any website that uses them.

How long it is kept

Business records and the history of changes to them are kept for as long as DDA needs them for its business and to meet accounting and tax record keeping rules. Logins are disabled rather than deleted when someone leaves, so past records still show who did what. Ask DDA if you want to know how long a particular record will be kept.

Security

Passwords are hashed, sessions end after a set time, new and reset logins must choose their own password, and every change is logged. Only people DDA has given a login can reach the data, and what they see depends on their role.

Your rights

Depending on where you are, data protection law (such as the UK GDPR or Malaysia's Personal Data Protection Act 2010) may give you the right to see the information held about you, to have it corrected, to object to how it is used, or to have it deleted. As DDA is responsible for the information, please contact DDA first. Kelly Studio will help DDA respond. You can also contact Kelly Studio directly at the address below, and you may complain to your data protection regulator.

Changes and contact

If this policy changes, the date at the top will change too. Questions about the Dashboard itself can go to Kelly Studio at michael@kellystudio.work.