Reviews
Part of Reviewing products, platforms and agencies for parenting creators with family-safe test plans
Vetting a parenting creator provider for family safeguards, rights, data and exit
Check a parenting creator provider in England for identity, family safeguards, rights, data, evidence, commercial terms, reporting and a workable exit.
Use this checklist before appointing an agency, campaign network or marketplace service. A polished roster is not enough. The buyer needs a verified entity, an exact job, bounded rights, a safe family-data route and evidence they can retain after the relationship ends.
What to take away
- A polished roster does not prove the provider is a verified entity with authority to sign.
- Bound rights, a safe family-data route and retrievable records matter more than follower counts.
- The creator is normally first owner of commissioned work unless a written arrangement says otherwise.
- Run a fictional campaign through brief, approval, reporting, cancellation and account removal before appointing.
- Never average away a failed safety, rights, identity or privacy gate in an exception log.
Identity and authority
- Record the trading name, legal entity, company number, registered address and person signing.
- Search the current entity, status, officers and filing history. The government's Companies House guidance explains what the public register contains and cautions that occasional inaccuracies can occur.
- Ask who may negotiate, approve a brief, accept a fee, publish content and instruct a takedown. Do not assume a talent manager can bind the creator in every matter.
Service and commercial terms
- Write the jobexclusive representation, non-exclusive introductions, one campaign, creator sourcing or production.
- State commission by income type, VAT treatment where applicable, expenses, invoice route, payment date, late brand payment and cancellation allocation.
- Define work already in discussion and income that continues after termination.
- Check the real working arrangement. Acas says in its Great Britain employment-status guidance that contract wording and actual practice both matter.
Family safeguards
- Give the adult creator an unconditional route to decline a child appearance or remove identifying detail before release.
- Require a written escalation path for school names, routines, health information, distressed behaviour, private spaces and unsafe product use.
- Ban real child material from speculative pitches and supplier trials unless a specific, reviewed purpose requires it.
- For an online service likely to be accessed by children, obtain the provider's assessment rather than guessing from its branding. The ICO's best-interests framework puts children's privacy, safety, development and agency within the decision.
Content rights
- List each deliverable and permitted usecreator channel, brand channel, edit, still, cut-down, paid advertisement, territory and duration.
- Price renewal and additional use separately. Record who can authorise platform linking or advertising amplification.
- Confirm ownership. The Intellectual Property Office says in its commissioned-work guidance that the creator is normally first owner unless another arrangement is agreed in writing.
Personal data and accounts
- Map information sent to the provider, brand, platform and subcontractor. Separate creator business data from any child or family details.
- Ask for purpose, role, lawful basis, location, access, retention, breach support and deletion or return at exit.
- Do not share passwords. Use the narrowest platform role that completes the agreed task and record its removal date.
- Compare the agreement with the ICO's controller-processor contract guidance, which covers instructions, confidentiality, security, subprocessors, rights support and end-of-contract provisions. Qualified review is required because that page is being updated after the 2025 data-law changes.
Evidence, disclosure and reporting
- Require the provider to substantiate objective product or performance claims before they enter a script.
- Decide who checks advertising recognition on the draft and live surface. The ASA's August 2026 social-media advice normally expects a prominent 'Ad' label at the beginning when a post is advertising.
- Keep raw platform exports, content IDs, invoices, corrections and the exact definition of each reported measure.
- Reject a guaranteed result based only on followers, testimonials or a provider's undisclosed benchmark.
Exit test
Before appointment, run a fictional campaign through brief, approval, reporting, cancellation and account removal. Do not include a real child. The provider passes only if the creator can retrieve final assets and records, revoke access, identify continuing licences and understand outstanding payment.
Write unresolved points in an exception log with an owner and deadline. Do not average away a failed safety, rights, identity or privacy gate. Sign only after the relevant UK advisers have reviewed the actual contract and evidence pack.
Before you act
- Record the legal entity, company number and signatory.
- Write the exact job and commission terms.
- Give the creator an unconditional route to decline child appearances.
- List each deliverable with permitted use, territory and duration.
- Map personal data flows and ban password sharing.
- Run a fictional campaign and log unresolved points.
Common questions
What should the buyer check on the public register before appointing a provider?
Record the trading name, legal entity, company number, registered address and signatory. Search the current entity, status, officers and filing history. Companies House guidance explains what the register contains and cautions that occasional inaccuracies can occur. Ask who may negotiate, approve a brief, accept a fee, publish content and instruct a takedown.
How should child and family data be handled by the provider?
Map information sent to the provider, brand, platform and subcontractor, and separate creator business data from child or family details. Ask for purpose, role, lawful basis, location, access, retention, breach support and deletion or return at exit. Do not share passwords. Use the narrowest platform role and record its removal date.
What must the provider pass before the contract is signed?
Run a fictional campaign through brief, approval, reporting, cancellation and account removal, without a real child. The provider passes only if the creator can retrieve final assets and records, revoke access, identify continuing licences and understand outstanding payment. Write unresolved points in an exception log with an owner and deadline.
