
Rules and ethics
Part of Reviewing a creator media kit against UK rules on claims, permissions and personal data
Three contract terms behind a creator media kit that deserve a proper read
Creator media kits commercial contracts in England: a non-ranked review list covering portfolio licences, processing terms and payment responsibilities.
Creator media kits commercial contracts should define the rights and services behind the portfolio presentation. The following non-ranked list identifies three contract areas to take to an England-qualified solicitor: content permissions, personal-data processing terms and service payment documentation. The named sources are GOV.UK copyright permissions guidance, ICO Article 28 guidance and GOV.UK late commercial payment guidance.
Three clauses are an asset licence under the Copyright, Designs and Patents Act 1988, an Article 28(3) UK GDPR processor contract, a Late Payment of Commercial Debts (Interest) Act 1998 30-day term.
What to take away
- Content permissionspermission must cover the actual photograph, illustration or video extract, not just ownership.
- Personal-data processingcheck whether hosting creates a controller-processor relationship before applying Article 28 processor terms.
- Service paymentdocument what a designer charge covers, the delivery format and the approval process for revisions.
Red-flag examples include a licence clause that grants a 'perpetual, worldwide, all media' right with no audience or download limit. Another is a processor term with no deletion or return of data on termination, or a payment term with no agreed date.
How this list was assembled
Research date: 6 September 2026. The selection universe is contract documentation for creating, hosting or licensing a media kit. Research was a desk review of GOV.UK copyright permissions guidance, ICO Article 28 guidance and GOV.UK late commercial payment guidance.
How the list was assembled
- Research date6 September 2026
- GeographyEngland commercial use
- Universemedia kit contract documents
- Inclusiondistinct portfolio decision
- Inclusionofficial record supports entry
- Order follows work sequence, not score
- Excludedretainers, marketplaces, campaigns
1. Permission and licensing terms for portfolio assets
GOV.UK's copyright permissions guidance explains that using protected material generally requires permission unless an applicable exception or other permitted basis exists. This is official guidance about UK copyright law, applicable in England.
Portfolio asset permission checks
- Request permission for the actual asset
- Distinguish ownership from display right
- Record permitted media and audience
- Record duration of permission
- Check downloadable copies are covered
- Flag photographer or client contributions
For a kit, request the permission covering the actual photograph, illustration or video extract. Ask the solicitor to distinguish ownership from the right to display a sample. Record permitted media, audience, duration and whether the permission covers downloadable copies.
A clause that permits 'all media, worldwide, perpetual' with no download limit is broader than a portfolio sample needs.
The review output should identify which assets may appear in which version. A broad promise that the creator owns everything should not replace checking contributions from photographers or clients. Refer uncertain exceptions and conflicting ownership claims for legal assessment.
2. Processing terms with the portfolio host
The ICO's Article 28 contract guidance identifies the required provisions when a controller appoints a processor. It includes assistance obligations, subprocessors and return or deletion at the end of the arrangement. This is current UK regulator guidance on an existing statutory framework, subject to the page's update notices.
Is the host a processor?
Does hosting create a controller-processor relationship?
apply Article 28 processor terms
send for different role analysis
Establish whether hosting creates that relationship before applying processor terms. Request the supplier's agreement and map it to uploaded contact information or identifiable samples; if the host determines separate purposes, treat that as a different role analysis.
The useful output is a record of the assessed processing arrangement and unresolved terms.
3. Service scope and payment documentation
GOV.UK's late commercial payment guidance describes when business payments become late, including the position where no payment date was agreed. It addresses UK commercial payment rules.
For a designer or portfolio-tool service, document what the charge covers, the delivery format and the approval process. Ask how requested revisions affect scope, when payment falls due and what happens to access when the service ends.
Take the quotation and proposed terms together to the reviewer. Keep any published price statement consistent with the service being offered, without inventing a fee or assuming an interest entitlement in a disputed case.
Assemble the contract review pack
Provide the actual proposed documents, asset schedule and hosting data map to a named solicitor with relevant commercial and privacy expertise. No single public figure applies to a solicitor review. A quote depends on hourly rate or fixed fee, document volume and whether privacy advice is included.
Timing depends on the firm's availability and the completeness of the documents you supply.
Before you act
- Request permission covering the actual asset, not just ownership.
- Record permitted media, audience, duration and downloadable copies.
- Check whether hosting creates a controller-processor relationship.
- Map the supplier agreement to uploaded contact information.
- Document what the charge covers and the delivery format.
- Take quotation and proposed terms to a named solicitor.
Common questions
What should a creator ask a solicitor to distinguish in a media kit contract?
The article says to ask the solicitor to distinguish ownership from the right to display a sample. It also says to record permitted media, audience, duration and whether permission covers downloadable copies.
When do processor terms apply to a portfolio host?
The article says to establish whether the hosting activity actually creates a controller-processor relationship before applying processor terms. Request the supplier's relevant agreement and map it to uploaded contact information or identifiable samples. If the host determines separate purposes, send that issue for a different role analysis.
What should be documented for a designer or portfolio-tool service?
The article says to document what the charge covers, the delivery format and the approval process. Ask how requested revisions affect scope, when payment falls due and what happens to access when the service ends.



