Food influencers: UK partnership rules and ethical practice

What to take away

Food influencers and restaurants work together through paid or otherwise incentivised partnerships in which a creator publishes promotional content.

Why this guide matters for food creator partnerships

The food creator sector has grown quickly and the compliance side has not always kept pace. A restaurant may brief a creator on a new menu, agree a fee, and publish without a disclosure line. That is a complaint waiting to happen.

The ASA's guidance on claims, endorsements and testimonials applies to any post the brand controls. The regulator publishes its rulings, and influencer cases appear regularly. For the statutory background, food creator partnerships UK regulations maps the main acts, the regulators and who enforces what.

This guide is written for the England market. Advertising regulation is UK-wide, with the ASA covering England, Scotland, Wales and Northern Ireland. Data protection law is also UK-wide. Company law runs largely on the same footing, with some differences in Northern Ireland. Where a rule differs outside England, the guide says so.

It is aimed at restaurant owners and marketing leads, at creators who take food briefs, and at agencies sitting between the two. It covers the paperwork you sign, the labels you publish, and the records you keep. Broadcast advertising follows a separate code and is outside scope.

This is general guidance only. Individual cases, especially on tax and employment status, need a qualified adviser.

Ethical practice beyond legal compliance

Ethics should be explicit in the brief, not inferred from legal compliance. Use the CMA's social media endorsements guidance as a practical baseline: disclose material connections clearly, be honest about whether the creator has tried the food, and do not present a scripted claim as a personal opinion. Ask creators to flag conflicts such as ownership or payment, and check factual claims against evidence.

Make privacy and fair treatment part of the campaign standard too. Collect only the diner data needed, avoid giving creators unnecessary access to guest details, and agree how to correct inaccurate content. These practices complement advertising rules and platform policies; they do not replace them.

Other UK legal checks

Consumer-facing promotions are also subject to consumer protection law. The Competition and Markets Authority (CMA) is a key enforcer; the Consumer Protection from Unfair Trading Regulations 2008 may be relevant to earlier conduct, while the unfair commercial practices regime is set out in the Digital Markets, Competition and Consumers Act 2024. Hidden endorsements and misleading claims are not made acceptable by a contract or platform label.

If a campaign collects email addresses or sends marketing by email or text, check the Privacy and Electronic Communications Regulations 2003 (PECR). Unsolicited electronic marketing to individuals generally requires consent, subject to the existing-customer soft opt-in conditions. A creator-post disclosure is separate from consent to receive marketing messages.

Check HMRC guidance on employment status for tax and the off-payroll working rules (IR35) where a creator provides services through an intermediary, such as a personal service company. A contract or invoice label alone does not determine employment status, and who must assess the position depends on the circumstances.

The disclosure rule: ads must be obvious

The core principle is easy to state. If a brand pays for, controls or approves a creator post, the audience must be able to tell it is an ad before they engage with it. The ASA's guidance on claims, endorsements and testimonials explains how it assesses whether a label is clear enough.

A bare #spon buried under twenty other hashtags rarely passes. A clear 'Ad' label at the start of the caption is much safer, and a spoken disclosure in the first few seconds is safer still.

Wording matters more than symbols. 'Gifted' describes a free product and does not, on its own, tell a viewer the brand had control. 'Ad' or 'advertisement' is clearer. Where a post mixes a paid element with an unpaid recommendation, label the paid part and keep the two apart.

Payment need not be cash. A free meal, a paid trip, a discount code or a gifted hamper can trigger the same duty when the brand controls the content. The test turns on control and incentive, not on the size of the fee.

Disclosure also has to survive the platform's own truncation. Instagram cuts captions after a couple of lines. TikTok captions sit below the video and may need expanding. Put the label in the video itself, spoken or on screen, and repeat it in the caption.

Some formats are harder than others. Stories disappear after a day, so a label that only appears in a post-campaign blog does nothing. Live streams need a spoken label at the start and a pinned comment. Podcast reads need the disclosure in the introduction, not buried in the outro.

The ASA can name a brand or a creator in a published ruling, and it can refer persistent offenders to trading standards. The reputational cost of a ruling usually outweighs the fee saved by skipping a label. Our food creator partnerships advertising rules page walks through how the CAP Code applies to restaurant campaigns line by line.

Contracts, control and who is responsible

Control is the hinge. If the brand has final approval over the script, the shot list or the caption, the ASA is likely to treat the post as the brand's own ad. The brand then shares responsibility for the disclosure, even when the creator pressed publish.

A creator who insists on full editorial control may shift that balance. A fee plus a detailed brief usually points the other way. Put the answer in writing rather than relying on how the relationship feels.

Briefs also set the tone. A brief that asks for 'buzzing' or 'unmissable' language invites claims the creator cannot evidence. Stick to what the kitchen actually does and what the menu actually contains.

Deliverables should be listed. How many posts, on which platforms, for how long, and who approves the final edit. Vague deliverables create arguments about payment and about who owns the footage.

A written agreement should say who writes the disclosure, where it appears, and what happens if a platform hides it. It should also cover usage rights, exclusivity, payment terms and early deletion. Our food creator partnerships commercial contracts guide covers the clauses that matter most in restaurant deals.

Usage rights deserve a second look. A creator may be happy for a restaurant to reshare a reel for a month, but not to run it as a paid ad for a year. Set the channels and whether the brand can edit the content.

Invoicing should be settled in the contract too. State whether the fee includes VAT, when payment falls due, and who carries the risk if a post is taken down for reasons outside the creator's control. Creators working through a limited company should invoice in that company's name.

A creator who is also a company director carries extra duties. The GOV.UK guidance on being a company director sets out the statutory responsibilities, including promoting the success of the company and avoiding conflicts of interest. A creator paid to promote a restaurant they hold shares in should declare that interest.

Restaurants should name an owner for each campaign. One person for approvals, one folder for evidence. That sounds bureaucratic until a complaint arrives and someone has to reconstruct what was agreed.

Data protection when you work with creators

Creators handle personal data constantly. They may receive a guest list, a booking sheet or direct messages from diners. A restaurant that hands that data to a creator is processing personal data and needs a lawful basis for doing so.

The ICO's lawful basis guidance explains the six bases available. Consent and legitimate interests are the two most used in marketing. Whichever you choose, you have to be able to explain the choice and honour it in practice.

Consent must be specific, informed and easy to withdraw. A diner who agrees to be filmed for a creator's post has not automatically agreed to receive marketing emails from the restaurant. Those are separate purposes and may need separate bases.

Filming raises its own questions. Ask anyone identifiable before the camera rolls, and record what they agreed to. A nod on the night is hard to prove six months later, and a subject access request can arrive long after the meal.

Two principles do most of the work here. Data minimisation means asking for the least you need, so a booking list for twenty guests should not arrive as a full customer database export. Storage limitation means setting a deletion date when you collect the data, not when someone remembers.

Processors need a written contract too. If a creator holds a guest list for a brand, or an agency runs the campaign, set out the limits. Say what they may do with the data, how long they keep it, and how they delete it.

Security is part of the same duty. A shared spreadsheet of diner phone numbers left on a personal drive is a breach risk, whatever the lawful basis. Access should be limited to the people who need it for the campaign.

The Data Protection Act 2018 sits alongside the UK GDPR and sets out how the regime is enforced. The Data Protection Act 2018 matters here for marketing lists and record keeping, while other parts of the same Act deal with law enforcement processing.

Check the ICO's data protection fee self-assessment to see whether the restaurant or another controller must pay the fee or is exempt. Set a retention period and deletion trigger for each campaign according to its purpose and any applicable record-keeping needs; there is no single period that fits every campaign.

Our food creator partnerships data protection article covers retention periods, processor terms and how to answer a subject access request without panic.

Platform rules and brand safety

Platforms add their own layer on top of advertising law. TikTok's brand safety centre explains how the platform handles branded content, including disclosure tools and the content it may remove. A post that satisfies the ASA can still come down for breaching community guidelines.

Brand safety cuts both ways. A restaurant does not want its name beside content that breaches platform rules. A creator does not want to lose reach because a brief pushed them into a grey area.

Sound and music cause more takedowns than most brands expect. Commercial tracks are usually off limits for branded posts, and the platform's commercial music library is the safe route. Check the rules for the account type you are using.

Agree the disclosure format before the shoot, and check the current policy before publishing. Platform rules change often, so treat any policy screenshot as a dated record rather than a permanent green light.

Appeals exist but they are slow. Where a post is removed, the creator usually has to appeal through their own account, which means the brand may not be able to fix it directly. Build a day or two of slack into launch timings for a large campaign.

Meta, YouTube and TikTok all offer paid partnership labels. Using the label is not a substitute for a clear caption. A creator who uses the label and says the disclosure out loud is in a stronger position than one who relies on the label alone.

Before and after: a compliant creator brief

The table contrasts a weak brief with a stronger one. It is illustrative, not a legal checklist.

The strongest version of any row is the one you can evidence. If a complaint lands, the question is not what you intended but what you can show.

Measuring and reporting compliance

Compliance is easier to defend when it is documented. Keep the brief, the final caption, a screenshot of the platform label and the signed contract in one place. If a complaint arrives, that file is the evidence.

Our food creator partnerships measurement and reporting guide suggests a log that tracks disclosure, spend and reach for each campaign. Reviewed monthly, the log also shows which creator quietly stopped labelling.

A monthly check takes minutes. Confirm the labels are still visible on live posts, that the paid partnership tags are still attached, and that the campaign folder holds the signed contract. Fix anything missing while the campaign is still running.

Reporting matters for tax as well. Payments to creators normally need to be recorded, and the creator is usually responsible for their own tax status. Treating a creator as an employee without the paperwork invites a status dispute.

Retention should be deliberate. Keep campaign records for as long as you need them and no longer, and write the period down so the next campaign starts from the same rule. For anything beyond that, take advice from a qualified adviser.

Common questions

Do I need a written contract for a food creator partnership?

Not always in law, but a written contract is the practical way to fix disclosure, usage rights and payment terms. It also helps if a dispute arises later.

Can a creator be personally liable for a misleading post?

The ASA can name a creator in a ruling, and trading standards can act on persistent breaches. Where the creator is a company director, the GOV.UK director duties guidance applies, which can reach personal responsibility for company actions.

Does UK GDPR apply to a creator's own data if they are not an employee?

Yes. A creator is a data subject like anyone else. A restaurant holding their bank details, address or performance data needs a lawful basis, and the ICO guidance covers the options.

What happens if TikTok removes a compliant post?

Platform rules sit on top of advertising rules. A post can meet ASA expectations and still breach TikTok's branded content or brand safety policy. Keep the disclosure clear and check the current rules before publishing.

Does the same rule apply in Scotland, Wales and Northern Ireland?

Advertising regulation is UK-wide and the ASA's remit covers all four nations. Data protection is UK-wide too, though some public sector rules differ. Company law is largely UK-wide, with differences in Northern Ireland. Check the specific regime if you operate outside England.

Official sources

• Explanatory notes to Digital Markets, Competition and Consumers Act 2024
• UK guidance on social media endorsements for content creators