Privacy Policy

Last updated: 1 May 2026

This Privacy Policy explains how Fandations Ltd collects, uses, stores, shares and protects personal information when you visit, access or use Fandations.

Fandations is a creator-support and knowledge-sharing platform for educational, practical, creative, professional and community-based content.

Fandations is operated by Fandations Ltd.

Website: Fandations.com
Contact email: hello@fandations.com
Head office:
41 Norman Avenue
London
N22 5ES
United Kingdom

© 2026 Fandations™ Ltd. All Rights Reserved. Fandations™ and the Fandations logo are trademarks of Fandations Ltd.

Our slogan is:

Build. Share. Earn.

This Privacy Policy applies to visitors, registered users, creators, subscribers, purchasers, community participants, support contacts and anyone else who uses or interacts with Fandations.

By using Fandations, you acknowledge that we will process your personal information as described in this Privacy Policy.

1. Who We Are

For the purposes of UK data protection law, including the UK GDPR and Data Protection Act 2018, Fandations Ltd is usually the data controller of the personal information we process about users of Fandations.

This means we decide why and how your personal information is used.

The ICO explains that controllers are the main decision-makers because they exercise overall control over the purposes and means of processing personal data. (ICO)

Our contact details are:

Fandations Ltd
41 Norman Avenue
London
N22 5ES
United Kingdom

Email: hello@fandations.com

2. Scope of This Privacy Policy

This Privacy Policy applies when you:

1. visit Fandations.com;

2. create an account;

3. use the platform;

4. upload or publish content;

5. subscribe to a creator;

6. purchase or unlock digital content;

7. become a creator;

8. receive payouts;

9. send or receive messages;

10. join communities;

11. contact support;

12. report content or users;

13. take part in moderation, verification or compliance processes;

14. interact with our cookies, analytics or communications.

This Privacy Policy does not apply to third-party websites, apps, platforms, payment processors, external links or services that we do not control.

3. Personal Information We Collect

We may collect and process different types of personal information depending on how you use Fandations.

4. Account Information

When you create or manage an account, we may collect:

1. name;

2. username;

3. email address;

4. password or authentication details;

5. profile photo;

6. profile banner;

7. biography;

8. account preferences;

9. account status;

10. language or location settings;

11. communication preferences;

12. user role, such as member, subscriber or creator;

13. account creation date;

14. login history;

15. account activity.

We use this information to create and manage your account, provide access to Fandations, protect the platform, communicate with you and enforce our terms.

5. Profile and Public Information

If you create a public profile or creator profile, we may process information you choose to make available, including:

1. display name;

2. username;

3. profile image;

4. profile banner;

5. biography;

6. creator description;

7. links;

8. categories;

9. tags;

10. follower counts;

11. subscription options;

12. public posts;

13. comments;

14. community activity;

15. public creator information.

Information you choose to make public may be visible to other users and, depending on platform settings, may be indexed or displayed outside your private account area.

You should not include sensitive personal information in your public profile unless you are comfortable making it visible.

6. Creator Verification Information

If you apply to become a creator or receive payouts, we may collect and process additional information, including:

1. legal name;

2. date of birth;

3. address;

4. phone number;

5. government-issued identification;

6. identity document images;

7. selfie or liveness checks;

8. proof of address;

9. business name;

10. company details;

11. professional credentials;

12. payout account details;

13. tax information;

14. VAT information;

15. verification status;

16. verification provider results;

17. fraud risk signals;

18. sanctions or restricted-party screening results;

19. compliance notes.

We process this information to verify your identity and age, prevent fraud, process payouts, comply with tax and reporting duties, protect users, and meet legal or payment processor requirements.

HMRC guidance for digital platform operators states that reporting platform operators may need to collect seller information by 31 December of the reportable period and may limit access where sellers refuse to provide required information. (GOV.UK)

7. Payment, Purchase and Payout Information

When you make payments, subscribe, purchase content, unlock content, tip, support a creator, or receive creator payouts, we may collect and process:

1. transaction IDs;

2. payment status;

3. subscription status;

4. purchase history;

5. creator earnings;

6. payout amounts;

7. payout status;

8. refund records;

9. chargeback records;

10. invoice information;

11. billing name;

12. billing address;

13. currency;

14. payment method type;

15. payment processor metadata;

16. tax information;

17. fraud signals;

18. risk review notes.

Payment card details and sensitive payment credentials are usually processed by third-party payment providers, such as Stripe, PayPal or other payment processors, rather than stored directly by Fandations.

We may store transaction records and related metadata for accounting, tax, fraud prevention, customer support, dispute resolution and legal compliance.

8. Tax Reporting Information

Where required by law, we may collect, verify, retain and report information about creators and sellers, including:

1. legal name;

2. address;

3. date of birth;

4. tax identification number;

5. VAT number;

6. country of residence;

7. payout information;

8. transaction information;

9. earnings information;

10. seller status;

11. account details;

12. other information required by HMRC or relevant tax authorities.

UK digital platform reporting rules require certain platform operators to collect, verify and report seller information so sellers can be identified and matched with data held by HMRC. (GOV.UK)

HMRC also states that digital platform reports must be submitted by 11:59pm on 31 January for the previous year. (GOV.UK)

9. User Content

Fandations allows users to upload, publish, message, share, stream, sell or make available content.

This may include:

1. posts;

2. comments;

3. images;

4. videos;

5. audio;

6. livestreams;

7. files;

8. downloads;

9. templates;

10. messages;

11. community posts;

12. profile content;

13. creator content;

14. descriptions;

15. links;

16. reports;

17. support messages.

Your User Content may include personal information about you or others.

You are responsible for ensuring that you have the right to upload, publish or share any personal information included in your content.

Depending on your settings and how you use Fandations, User Content may be visible to other users, subscribers, creators, administrators, moderators or support staff.

10. Messages and Communications

If Fandations provides messaging, comments, communities, livestream chats, replies or similar features, we may collect and process:

1. message content;

2. sender and recipient information;

3. timestamps;

4. attachments;

5. delivery status;

6. report status;

7. moderation status;

8. safety signals;

9. abuse reports;

10. support-related communications.

We may review or process messages and communications where necessary for safety, security, moderation, fraud prevention, legal compliance, customer support or enforcement of our terms.

We do not recommend sharing passwords, bank details, identity documents, private financial details, medical information or other sensitive information through messages unless the platform specifically requests it through a secure process.

11. Reports, Complaints and Moderation Information

When users report content, profiles, messages, payments, creators or safety concerns, we may collect:

1. report type;

2. report description;

3. reported content;

4. reporting user details;

5. reported user details;

6. screenshots or attachments;

7. moderation notes;

8. decision history;

9. appeal information;

10. enforcement action;

11. internal safety records;

12. legal or escalation notes.

We use this information to enforce our terms, investigate abuse, protect users, comply with online safety expectations, prevent fraud and maintain platform integrity.

12. Device, Log and Technical Information

When you visit or use Fandations, we may automatically collect:

1. IP address;

2. browser type;

3. device type;

4. operating system;

5. time zone;

6. language;

7. referring pages;

8. exit pages;

9. pages viewed;

10. content viewed;

11. links clicked;

12. session duration;

13. access times;

14. crash logs;

15. error logs;

16. approximate location from IP address;

17. cookie identifiers;

18. device identifiers;

19. security logs;

20. fraud prevention signals.

We use this information to operate the platform, secure accounts, detect misuse, prevent fraud, measure performance, improve user experience and understand how users interact with Fandations.

13. Cookies and Similar Technologies

We may use cookies, pixels, local storage, SDKs, device identifiers and similar technologies.

These may be used for:

1. login and authentication;

2. security;

3. fraud prevention;

4. remembering preferences;

5. platform functionality;

6. analytics;

7. performance monitoring;

8. embedded media;

9. payment flows;

10. marketing, where permitted;

11. consent management.

Non-essential cookies, analytics tools, marketing pixels and similar technologies will be used where required consent has been obtained, unless an exemption applies under applicable law.

The ICO published finalised guidance on storage and access technologies, including cookies and similar technologies, on 29 April 2026. (ICO)

More information will be provided in our Cookie Policy.

14. Information From Third Parties

We may receive information about you from third parties, including:

1. payment processors;

2. payout providers;

3. identity verification providers;

4. fraud prevention providers;

5. analytics providers;

6. email providers;

7. hosting providers;

8. tax reporting providers;

9. customer support tools;

10. social login providers, if used;

11. law enforcement or regulators;

12. other users who report content or contact us.

We use this information where necessary to operate the platform, verify users, process payments, prevent fraud, investigate abuse, comply with law and enforce our terms.

15. Special Category Data

Special category data is more sensitive personal information, such as information about health, ethnicity, religion, political opinions, trade union membership, genetic data, biometric data used for identification, sex life or sexual orientation.

Fandations does not generally require users to provide special category data.

However, you may choose to include such information in your profile, messages, content, support requests or reports.

Where we process special category data, we will do so only where we have a lawful basis and, where required, an additional condition under data protection law.

You should avoid uploading or sharing sensitive information unless it is necessary and you are comfortable doing so.

16. Criminal Offence Data

We do not usually require criminal offence data.

However, we may process information relating to suspected fraud, unlawful activity, safety threats, illegal content, sanctions, abuse reports, law enforcement requests or platform misuse where necessary and lawful.

17. How We Use Personal Information

We may use personal information to:

1. provide Fandations;

2. create and manage accounts;

3. verify users and creators;

4. process payments;

5. process creator payouts;

6. administer subscriptions;

7. provide digital content access;

8. operate creator tools;

9. provide messaging and community features;

10. provide customer support;

11. send account and service communications;

12. send security alerts;

13. process reports and complaints;

14. moderate content;

15. enforce our terms and policies;

16. prevent fraud and abuse;

17. detect security threats;

18. comply with tax obligations;

19. comply with legal obligations;

20. keep records;

21. improve the platform;

22. analyse usage;

23. personalise user experience;

24. manage cookies and consent;

25. investigate disputes;

26. protect users, creators and Fandations;

27. communicate updates, where permitted;

28. send marketing, where permitted.

18. Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing personal information.

The ICO explains that at least one Article 6 UK GDPR lawful basis must apply whenever an organisation handles personal information. (ICO)

Depending on the situation, we may rely on the following lawful bases:

Contract

We process personal information where necessary to provide the platform, manage your account, process subscriptions, provide digital access, support creator accounts, process payments and fulfil our terms with you.

Legal obligation

We process personal information where necessary to comply with legal obligations, including tax reporting, accounting, fraud prevention, court orders, lawful requests, regulatory obligations and legal record keeping.

Legitimate interests

We process personal information where necessary for our legitimate interests or those of others, provided those interests are not overridden by your rights.

Our legitimate interests may include:

1. operating Fandations;

2. improving the platform;

3. preventing fraud;

4. securing accounts;

5. moderating content;

6. enforcing policies;

7. handling complaints;

8. protecting users;

9. investigating misuse;

10. maintaining business records;

11. developing features;

12. understanding platform performance.

Consent

We rely on consent where required, such as for certain cookies, marketing communications or optional features.

You may withdraw consent where processing is based on consent.

Vital interests

We may process personal information where necessary to protect someone’s life or physical safety.

Public task

We do not usually rely on public task because Fandations is not a public authority.

The ICO says privacy information should explain the lawful basis relied on for processing and, where relevant, the legitimate interests involved. (ICO)

19. Marketing Communications

We may send you marketing communications where permitted by law.

This may include:

1. platform updates;

2. creator tools;

3. promotions;

4. feature announcements;

5. newsletters;

6. creator opportunities;

7. educational content;

8. offers.

You can opt out of marketing emails by using the unsubscribe link or contacting us.

Even if you opt out of marketing, we may still send important service, security, legal, payment or account-related messages.

20. Analytics and Performance

We may use analytics tools to understand how users interact with Fandations.

Analytics may help us understand:

1. pages visited;

2. features used;

3. content performance;

4. device types;

5. errors;

6. traffic sources;

7. conversion activity;

8. platform performance.

Where analytics involve non-essential cookies or similar technologies, we will seek consent where required.

21. Fraud Prevention and Platform Safety

We may process personal information to detect, prevent and respond to:

1. fake accounts;

2. stolen payment methods;

3. chargeback abuse;

4. phishing;

5. scams;

6. bots;

7. spam;

8. account takeover;

9. prohibited content;

10. payment circumvention;

11. identity abuse;

12. sanctions concerns;

13. suspicious activity;

14. platform abuse.

This may involve automated checks, manual review, third-party fraud tools, payment processor signals and internal risk reviews.

22. Automated Decision-Making

We may use automated tools to assist with fraud detection, security, spam prevention, content moderation, risk scoring, verification, recommendations or platform integrity.

Where automated tools are used, they may help us identify:

1. suspicious payments;

2. fake accounts;

3. harmful content;

4. policy violations;

5. unusual login activity;

6. potential fraud;

7. unsafe links;

8. platform misuse.

Important decisions may involve human review where required or appropriate.

If a decision significantly affects you and is based solely on automated processing, you may have rights under data protection law.

23. Sharing Personal Information

We may share personal information with trusted third parties where necessary to operate Fandations, comply with law, protect users, or provide services.

These may include:

1. hosting providers;

2. cloud storage providers;

3. payment processors;

4. payout providers;

5. identity verification providers;

6. fraud prevention providers;

7. tax reporting providers;

8. analytics providers;

9. email and communication providers;

10. customer support providers;

11. moderation tools;

12. security providers;

13. professional advisers;

14. insurers;

15. regulators;

16. tax authorities;

17. courts;

18. law enforcement;

19. business transfer parties.

Where third-party service providers act as processors, we aim to ensure that appropriate contracts and safeguards are in place.

The ICO notes that Article 28 of the UK GDPR requires controller-processor arrangements to include written contracts and security guarantees. (ICO)

24. Payment Providers

Payments may be processed by third-party payment processors such as Stripe, PayPal or other providers.

Payment providers may process your information independently under their own privacy notices, especially where they are responsible for payment compliance, fraud prevention, payment security, sanctions screening or legal obligations.

You should review the privacy policies of the payment provider used at checkout.

25. Identity Verification Providers

Where creator verification, age checks, fraud checks or payout compliance checks are required, we may share information with identity verification providers.

These providers may process identity documents, biometric checks, liveness checks, address information, fraud signals or verification results.

Verification may be required before certain features or payouts are available.

26. Tax Authorities and Legal Reporting

We may share creator, seller, payout, transaction and tax information with HMRC or other tax authorities where required by law.

We may also retain records of information submitted to HMRC or other authorities.

HMRC guidance states that platform operators must keep records of information sent when submitting digital platform reports. (GOV.UK)

27. Law Enforcement, Regulators and Safety Requests

We may share information where we believe it is necessary to:

1. comply with law;

2. respond to legal process;

3. cooperate with regulators;

4. respond to court orders;

5. respond to tax authorities;

6. respond to law enforcement;

7. protect users;

8. prevent fraud;

9. investigate illegal content;

10. protect Fandations’ rights;

11. enforce our terms;

12. respond to emergencies.

We may preserve information where required or where we reasonably believe it may be relevant to a legal, safety, tax, fraud or regulatory matter.

28. Business Transfers

If Fandations is involved in a merger, acquisition, investment, restructuring, sale of assets, financing, insolvency process or transfer of business, personal information may be transferred as part of that transaction.

Where required, we will take appropriate steps to protect personal information.

29. International Transfers

Fandations is based in the United Kingdom.

Some of our service providers may process personal information outside the UK.

Where personal information is transferred outside the UK, we will take steps designed to ensure appropriate safeguards are in place, such as:

1. adequacy regulations;

2. international data transfer agreements;

3. standard contractual clauses;

4. transfer risk assessments;

5. other lawful transfer mechanisms.

30. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

1. account status;

2. legal requirements;

3. tax requirements;

4. payment records;

5. payout records;

6. fraud prevention;

7. chargebacks;

8. refunds;

9. disputes;

10. moderation records;

11. safety investigations;

12. platform security;

13. backup cycles;

14. user requests;

15. legitimate business needs.

Examples:

1. account data may be kept while your account is active;

2. transaction records may be kept for accounting, tax, refund and dispute purposes;

3. creator verification records may be kept for compliance, fraud prevention and payout purposes;

4. moderation records may be kept to enforce policies and handle repeat violations;

5. security logs may be kept to protect the platform;

6. deleted content may remain in backups for a limited period;

7. legal hold information may be kept for as long as required.

31. Account Deletion

You may request deletion of your account.

When you delete or request deletion of your account, we may remove or anonymise information where appropriate.

However, we may retain information where necessary for:

1. legal obligations;

2. tax reporting;

3. accounting;

4. payment records;

5. refunds;

6. chargebacks;

7. creator payouts;

8. fraud prevention;

9. safety investigations;

10. moderation records;

11. disputes;

12. legal claims;

13. law enforcement requests;

14. backup retention;

15. legitimate business purposes.

Public content, comments, messages or content purchased by users may not always be fully removed, depending on the platform feature, legal requirements and applicable terms.

32. Your Data Protection Rights

Depending on your location and the circumstances, you may have rights under data protection law.

These may include the right to:

1. access your personal information;

2. correct inaccurate personal information;

3. request deletion of personal information;

4. restrict processing;

5. object to processing;

6. withdraw consent;

7. request data portability;

8. complain to a supervisory authority;

9. challenge certain automated decisions.

The ICO explains that individuals generally have rights over their data and that organisations handling personal data must comply with those rights unless an exception applies. (ICO)

To exercise your rights, contact us at:

hello@fandations.com

We may need to verify your identity before responding.

Some rights are not absolute and may be subject to exemptions, legal obligations or competing rights.

33. Complaints

If you have a concern about how we handle your personal information, please contact us first:

hello@fandations.com

You also have the right to complain to the UK Information Commissioner’s Office.

You can find more information from the ICO at its official website.

34. Security

We use reasonable technical and organisational measures designed to protect personal information.

These may include:

1. access controls;

2. authentication controls;

3. encryption where appropriate;

4. secure hosting;

5. monitoring;

6. logging;

7. backups;

8. staff or contractor access limits;

9. fraud prevention tools;

10. moderation systems;

11. security reviews.

No system is completely secure.

You are responsible for keeping your account credentials safe and notifying us promptly if you suspect unauthorised access.

35. Children and Minors

Fandations is intended for users aged 18 or over.

We do not knowingly allow children to create accounts or use Fandations.

If we become aware that a user is under 18, we may suspend or delete the account, remove content, cancel access, restrict features, withhold payouts where appropriate, and take other steps required by law or policy.

If you believe a child has provided personal information to Fandations, contact us at:

hello@fandations.com

36. User-Generated Content and Public Areas

Fandations may include public or semi-public areas, including profiles, posts, communities, comments, creator pages and content previews.

Information you choose to post may be visible to other users.

You should not post personal information that you do not want others to see.

You must not post another person’s personal information without permission.

We may remove content that breaches our Terms, Privacy Policy, Community Guidelines, Prohibited Content Policy or applicable law.

37. Direct Messages and Private Areas

Some platform areas may appear private, such as direct messages, paid communities or subscriber-only content.

However, such areas may still be processed by Fandations for:

1. technical delivery;

2. security;

3. moderation;

4. abuse reports;

5. fraud prevention;

6. legal compliance;

7. customer support;

8. platform enforcement.

You should not assume that any platform feature is suitable for sharing highly sensitive information unless we expressly state that it is.

38. Do Not Track

Some browsers offer a “Do Not Track” signal.

There is no consistent industry standard for responding to Do Not Track signals, so Fandations may not respond to such signals.

You can manage cookies and tracking through our cookie tools, browser settings and device settings where available.

39. External Links

Fandations may contain links to third-party websites, apps, communities, downloads, payment pages or services.

We are not responsible for the privacy practices, content or security of third-party services.

You should review the privacy policies of third-party services before using them.

40. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made to reflect:

1. platform updates;

2. new features;

3. legal changes;

4. regulatory guidance;

5. new service providers;

6. changes to our data practices;

7. security, fraud or safety needs.

Where changes are material, we may notify you by email, account notice, platform notice or other reasonable method.

The updated Privacy Policy will apply from the date stated at the top of the page.

41. Contact Us

If you have questions about this Privacy Policy or want to exercise your data protection rights, contact us at:

Fandations Ltd
41 Norman Avenue
London
N22 5ES
United Kingdom

Email: hello@fandations.com