Privacy Policy
This Privacy Policy explains how FANOUZ handles information submitted on the pre-launch website, why it is used, who may receive it, how long it is kept, and how you may exercise your rights.
Last updated: 3 November 2026 · Scope: FANOUZ.COM pre-launch website and early-access / privacy forms. This notice does not yet describe a released social app; its actual data practices must be confirmed before app submission.
1. Who is responsible for your data?
The responsible organisation or individual (the controller) is the operator identified above once completed. You can contact our privacy team through the public contact and rights form or account/data-deletion request page. A data protection officer or UK/EU representative will be identified here if legally required.
2. Information we collect today
- Early access: name, email address and/or mobile number, country or region, selected audience type (Creator, Fan or Business), optional talent category, company name, professional role and partnership preference.
- Communication choices: separate opt-in records for promotional email and SMS, plus the time of submission and indication that the privacy notice was presented.
- Privacy requests: contact details, request type, the text you submit, and steps taken to verify and resolve a request.
- Technical data: the hosting provider may process IP addresses, request logs, timestamps, user agent and security signals needed to serve and protect the site.
- Preferences: language selection is stored locally in your browser. We do not use advertising pixels, behavioural analytics or profiling on this launch website.
We do not collect payment-card details, identity documents, bank details, social-media content, location tracking, personal contacts, microphone or camera recordings on this pre-launch website. The future social application may process additional data; this policy must be updated before those services begin.
3. Why we use information and lawful bases
| Purpose | Legal basis where UK/EU GDPR applies |
|---|---|
| Handle your request to join early access, respond, manage business partnership enquiries | Legitimate interests in processing voluntary requests and preparing a launch (subject to a balancing test); steps taken at your request where applicable. |
| Send optional promotional emails | Your separate, withdrawable consent; subject to applicable electronic-marketing law. |
| Send optional marketing text messages | Your separate, withdrawable consent; subject to applicable electronic-marketing law. |
| Protect site security, investigate abuse, maintain necessary records and comply with valid legal obligations | Legitimate interests and/or compliance with legal obligations, as applicable. |
| Respond to privacy rights and deletion requests | Compliance with legal obligations or legitimate interests in administering requests, as applicable. |
Marketing consent is not a condition of joining the list. We do not use your telephone number for promotional SMS unless you actively opt in to that channel. We do not sell your contact details to advertisers or brands.
4. How information is obtained
Most information comes directly from your forms. The selected hosting provider also records limited technical information generated when your browser requests the site. If you choose not to supply an email address or phone number, we cannot contact you about early access or resolve certain enquiries.
5. Who receives the information?
Authorised FANOUZ personnel and contracted service providers necessary to operate the website and manage requests may access the minimum required data. This privacy microsite is hosted through ChatGPT Sites on Cloudflare infrastructure. Privacy and deletion submissions are stored in a private Cloudflare R2 bucket and can be accessed through an owner-restricted inbox. These requests are not automatically forwarded by email. No app passwords or identity documents should be submitted. We do not disclose subscriber lists to partner brands for their own marketing. We may disclose information where a valid law or legal process requires it, or with your explicit instruction.
Before launch: Confirm the operator’s hosting account, processing terms, subprocessor list, storage location, service integrations and access permissions. If a different hosting/email platform is used, amend this notice to reflect actual recipients.
6. International data transfers
We intend to serve an international audience. Hosting and administration may involve processing outside the UK or European Economic Area. Where UK or EU data protection law applies, transfers requiring protection must use an applicable adequacy mechanism, approved contractual clauses or another lawful safeguard. Specific transfer countries, recipient organisations and the legal safeguard used must be confirmed from the actual hosting and processor arrangements before launch. You may request details through our contact form.
7. Storage, retention and deletion
The proposed operational retention schedule is:
- Early-access enquiries: delete or re-confirm continued interest within 12 months of the last meaningful interaction, or within six months after the launch campaign ends, whichever is earlier, unless a longer justified period is required.
- Promotional subscriptions: retain only while you remain subscribed and FANOUZ sends lawful updates; delete active promotional contact data when you unsubscribe, subject to limited suppression records.
- Privacy request records: ordinarily retain for up to 24 months after closure, where justified to demonstrate compliance or manage disputes.
- Security and hosting logs: according to the hosting provider's documented, necessary schedule; this must be verified at deployment.
- Legally required records: retain only the information and period required by applicable tax, accounting, legal-claim, security or anti-fraud law.
These periods are a proposed policy for FANOUZ operations, not proof that a hosting platform automatically applies them. The operator must implement and document the actual deletion schedule.
8. How we protect data
The deployment is designed for HTTPS, restricted administrator access, no third-party tracking scripts, anti-spam controls and a restrictive content-security policy. Actual security depends on correct hosting configuration, account access controls, supplier contracts, staff procedures, backups and monitoring. No Internet system is completely risk-free. We do not request passwords or financial information through these forms.
9. Your choices and privacy rights
Depending on your residence and applicable law, you may have rights to request access, correction, erasure, restriction, data portability, to object to processing, and to withdraw consent. You may also complain to a regulator or appeal certain decisions where local law provides. Requests are made at no charge in most cases using the privacy contact form or deletion page. We may ask you to verify control of the email or phone number associated with your request; do not send government identity documents unless explicitly and securely requested.
Where the UK/EU GDPR applies we aim to respond without undue delay and normally within one month, subject to permitted extensions. Withdrawal of consent does not affect lawful processing carried out before withdrawal. Deletion rights are not absolute; some records may need to be retained for legal reasons.
10. Region-specific information
UK: you may complain to the Information Commissioner's Office.
EU/EEA: where GDPR applies you may complain to your competent supervisory authority. The controller must assess whether an EU representative is required before actively targeting EU users.
United States, including California: if relevant US state privacy laws apply, you may have rights to know/access, delete, correct or opt out of certain disclosures or targeted advertising. This pre-launch site does not sell contact information or run targeted advertising trackers. Requests can be submitted through the public forms; we will not discriminate for exercising applicable rights.
Brazil, Canada, Australia and other territories: applicable law may provide additional access, correction, deletion, complaint or consent rights. Our public request forms are available regardless of where you live; local rights are assessed according to the applicable rules.
No privacy policy can automatically establish legal compliance in every country. Before regional launches, FANOUZ must review any local registration, children's privacy, electronic marketing, representative and international transfer requirements.
11. Children
The early-access list is intended for people aged 18 or over. We ask registrants to confirm this and do not knowingly seek children's data. If we learn that a minor submitted data, contact us for prompt review and deletion. The future social app requires a separate safeguarding and age-appropriate design assessment before allowing younger users.
12. Cookies and local storage
This site does not currently load third-party advertising or analytics scripts. A browser local-storage preference remembers your selected display language. Hosting providers may set or require strictly necessary technical measures. Details are on the Cookies & Storage page. If future tracking or non-essential cookies are enabled, a valid consent system will be required where law demands.
13. Automated decisions and changes
We do not currently make solely automated decisions with significant legal or similar effects based on your early-access data. We may update this policy if our services, partners, international footprint or data practices change. Material changes will be communicated where required.
14. Privacy contact
Use the public contact form to raise privacy enquiries, withdraw marketing permission or exercise rights; for erasure, use Account Deletion. These are public pages and require no FANOUZ account.