Privacy Policy

Last Updated: 7 October 2025

1. Introduction

Welcome to fanlens ("we", "our", "us"). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services at fanlens.com (the "Platform"). This policy applies to all users of the Platform.

fanlens is operated from Manchester, England, and is subject to UK data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide Directly

When you use fanlens, we may collect:

• Account information (name, email address, username, password)
• Profile information (preferences, favourite teams, saved content)
• User-generated content (comments, uploaded media, shared content)
• Communication data (messages, support enquiries, feedback)
• Payment information (processed securely through third-party payment providers)

2.2 Information Collected Automatically

When you access the Platform, we automatically collect:

• Technical data (IP address, browser type, device information, operating system)
• Usage data (pages visited, time spent on pages, click patterns, search queries)
• Location data (general geographic location based on IP address)
• Cookie data (as described in our Cookie Policy below)

2.3 Information from Third Parties

We may receive information from:

• Social media platforms (if you connect your social media accounts or share content)
• Public sources (fan-captured content from Twitter, Instagram, Facebook related to football matches)
• Analytics providers (Google Analytics, Vercel Analytics)
• Payment processors (Stripe or similar payment service providers)
• Betting and bookmaking partners (if you click through to their services)

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Service Provision

• To create and manage your account
• To provide access to match content and media
• To enable content discovery and search functionality
• To process transactions and attribute sales to content creators
• To personalise your experience and show relevant content

3.2 Communication

• To send service-related notifications
• To respond to your enquiries and support requests
• To send marketing communications (with your consent)
• To notify you of platform updates and new features

3.3 Platform Improvement

• To analyse usage patterns and improve our services
• To conduct research and development
• To troubleshoot technical issues
• To test new features and functionality

3.4 Legal and Safety

• To comply with legal obligations
• To enforce our Terms of Use
• To protect against fraud and abuse
• To resolve disputes and investigate complaints

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Consent: When you have given explicit consent (e.g., marketing emails, social media integration)
• Contract: When processing is necessary to fulfil our contract with you (e.g., providing the Platform services)
• Legitimate Interests: When we have a legitimate business interest (e.g., improving our services, preventing fraud)
• Legal Obligation: When required by law (e.g., tax compliance, responding to legal requests)

5. Data Sharing and Disclosure

We may share your personal data with:

5.1 Service Providers

• Hosting and infrastructure providers (Vercel, Supabase)
• Analytics providers (Google Analytics)
• Payment processors (Stripe)
• Content delivery networks
• Customer support tools
• Betting and bookmaking partners (for commission tracking)

5.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner

5.3 Legal Requirements

• When required by law or legal process
• To protect our rights, property, or safety
• To prevent fraud or illegal activity
• In response to valid requests from public authorities

5.4 Content Creators

• Attribution data and sales information to enable creator compensation
• Aggregated performance metrics (without personally identifying you)

5.5 Betting Partners

• We share anonymised click data with betting and bookmaking partners when you click through to their services
• This enables us to receive commission for referrals
• We do not share personally identifiable information with betting partners unless you create an account directly with them

We do not sell your personal data to third parties.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office
• Adequacy decisions recognising equivalent data protection standards
• Privacy Shield frameworks (where applicable)

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal, accounting, or reporting obligations
• Resolve disputes and enforce our agreements

Specific retention periods:

• Account data: Until you close your account, then 30 days
• Transaction records: 7 years (for accounting and tax purposes)
• Marketing data: Until you withdraw consent, then 30 days
• Analytics data: 26 months (Google Analytics default)
• Legal records: As required by applicable law

You can request deletion of your data at any time (subject to legal retention requirements).

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

8.1 Access

Request copies of your personal data

8.2 Rectification

Correct inaccurate or incomplete data

8.3 Erasure ("Right to be Forgotten")

Request deletion of your personal data in certain circumstances

8.4 Restriction

Request restriction of processing in certain circumstances

8.5 Data Portability

Receive your data in a structured, machine-readable format

8.6 Object

Object to processing based on legitimate interests or for direct marketing

8.7 Withdraw Consent

Withdraw consent at any time (where processing is based on consent)

8.8 Automated Decision-Making

Not to be subject to automated decision-making, including profiling, that produces legal or significant effects

To exercise any of these rights, please contact us at privacy@fanlens.com.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

10. Children's Privacy

fanlens is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@fanlens.com, and we will delete such information.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable essential Platform functionality
• Remember your preferences and settings
• Analyse usage and performance
• Provide personalised content
• Deliver targeted advertising (with your consent)

11.1 Types of Cookies We Use

Strictly Necessary Cookies: Required for the Platform to function (e.g., session management, security)

Performance Cookies: Collect information about how you use the Platform (e.g., Google Analytics)

Functional Cookies: Remember your preferences and settings

Targeting Cookies: Used to deliver relevant advertising (only with your consent)

11.2 Managing Cookies

You can control cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality.

For more information about cookies, visit www.allaboutcookies.org.

12. Third-Party Links

The Platform may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on the Platform
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of the Platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Email: privacy@fanlens.com
Address: fanlens, Manchester, England, United Kingdom
Data Protection Officer: dpo@fanlens.com

15. Complaints

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF