Privacy Policy

Last updated: 11 October 2026

This notice explains what personal information FanBound collects about you, why we collect it, who we share it with and what your rights are. It applies to this website (fanbound.co.uk), our enquiry form, our products, the storefronts we run for creators and our work with creators, including FanBound - Signature.

1. Who we are

FanBound is the trading name of Mr Jake T. Sutton, a sole trader based in Wales, United Kingdom. We are the data controller for the personal information described in this notice, and we are registered with the Information Commissioner's Office (ICO). If you have any questions about this notice, or want to use any of your rights, contact us:

Address: 95B Pontmorlais, Merthyr Tydfil, CF47 8UH, United Kingdom
Email: [email protected]
Phone: 07378 570833

2. What we collect

• Enquiries. What you tell us through our enquiry form (a Google Form): your name, email address, phone number, Instagram handle, content niche, follower count(s) and any product ideas or preferences.
• Messages. Anything you send us by email, phone or social media, and our replies.
• Creator projects. If we work together, the details needed for your Creator agreement or Signature agreement (such as your name, address and Whop username), the photos, videos, voice notes and other content you supply for your product, and records of sales, members and revenue-split payouts.
• Calls. If we have a video call, including Signature kick-off, handover and monthly strategy meetings, we take notes and may record or transcribe it using Google Meet. We will tell you at the start of the call if it is being recorded.
• Questionnaires. Your answers to questionnaires we send you, for example to make a custom guide or plan your Signature product, and the short check-in questions before each Signature strategy meeting.
• Subscriptions. If you subscribe to Signature, the details of your plan, payments, renewals and cancellations.
• Waitlists. If you join a waitlist on Whop, the name and email address you give and which waitlist you joined.
• AI likeness. Only if you give your separate written consent: the photos, video and voice recordings we use to create AI-generated content in your likeness or voice, and the content created from them.
• Customer purchases. When you buy one of our products, or a product from a storefront we run for a creator, your name, email address, your country, state and city, what you bought and your access to it. Payments are handled by Whop, so we do not see or store your full card details.
• Testimonials and examples of our work. If you agree, your name, Instagram handle, your words and images of the product we made with you, to show on our website.
• Technical data. Our website host records standard server information, such as your IP address and browser type, to keep the site running securely.

3. Where we get it from

We get most of your information directly from you. When you buy a product, join a waitlist or subscribe, we also receive the details from Whop. When you book a call, we receive your booking details through Google Calendar.

4. Why we use it, and our lawful basis

Under UK data protection law, we must have a "lawful basis" for using your personal information. Here is what we use it for and the basis we rely on.

• To provide our services and products, including creating and selling a product with you, delivering products you buy, and splitting revenue.
  Lawful basis: contract, because we need the information to enter into or carry out a contract with you; and legal obligation, where the law requires us to keep it.
• To provide Signature, including building your product, running your storefront, taking your monthly subscription through Whop and delivering your monthly strategy meetings and content.
  Lawful basis: contract.
• To run customer and creator accounts, including keeping records of purchases, subscriptions, product access and revenue-split payouts, and sorting out problems such as refunds or failed downloads.
  Lawful basis: contract, legal obligation (for example, tax records) and legitimate interests. Our legitimate interest is running the business properly and keeping accurate records. People would reasonably expect a business they buy from or work with to keep these records. We keep only what we need and do not use it for anything unrelated.
• To deal with enquiries, questions, complaints and claims, and to keep a record in case of a dispute.
  Lawful basis: legitimate interests, because you would expect us to use the details you send us to reply and to resolve any issue; contract, where your query relates to work or a purchase; and legal obligation, where the law requires it. We use only the information you choose to send us, and only to deal with your query.
• To keep a record of what we agree on calls, using our notes and any recordings or transcripts.
  Lawful basis: legitimate interests. An accurate record of what was discussed and agreed protects both of us if there is ever a disagreement. We only use recordings and transcripts for this, and we keep them secure.
• To create products and custom guides, including using software and AI tools to help draft and design them from your questionnaire answers and the content you supply. We review everything before it is sent to you or sold.
  Lawful basis: contract, because this is how we deliver the work you have asked for.
• To create AI content in your likeness or voice, only if you have given your separate written consent. Your followers are always told when AI is used.
  Lawful basis: consent. If this involves processing your face or voice in a way that counts as special category (biometric) data, we rely on your explicit consent. You can withdraw it at any time by emailing us. We then stop creating new AI content of you and remove existing AI content of you from your product within 30 days.
• To show testimonials and examples of our work on our website.
  Lawful basis: consent. You can withdraw it at any time and we will remove it within 14 days.
• To send service updates, such as when your product or guide is ready, or when something changes that affects your account, purchase, subscription or payout.
  Lawful basis: contract and legitimate interests, so you get what you signed up for or bought.
• To send marketing. See section 5.

5. Marketing

If you have bought from us or worked with us, we may email you about similar FanBound products, as long as you did not opt out when you gave us your details. We rely on legitimate interests for this. For anyone else, we only send marketing with your consent.

If we contact you as a creator because you run a public business account, we use only your public business details, tell you where we got them and include an easy way to opt out.

Every marketing email includes an easy way to unsubscribe, and you can opt out at any time by emailing us. We never sell your details or share them with anyone else for their marketing.

6. Who we share it with

We do not sell your personal information. We share it only with the services we use to run the business, who process it on our behalf:

• Google: our email (Gmail), our enquiry form (Google Forms), the spreadsheets where we keep our client list (Google Sheets), and file storage for photos and documents (Google Drive), including a private upload folder for each Signature creator that only FanBound can access. This site also loads fonts from Google, which means your IP address is visible to Google when a page loads.
• Whop: the platform where products are sold, payments and subscriptions are taken, waitlists are run and revenue is split.
• Google Meet: video calls, and any recordings or transcripts.
• Google Calendar: booking calls with us.
• DocuSeal: sending and signing Creator and Signature agreements electronically.
• AI tools, such as Anthropic's Claude and Higgsfield: to help us draft and design products, guides and graphics, and, only with your separate written consent, to create content in your likeness or voice.
• Cloudflare: our website host.

We may also share information where the law requires it, for example with HMRC, or with professional advisers such as an accountant.

7. Transfers outside the UK

Some of these services, including Google, Whop, Cloudflare and our AI tools, are based in or use servers outside the UK, such as in the United States. Where your information is transferred outside the UK, it is protected by the safeguards required by UK data protection law, such as the UK–US data bridge or the UK's approved data transfer agreements.

8. How long we keep it

• Enquiries that do not become projects: 12 months from your last contact with us.
• Creator and customer records (agreements, purchases, subscriptions, payouts and related messages): at least 5 years after the 31 January Self Assessment deadline for the tax year they relate to, as HMRC requires.
• Call transcripts and recordings: until 6 years after your Creator or Signature agreement ends, in case of a dispute about what was agreed.
• Photos, videos and voice notes you supply: we delete our copies within 30 days of the later of your agreement ending and the end of any access that existing buyers have already paid for. Copies already delivered to buyers, and any examples you have agreed we can keep showing, are not affected. Your original files are always yours.
• AI likeness material and content: deleted within 30 days of you withdrawing consent or your Signature agreement ending, whichever comes first.
• Questionnaire and check-in answers: 12 months after we deliver your guide or product, or, for Signature, 12 months after your Signature agreement ends, or longer if you ask us to keep them.
• Waitlist details: until you join, ask to be removed, or 12 months after you joined the waitlist, whichever comes first.
• Testimonials and examples of our work: until you withdraw your consent.
• Marketing contacts: until you unsubscribe.
• Complaints and claims: 6 years after the matter is closed, in case of a legal claim.

After these periods, we securely delete the information.

9. Keeping it secure

Your files are stored in accounts that only FanBound can access. Please send photos and files through the private upload folder we give you, not through chat apps or social media messages.

10. Cookies

This site does not use advertising or analytics cookies. If that changes, we will update this notice and ask for your consent first.

11. Your rights

Under UK data protection law, you have the right to:

• Access: ask for a copy of the personal information we hold about you.
• Rectification: ask us to correct information that is wrong or incomplete.
• Erasure: ask us to delete your information.
• Restriction: ask us to limit how we use your information.
• Objection: object to us using your information where we rely on legitimate interests, and to stop marketing at any time.
• Portability: ask us to transfer information you gave us to you or another organisation.
• Withdraw consent: where we rely on your consent, such as for AI likeness or testimonials, withdraw it at any time.

Some rights depend on the lawful basis we rely on. For example, we cannot delete records we are legally required to keep. To make a request, contact us using the details in section 1. We will respond without undue delay, and within one month at the latest. Making a request is free.

12. How to complain

If you have any concerns about how we use your personal information, please contact us first at [email protected] or on 07378 570833. We will acknowledge your complaint within 30 days, look into it and tell you the outcome.

If you are still unhappy, you can complain to the Information Commissioner's Office (ICO):

ICO Head Office
4th Floor, No.3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

13. Changes to this notice

If we change how we handle your information, we will update this page and the date at the top. If the change is significant, we will let our existing clients know by email.