Privacy Policy
Last updated: May 2026
This Privacy Policy explains how EFG Group Ltd, operator of Fanzum, processes personal data when you use the platform. EFG Group Ltd is the data controller.
What we collect
- Account data: name, email, password hash, profile photo, role (fan or athlete).
- Athlete data: bio, sport, location, social handles, payout bank details (held securely for manual payouts).
- Payment data: transaction amounts and references. Card details are handled by our payment processor and never stored by Fanzum.
- Content you post: posts, messages, product listings, images.
- Technical data: IP address, device, browser, log files for security and abuse prevention.
How we use it
- To operate Fanzum: authentication, memberships, payments, messaging, shop, notifications.
- To act as Merchant of Record: invoicing, accounting, tax, refunds, fraud prevention.
- To pay athletes manually after review.
- To improve the product and prevent abuse.
Sharing
We share data with our payment processor, hosting and email providers, and authorities when required by law. We do not sell personal data.
Retention
We keep transaction and tax records for up to 7 years. Other data is kept while your account is active.
Your rights
You may request access, correction, deletion or export of your data, subject to legal retention requirements. Contact us via the Contact page.
Cookies
We use strictly necessary cookies for authentication and session management.