Privacy Policy

Last updated: 2025-05-21

Effective Date: May 2025

This Privacy Policy explains how THE BORED CANDY CITY LTD ("we", "us", or "our") collects, uses, shares, and protects your personal data when you use DecentraFans ("Platform"). We are registered in England and Wales (Company No. 14725594) and are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and other relevant data protection laws.

1. WHAT DATA WE COLLECT

We collect the following categories of data:

1.1 Account Data

  • Email address

  • Username

  • Password (hashed)

  • Country of residence

1.2 Profile and Content Data

  • Photos, videos, audio, text, and metadata you upload

  • Profile descriptions and preferences

  • Interactions between Creators and Fans

1.3 Payment and Transaction Data

  • Billing details (via third-party processors)

  • Cryptocurrency wallet addresses (where provided)

  • Transaction history (including crypto and fiat)

  • Subscription, tip, and payout information

1.4 Identity and Verification Data

  • Government-issued ID (for Creators)

  • Date of birth and facial verification photos

  • VAT registration number (if applicable)

1.5 Usage and Technical Data

  • Device identifiers

  • Browser and operating system information

  • IP address and geolocation

  • Access logs and session activity



2. HOW WE USE YOUR DATA

We process your personal data for the following purposes:

  • To operate and maintain your account

  • To provide platform features such as subscriptions and messaging

  • To verify your identity and ensure compliance with legal obligations

  • To process payments and issue Creator payouts

  • To enable and manage cryptocurrency-based transactions and payouts

  • To facilitate anti-fraud, anti-money laundering (AML), and compliance checks on wallet-related activity

  • To comply with blockchain transaction reporting obligations, where applicable

  • To detect and prevent fraud or misuse

  • To provide support and respond to inquiries

  • To analyse platform usage and improve performance

  • To comply with our legal and tax obligations

 

3. LAWFUL BASIS FOR PROCESSING

We rely on the following lawful bases under the UK GDPR:

  • Contractual necessity: to provide services under our Terms of Use

  • Legal obligation: to comply with tax, identity, and safety laws

  • Legitimate interests: to improve services and prevent abuse

  • Consent: where required, e.g., for marketing communications

 

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

  • Keep you signed in

  • Remember your preferences

  • Analyse site usage and performance

You can manage your cookie preferences through your browser settings.

 

5. SHARING YOUR DATA

We may share your data with:

  • Third-party payment processors (e.g., Stripe, PayPal)

  • Cryptocurrency payment gateways and custodial payout partners

  • Identity verification services

  • Cloud storage and hosting providers

  • Law enforcement or regulators where legally required

  • Blockchain monitoring or compliance services

  • Our subsidiaries or affiliates within our group

We do not sell your data to third parties.

 

6. INTERNATIONAL TRANSFERS

Your data may be transferred to and stored in countries outside the UK. Where we do so, we ensure appropriate safeguards are in place (e.g., standard contractual clauses or adequacy decisions).

Please note that some crypto-related data, such as blockchain transactions, may be publicly visible due to the decentralised nature of blockchains. While this data is not directly linked to personal identities, users should be aware that wallet activity may be searchable on-chain.

 

7. DATA RETENTION

We retain your personal data for as long as necessary:

  • To provide you with the Platform services

  • To comply with legal and tax requirements

  • To resolve disputes and enforce agreements

Account data may be retained for up to 6 years after account closure, unless a shorter period is mandated by law.

 

8. YOUR RIGHTS

Under the UK GDPR and similar laws, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Data portability (where applicable)

  • Withdraw consent (where consent is the basis)

  • Lodge a complaint with the UK Information Commissioner's Office (ICO)

If you provide a cryptocurrency wallet address, please ensure that it is under your control. We are not responsible for the security of external wallets or for loss of access due to forgotten keys or credentials.

To exercise any rights, contact us at: [email protected]

 

9. CHILDREN'S PRIVACY

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect data from children. If we become aware of such data, we will delete it.

 

10. CONTACT US

For any privacy-related inquiries, contact:

Data Protection Officer
THE BORED CANDY CITY LTD
1 Poulton Close, Dover, Kent, CT17 0HL, United Kingdom
Email: [email protected]