Privacy Policy

The data controller for FanMagnet.org is Mutlu Yasam LTD, a company registered in England & Wales, with its office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

For any privacy request, contact privacy@fanmagnet.org.

• Your email address, for order updates and support replies.
• The public handle, URL, post link or track ID you enter.
• Order metadata (items, quantities, price, timestamps, status).
• Support ticket content and chatbot conversation transcripts.
• Technical data (IP address, user agent, referrer) for security and analytics.
• Cookies as described in our Cookie Policy.

• Contract — to process and deliver your order and reply to support requests.
• Legal obligation — to keep accounting records and respond to lawful requests.
• Legitimate interest — fraud prevention, service improvement, security.
• Consent — analytics cookies and any optional marketing communications.

We share the minimum data necessary with the following categories of processor:

• Hosting and database infrastructure (Lovable Cloud).
• Transactional email provider (Resend or equivalent).
• Payment processors (planned: Payzink, Big-Pay) — they receive only what is needed to process the transaction.
• Fulfilment providers on our vetted network — they receive only the public URL or handle for your order.

We do not sell your personal data and we do not share it with advertising networks.

Some of our processors are based outside the UK/EEA. Where we transfer personal data internationally, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, as applicable.

• Order records: 6 years, to satisfy UK accounting requirements.
• Support tickets: 12 months, then anonymised.
• Chatbot conversation logs: 30 days.
• Email delivery logs: 90 days.
• Analytics: aggregated data may be kept indefinitely; personal identifiers are removed within 26 months.

Under the UK GDPR and the EU GDPR (where applicable), you have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your personal data. To exercise any right, email privacy@fanmagnet.org. We respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or with your local supervisory authority in the EEA.

We use strictly necessary, functional and (with consent) analytics cookies. See our Cookie Policy for the full list and how to opt out.

FanMagnet.org is not directed to children under 18 and we do not knowingly collect data from them. If you believe a minor has provided personal data, contact privacy@fanmagnet.org and we will delete it.

We use TLS in transit, encryption at rest for sensitive fields, principle-of-least-privilege access controls, and continuous logging. No system is 100% secure, so please protect your order link and contact us immediately at support@fanmagnet.org if you suspect misuse.

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page and reflected in the "Last updated" date below.