Epic Elite Ltd ("we", "our", "us") operates fanb.ee (the "Website"). This Privacy Policy explains how we collect, use, and protect information in connection with our link shortener service, newsletter subscriptions, and pre-save features.
We provide services both to artists/creators (who use our platform to share links and run campaigns) and to fans/users (who click those links, subscribe, or use pre-save features).
We are committed to protecting your privacy and complying with data protection laws, including the UK GDPR, the EU GDPR, and other international standards where applicable.
1. Information We Collect
1.1. For Artists/Creators
When you use our services, we may collect:
- Contact details: email address, first and last name
- Social media details: Instagram handle (if provided)
- Location (if provided)
- Device and technical details (IP address, browser, operating system)
- Tracking codes associated with campaigns and links you create
- Payment details (if applicable for subscription/paid services)
1.2. For Fans/Users
When you click on a link, subscribe, or use pre-save features, we may collect:
- Email address, first and last name (if you sign up for a newsletter)
- Social media details (e.g., Instagram handle, if provided)
- Location (approximate, based on IP address or input)
- Device and technical details (IP address, browser, operating system, referral source, timestamps)
- Tracking codes (e.g., UTM codes, referral tags)
- Streaming account identifiers and authorization tokens (only when you use pre-save features and only as required by the streaming platform)
2. How We Use Information
For Artists/Creators
We use artist data to:
- Provide the link shortener and related services
- Enable analytics and reporting on link performance
- Communicate about service updates, billing, or support
- Improve and secure our platform
- Send marketing communications (if you consent)
For Fans/Users
We use fan data to:
- Deliver the requested service (e.g., completing a pre-save action, subscribing to a newsletter, showing artist content)
- Share your details with the artist you have chosen to interact with (e.g., passing along your email or Instagram handle if you subscribe through their link)
- Improve our services and analyze campaign performance
- Protect against fraud and abuse
3. Our Role in Data Processing
We act as both a Data Controller and a Data Processor, depending on the situation:
When We Are a Controller
We are a Controller when we determine the purposes and means of processing personal data. This includes:
- Collecting and using analytics about link clicks, devices, location, and tracking codes
- Processing artist account details to operate and improve our services
- Using fan or artist data for security, fraud prevention, and service development
- Managing our own marketing lists (if you sign up to receive updates from us)
When We Are a Processor
We are a Processor when we handle personal data on behalf of an artist/creator, such as:
- Collecting fan details (email, Instagram handle, name, location) through an artist's link page
- Managing newsletter sign-ups or pre-save actions on behalf of an artist
- Delivering fan information to the relevant artist
In these cases, the artist is the Controller and is responsible for ensuring fan data is collected lawfully (e.g., by obtaining consent). We only process that data according to the artist's instructions.
Summary
Artists/Creators → Data Controllers for fan data they collect via our service.
We (the platform) → Data Processor for fan data on behalf of artists, and Data Controller for our own analytics, security, and service operations.
Fans/Users → Data Subjects with rights under applicable data protection laws.
4. Legal Basis for Processing
We process personal data under the following bases:
- Consent: For newsletters, pre-save features, and marketing
- Contract: To provide services to artists/creators
- Legitimate Interests: To ensure security, prevent abuse, analyze service use, and improve functionality
- Legal Obligation: To comply with laws and regulations
5. Sharing of Information
We do not sell personal data. We may share information with:
- Artists/Creators: If you are a fan and interact with an artist's campaign, your details may be shared with that artist
- Service Providers: Email delivery services, analytics platforms, hosting partners, and payment processors
- Music Platforms: Spotify, Apple Music, or others, solely to complete pre-save actions with your consent
- Legal Authorities: If required by law or to protect rights and safety
6. Cookies and Tracking Technologies
We use cookies and similar technologies to operate our services and improve user experience.
- Essential Cookies: Required for site functionality (e.g., managing preferences, enabling secure login)
- Analytics Cookies: Help us understand site usage and improve services
- Marketing Cookies: Measure campaign performance and deliver relevant content
In the UK/EU, we request your consent for non-essential cookies via a cookie banner. You can disable cookies in your browser at any time.
7. International Data Transfers
Your data may be transferred outside the UK/EEA. Where this occurs, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place.
8. Data Retention
Artists' account details: Kept as long as your account is active
Fans' newsletter or pre-save data: Retained until you unsubscribe, revoke consent, or request deletion
Analytics and tracking data: Retained as long as necessary for service operation, security, and reporting
9. Your Rights
Depending on your location, you may have rights including:
- Access: Request a copy of your personal data
- Correction: Fix inaccurate or incomplete information
- Deletion: Request erasure of your personal data
- Withdrawal of Consent: Unsubscribe from emails or revoke pre-save permissions
- Portability: Request a portable copy of your data
- Objection/Restriction: Object to or restrict certain types of processing
To exercise your rights, contact us at: [email protected]
10. Children's Privacy
Our services are not directed to children under 13 (or 16 where applicable). We do not knowingly collect personal data from children.
11. Security
We implement appropriate technical and organisational measures to protect personal data. However, no system is completely secure.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted here with a revised "Last Updated" date.
13. Contact Us
If you have any questions about this Privacy Policy or your data, please contact us at: [email protected]