Privacy policy

Who we are

PrimeFans is the trading name of Paylock Ltd, a company registered in England and Wales. When this policy refers to 'we', 'us', or 'PrimeFans', it means Paylock Ltd operating as PrimeFans.

PrimeFans is a creator monetization platform that enables independent creators to publish, distribute, and sell digital content directly to their audience. Paylock Ltd acts as the data controller for all personal data collected through the platform.

Who this policy applies to

This policy applies to everyone who interacts with the PrimeFans platform, including creators who publish and sell content, buyers who purchase access to content, and visitors who browse public pages without an account.

By using PrimeFans in any capacity, you acknowledge that you have read and understood this policy and that you consent to the collection and use of your information as described here. If you do not agree, you should not use the platform.

Personal data we collect

We collect different types of personal data depending on how you use the platform. We only collect what is necessary for the purposes described in this policy.

• Account information — your name, username, email address, and password (stored only as an irreversible hash). You may also add optional profile details such as a profile photo or bio.
• Identity and verification data — for creators who request payouts, we may collect government-issued identification, tax identification numbers, or other information required to verify your identity and comply with financial regulations and anti-money laundering obligations.
• Payment and transaction data — details of purchases made on the platform, amounts paid, payment method types (we do not store full card numbers), payout requests, payout statuses, invoice references, and the results of fraud-prevention checks.
• Usage and technical data — your IP address, browser type and version, operating system, device type, referral URLs, pages visited, session duration, and interactions with platform features.
• Communications — messages and requests you send to our support team, moderation reports you file, dispute submissions, and any other written correspondence you share with us.
• Security and audit logs — records of login events, account changes, and security-related activity that help us detect unauthorized access and maintain platform integrity.
• Cookies and tracking signals — information collected via cookies, pixels, and similar technologies when you visit the platform. See the Cookies section below for more detail.

Why we collect and how we use your data

We use personal data strictly for the purposes described below. We do not use your data for unrelated purposes without your separate consent.

• To create and manage your account, verify your identity where required, and provide you with access to the features and services relevant to your account type.
• To process purchases, generate receipts, deliver access to paid content, and handle payment disputes or chargebacks.
• To calculate, process, and deliver earnings and payouts to creators in accordance with the applicable commission structure.
• To detect and prevent fraud, money laundering, abuse, unauthorized access, and policy violations.
• To respond to your support requests, moderation reports, and dispute submissions in a timely and effective manner.
• To comply with applicable legal and regulatory obligations, including UK financial services rules, anti-money laundering requirements, tax reporting obligations, and law enforcement requests made under lawful authority.
• To communicate with you about your account, transactions, policy changes, and security matters. We do not send unsolicited marketing communications without your consent.
• To analyze platform usage patterns, identify bugs, and improve the performance and reliability of the service.

Legal bases for processing

Under UK GDPR and applicable data protection law, we process your personal data on the following legal bases:

• Performance of a contract — when processing is necessary to provide your account, complete purchases, deliver content access, or pay out creator earnings.
• Legal obligation — when we are required to collect or retain data to comply with UK financial regulation, anti-money laundering law, tax obligations, or enforceable legal orders.
• Legitimate interests — when processing is necessary for our legitimate business interests, such as fraud prevention, platform security, product improvement, and operational efficiency. We carry out balancing tests to ensure our interests do not override your rights.
• Consent — in specific situations where we ask for your explicit permission, such as optional analytics or marketing communications. You may withdraw consent at any time.

Sharing your data

We do not sell your personal data to third parties. We share information only when it is strictly necessary to operate the platform, fulfill your requests, or comply with legal obligations. All third-party providers we work with are required to handle your data securely and in accordance with applicable law.

• Payment processors and financial service providers — to authorize transactions, process payouts, and manage fraud prevention checks.
• Identity and KYC verification providers — to verify creator identity when required by financial regulations.
• Cloud hosting and infrastructure providers — to store, serve, and process platform data. These providers operate under data processing agreements and apply industry-standard security measures.
• Analytics and performance monitoring tools — to understand platform usage, identify errors, and improve the service. These tools process data in aggregated or anonymized form where possible.
• Legal, compliance, and professional advisers — when necessary for regulatory compliance, handling legal proceedings, or managing corporate operations.
• Law enforcement and government authorities — when we receive a lawful request, court order, or regulatory direction that requires us to disclose specific data. Where permitted, we will notify affected users before complying.
• Business transfers — in the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the acquiring entity. We will notify users and, where required, seek consent before any such transfer.

International data transfers

Paylock Ltd is based in the United Kingdom. Some of our third-party providers may be located in countries outside the UK or European Economic Area. Where personal data is transferred internationally, we take appropriate steps to ensure it receives equivalent protection, including the use of UK International Data Transfer Agreements, Standard Contractual Clauses, or other lawful transfer mechanisms.

If you have questions about where your data is processed or the safeguards in place, contact us at contact@primefans.com.

Cookies and tracking technologies

PrimeFans uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, remember preferences, and understand how the platform is used.

• Strictly necessary cookies — required for the platform to function correctly. These include session authentication, security tokens, and core operational features. They cannot be disabled.
• Functional cookies — used to remember your preferences and settings, such as your selected language or display options.
• Analytics cookies — used to collect aggregate data about how visitors use the platform, which pages are most visited, and where errors occur. This data helps us improve the service.

Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy. The specific retention period depends on the type of data and the reason for which it was collected.

Account data is retained for the lifetime of your account and for a reasonable period afterward to handle any outstanding matters, disputes, or compliance obligations. Transaction and financial records are retained for the period required by UK tax law and financial regulations, which is typically six years. Security and audit logs are retained for as long as necessary to investigate incidents and maintain platform integrity.

When data is no longer required for any legitimate purpose, we delete or securely anonymize it. You may also request deletion of your data at any time, subject to legal retention requirements that may apply.

How we protect your data

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security practices include:

• Encrypted data transmission using TLS across all platform connections.
• Passwords stored as irreversible cryptographic hashes — we never store your password in readable form.
• Access controls that limit data access to authorized personnel on a need-to-know basis.
• Infrastructure-level security provided by our hosting providers, including firewalls, intrusion detection, and physical security at data centers.
• Internal processes for reviewing and responding to security incidents promptly.

Your rights

Under UK GDPR, you have specific rights over your personal data. To exercise any of these rights, please contact us at contact@primefans.com. We will respond within the timeframes required by applicable law — generally within one calendar month.

• Right of access — you may request a copy of the personal data we hold about you and information about how it is used.
• Right to rectification — you may ask us to correct inaccurate or incomplete personal data.
• Right to erasure — you may ask us to delete your personal data where it is no longer needed for any legitimate purpose, subject to legal retention obligations.
• Right to restriction — you may ask us to temporarily limit how we process your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability — where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent — where we rely on your consent to process data, you may withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to complain — you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully.

Children

PrimeFans is strictly intended for users aged 18 and over. We do not knowingly collect or process personal data from anyone under the age of 18. If you believe that a minor has registered an account or submitted personal data to us, please contact us immediately at contact@primefans.com and we will take prompt action to delete that data and close the account.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our data practices, product features, legal requirements, or regulatory guidance. When we make material changes, we will update the 'Last updated' date at the top of this page and notify users by email where appropriate.

Your continued use of PrimeFans after any update takes effect constitutes your acceptance of the revised policy. If you do not agree with the updated terms, you should stop using the platform and may request deletion of your account.