Skip to content
Fan Led X

Legal

Privacy Policy

Last updated 7 July 2026

This policy explains what personal information we collect when you use fanledx.com, why we collect it, how we use it, who we share it with, and the rights you have over it. It applies to visitors to the website and to people who contact us through it.

We follow the UK GDPR, the EU GDPR and the Privacy and Electronic Communications Regulations (PECR). If you have questions about anything in this policy, or want to exercise any of your rights, email us at privacy@fanledx.com.

1. Who we are

The data controller for this website is Fan Led X (“Fan Led X”, “we”, “us”, “our”). You can contact us about your personal information at privacy@fanledx.com.

We have not appointed a Data Protection Officer because we are not required to under Article 37 of the UK/EU GDPR, but the address above reaches the person responsible for privacy at Fan Led X.

2. The personal information we collect

We collect a small amount of information, and only what we need:

  • Information you give us through the contact form. Required: your name and email address. Optional: organisation, location or market, what you’re working on, and the kind of support you’re looking for.
  • Information collected automatically when you visit. Your IP address, approximate location (country/region), device type, browser type and version, operating system, the pages you view, the referring URL, and the time of your visit.
  • Spam-protection signals on the contact form. When you submit the contact form, Cloudflare Turnstile checks that you are a genuine visitor rather than an automated bot. To do this it processes client-side signals including your IP address, a TLS fingerprint, your browser’s user-agent and the Turnstile site key. Cloudflare states that these signals are used only to tell humans from bots and that it cannot directly identify you from them. Cloudflare’s handling of this data is described in its Turnstile Privacy Addendum.
  • Cookies and similar technologies. See section 5 below for the full list.

We do not knowingly collect special-category data (such as health, ethnicity or political views) and we ask that you don’t send any to us through the contact form.

3. How we use your information and our legal basis

3.1 Replying to your enquiry

We use the information you submit through the contact form to read, understand and reply to your enquiry, and to follow up on any work that may result from it. Our legal basis is your consent (you tick the privacy box when you submit the form) and our legitimate interest in handling business enquiries.

3.2 Running and improving the website

We use technical logs and analytics to keep the site available, secure and fast, to understand which pages are useful, and to spot abuse or attempted attacks. Our legal basis is our legitimate interest in operating and improving the site, balanced against your privacy.

3.3 Protecting the contact form from spam

We use Cloudflare Turnstile on the contact form to block automated submissions and abuse. Our legal basis is our legitimate interest in keeping the form usable and free of spam. See the Turnstile Privacy Addendum for how Cloudflare processes the signals involved.

3.4 Complying with the law

We may use or retain your information where we have to under a legal obligation (for example, to respond to a lawful request from a regulator).

4. What we don’t do

  • We don’t sell your personal information.
  • We don’t send marketing emails from this site.
  • We don’t profile you or make automated decisions that have a legal effect on you.
  • We don’t use advertising or remarketing trackers.

5. Cookies and similar technologies

The site uses the following cookies:

5.1 Strictly necessary

  • __cf_bm - set by Cloudflare (our security and content-delivery partner) to tell genuine visitors apart from bots. First-party from your point of view, lasts up to 30 minutes.

5.2 Analytics

  • _ga, _ga_GS4B5SXXTZ - set by Google Analytics 4 to count unique visitors and remember your session. First-party, last up to two years. We have enabled IP anonymisation and we do not use Google’s advertising features.

Analytics cookies are only set after you accept them in the cookie banner shown on your first visit. Until then, Google Analytics runs in a cookieless mode and stores nothing on your device. You can change your choice at any time using the Cookie settings link in the site footer.

You can also block or delete any of these cookies through your browser settings, and you can opt out of Google Analytics specifically using the Google Analytics opt-out browser add-on. Rejecting or blocking the analytics cookies will not break the site.

6. Who we share your information with

We share personal information only with the service providers we need to run the site and respond to you. Each one acts as a processor on our behalf:

  • scream.io - hosting provider for fanledx.com. Receives any data necessary to serve the site, including contact-form submissions passing through the server.
  • Cloudflare, Inc. - content delivery, DNS, edge security and bot protection. Processes connection metadata (IP, request headers) to route and protect traffic, and runs Cloudflare Turnstile on our contact form to block automated spam. Its handling of Turnstile signals is set out in the Turnstile Privacy Addendum.
  • Google LLC (Google Analytics 4) - measurement of website usage. Receives the analytics events listed in section 5.2 with your IP address anonymised.
  • Google Workspace - receives the email generated by the contact form, sent to a mailbox under our control.

We may also share information if we have to under a legal obligation, or to protect our rights or the rights of others. We will never share your information with anyone for their own marketing.

7. International transfers

Some of our service providers (notably Google and Cloudflare) are based in the United States or operate globally. Where personal data leaves the UK or the European Economic Area, the transfer is protected by the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or another lawful transfer mechanism that those providers maintain.

8. How long we keep your information

  • Contact-form enquiries are kept in our email system for as long as needed to handle the enquiry and any follow-up work, and then archived for up to 24 months for our business records.
  • Web-server logs are kept by our hosting provider for up to 30 days for security and diagnostic purposes.
  • Analytics data is kept by Google Analytics 4 for up to 14 months (the property setting), after which it is deleted automatically.

9. How we keep your information secure

Traffic to and from the site is encrypted with HTTPS. The hosting environment is access-controlled and patched by our hosting provider. Contact-form submissions are transmitted over encrypted connections and reach a mailbox protected by Google Workspace’s security controls. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.

10. Your rights under UK / EU GDPR

You have the following rights over the personal information we hold about you:

  • Access - ask for a copy of the information we hold.
  • Rectification - ask us to correct anything that’s wrong.
  • Erasure - ask us to delete it (the “right to be forgotten”).
  • Restriction - ask us to stop using it for a while.
  • Portability - ask for a copy in a portable format.
  • Objection - object to our use of it where we rely on legitimate interests.
  • Withdraw consent - withdraw any consent you’ve given (such as the privacy box on the contact form).

To exercise any of these rights, email privacy@fanledx.com. We’ll respond within one calendar month. You can also complain to the UK Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority in the EEA.

11. Children

The site is intended for an adult, professional audience. We don’t knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, please contact us and we’ll delete it.

12. Changes to this policy

If we change anything material about how we use personal information, we’ll update this page and update the “Last updated” date at the top. Significant changes will be highlighted on the site.

13. Contact us

Privacy questions: privacy@fanledx.com.
General enquiries: info@fanledx.com.