Privacy Policy.

Last Updated: September 2026
Effective Date: September 2026

Welcome to FanstoCart (accessible at fanstocart.com and associated creator storefronts, collectively referred to as the "Service", "Website", or "Platform"). This Privacy Policy describes how Fanstocart Technologies, Inc. ("FanstoCart", "we", "us", or "our"), a company organized under the laws of the State of Wyoming, United States, collects, uses, protects, and discloses personal information when you visit our Website, apply for our creator partnerships, or interact with our eCommerce storefronts.

We take your privacy seriously. This Privacy Policy is designed to comply with global privacy regulations, including the European Union General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and applicable United States federal and state privacy statutes.

1. Data Controller Information

For the purposes of the GDPR, UK GDPR, and international data protection laws, the Data Controller is:

  • Fanstocart Technologies, Inc.
    30 N Gould St, Sheridan, WY 82801, United States

  • Privacy & Data Protection Contact: privacy@fanstocart.com

  • General Support: info@fanstocart.com

2. Information We Collect

We collect information directly from you, automatically through your device, and from verified third parties.

2.1 Information You Provide to Us Directly

  • Creator & Partner Inquiries: Name, email address, phone number, social media account handles/IDs (e.g., OnlyFans, Instagram, TikTok, YouTube, X), estimated community reach, preferred product categories, and correspondence notes.

  • Customer & Order Details (via Storefronts): Full billing and shipping address, recipient name, email address, phone number, and transaction history.

  • Financial & Payment Data: Payment card details (card number, expiration date, CVV) are collected and processed directly by our PCI-DSS Level 1 certified payment processors (e.g., Stripe, PaymentCloud, or authorized merchant acquiring banks). FanstoCart does not store or process raw credit card numbers on our servers.

  • Creator Payout Information: Bank account routing details, ACH/wire instructions, cryptocurrency wallet addresses (where applicable), and tax identification information (e.g., W-9 or W-8BEN forms) for commission disbursements.

2.2 Information Collected Automatically

  • Device & Technical Data: IP address, browser type and version, operating system, device identifiers, time zone setting, language preferences, and referral URLs.

  • Usage & Interaction Data: Pages visited, button clicks, time spent on pages, scroll depth, and navigation paths.

  • Cookies & Tracking Technologies: Small data files stored on your device to remember user sessions, enhance website functionality, and analyze traffic (see Section 8: Cookie Policy).

2.3 Information from Third Parties

  • Social Media & Analytics: Public metrics from social platforms (follower counts, engagement rates) and analytics providers (e.g., Google Analytics, PostHog).

  • Fraud Prevention & Payment Compliance: Chargeback and dispute data from merchant networks and dispute resolution tools (Ethoca, Verifi).

3. Legal Bases for Processing (GDPR & UK GDPR)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following lawful bases:

  1. Performance of a Contract (Art. 6(1)(b) GDPR): To review partnership applications, deploy creator storefronts, fulfill and deliver customer orders, and disburse creator commissions.

  2. Legitimate Interests (Art. 6(1)(f) GDPR): To detect and prevent fraud, secure our technical infrastructure, optimize user experience, and manage commercial relationships.

  3. Compliance with Legal Obligations (Art. 6(1)(c) GDPR): To maintain accurate tax and accounting records, comply with customs clearance, and satisfy anti-money laundering (AML) requirements.

  4. Consent (Art. 6(1)(a) GDPR): Where required by law, we obtain your explicit consent for marketing communications and non-essential cookies. You may withdraw consent at any time.

4. How We Use Your Information

We use personal information to:

  • Review, vet, and respond to creator partnership applications.

  • Set up, manage, and host dedicated eCommerce storefronts and product drops.

  • Process transactions, verify customer age (18+ compliance), and prevent fraudulent orders.

  • Manufacture, package in plain discreet boxes, and ship customer orders worldwide.

  • Provide responsive customer support, send order tracking updates, and manage returns/exchanges.

  • Calculate and disburse creator commission payouts and generate US tax documentation (e.g., 1099-NEC).

  • Protect against chargebacks, illegal activities, and intellectual property infringement.

  • Comply with legal, tax, and customs requirements.

5. How We Share & Disclose Your Information

We do not sell, rent, or trade your personal information. We disclose information only under strict confidentiality and security protocols:

  • Logistics & Fulfillment Partners: 3PL warehouses, freight forwarders, and domestic/international postal carriers (USPS, FedEx, DHL) to pick, pack, and deliver parcels. (Parcels are delivered in plain, unbranded packaging to preserve customer privacy).

  • Payment Gateways & Financial Institutions: Authorized payment processors and acquiring banks to process credit card transactions and manage fraud prevention.

  • Technical Infrastructure Providers: Secure cloud hosting, CDN providers (Framer, AWS, Cloudflare), and transactional email delivery services.

  • Professional Advisors: Attorneys, accountants, auditors, and tax consultants in the United States and relevant operational jurisdictions.

  • Legal & Regulatory Authorities: When required by subpoena, court order, or applicable law to protect the rights, property, or safety of FanstoCart, our users, or the public.

  • Business Transfers: In the event of a merger, acquisition, corporate reorganization, or sale of assets, personal data may be transferred to the acquiring entity under strict confidentiality terms.

6. International Data Transfers

FanstoCart is headquartered in the United States, and our primary servers and databases operate in the US. If you access our Service from the European Economic Area (EEA), United Kingdom, Switzerland, or other regions with laws governing data collection and use, please note that your personal data will be transferred to, stored, and processed in the United States.

To ensure your data remains protected when transferred from the EEA or UK to the United States:

  • We implement the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum with relevant processors.

  • We enforce robust technical safeguards, including end-to-end TLS encryption in transit and AES-256 encryption at rest.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Order & Transaction Records: Retained for 7 years to comply with US Internal Revenue Service (IRS) and federal accounting mandates.

  • Creator Partnership Applications: Retained for up to 2 years if an application is not immediately accepted, after which it is securely deleted or anonymized.

  • Customer Support Records: Retained for 24 months following resolution of the inquiry.

  • Analytics Data: Anonymized and aggregated for performance benchmarking.

8. Cookies & Tracking Technologies

We use cookies, web beacons, and local storage to:

  • Essential Cookies: Enable core website functionality, security, and cart sessions. These cannot be disabled.

  • Analytical Cookies: Understand how visitors navigate our pages (e.g., page views, bounce rates) to improve user experience.

  • Preference Cookies: Remember language choices and currency preferences.

You can configure your browser to block or alert you about cookies. Note that disabling essential cookies may impact store checkout functionality.

9. Your Rights Under GDPR & International Privacy Laws

If you reside in the EEA, UK, Switzerland, or jurisdictions with comparable laws, you have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Request correction of inaccurate or incomplete personal data.

  • Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal and tax retention mandates.

  • Restriction: Request restriction of processing under certain circumstances.

  • Data Portability: Receive your data in a structured, commonly used, machine-readable format.

  • Objection: Object to processing based on legitimate interests or direct marketing.

  • Lodge a Complaint: File a grievance with your local Data Protection Authority (e.g., the ICO in the UK or the relevant DPA in your EU member state).

To exercise any of these rights, contact our Data Protection Officer at: privacy@fanstocart.com.

10. Your Rights Under California Law (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act provides specific rights:

  • Right to Know: The categories and specific pieces of personal information collected, sources, purposes, and categories of third parties with whom data is shared.

  • Right to Delete: Request deletion of personal information collected, subject to legal exceptions.

  • Right to Correct: Request correction of inaccurate personal information.

  • Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. We do not sell data of consumers under 16 years of age.

  • Right to Non-Discrimination: We will not discriminate against you (e.g., charge different prices or deny service) for exercising your privacy rights.

To submit a verifiable CCPA request, email: privacy@fanstocart.com with the subject line "California Privacy Rights Request".

11. Security Measures

We implement multi-layered technical, physical, and administrative safeguards designed to protect personal data from unauthorized access, loss, or alteration:

  • SSL/TLS encryption across all web domains and checkout gateways.

  • Multi-factor authentication (MFA) and least-privilege role-based access controls for internal staff.

  • Regular security vulnerability scanning and third-party audit assessments.

  • Strict physical unboxing confidentiality: Customer orders are shipped in plain, unbranded exterior cardboard mailers with sanitized sender descriptors.

12. Children's Privacy (Strict 18+ Policy)

The Website, our creator partnership opportunities, and our eCommerce storefronts are intended strictly for individuals who are at least eighteen (18) years of age (or the legal age of majority in their jurisdiction). We do not knowingly collect or solicit personal information from children under the age of 16. If we discover that a minor under 16 has submitted personal information, we will delete that data immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operational practices, technology, or legal requirements. When updates occur, we will revise the "Last Updated" date at the top of this document. Continued use of our Website or Service after changes are published constitutes acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at:

  • Email: privacy@fanstocart.com / info@fanstocart.com

  • Corporate Office:
    Fanstocart Technologies, Inc.
    30 N Gould St, Sheridan, WY 82801, United States