Privacy Policy

IMNOTSHY is the data controller responsible for your personal information. If you have any questions about how we handle your data, you can contact us at [email protected].

We are registered in the United Kingdom. This policy applies to all users of the Platform, including creators, fans, and visitors.

Account information: When you register, we collect your name or display name, email address, date of birth (for age verification), and a profile photo if you choose to provide one.

Identity and age verification: To comply with our legal obligations under the Online Safety Act 2023 and to prevent access by minors, we collect and verify your date of birth. Creators are required to provide additional identity verification documents.

Payment information: When you make or receive payments, we collect billing details. Full payment card numbers are processed directly by our payment processor (Stripe) and are never stored on our servers.

Content and communications: We store content you upload or post on the Platform, messages you send, and any correspondence with our support team.

Technical data: We automatically collect your IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, and timestamps of your activity on the Platform.

Cookies and tracking: We use cookies and similar technologies as described in Section 7 below.

We process your personal data under the following lawful bases under UK GDPR:

Contract performance: Processing necessary to provide the Platform services you have signed up for, including account management, content delivery, and payment processing.

Legal obligation: Processing required to comply with applicable laws, including age verification requirements under the Online Safety Act 2023, anti-money laundering regulations, and tax obligations.

Legitimate interests: Processing for fraud prevention, platform security, improving our services, and enforcing our Terms of Service — where these interests are not overridden by your rights.

Consent: Where we rely on your consent (such as for optional marketing communications), you may withdraw it at any time by contacting us or using the unsubscribe link in any email.

To create and manage your account and provide access to the Platform.

To verify your age and identity as required by law and our Terms of Service.

To process payments, calculate and pay creator revenue shares, and maintain financial records.

To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activity.

To send you service-related communications, including account notifications, payment confirmations, and policy updates.

To respond to your support requests and resolve disputes.

To comply with legal obligations, including responding to lawful requests from law enforcement or regulatory authorities.

To improve and personalise the Platform based on how you use it.

We do not sell your personal information to third parties.

Payment processors: We share necessary payment information with Stripe to process transactions. Stripe's privacy policy governs their use of your data.

Service providers: We may share data with trusted third-party providers who help us operate the Platform (such as hosting, analytics, and customer support tools), under strict data processing agreements.

Legal requirements: We may disclose your information where required by law, court order, or to protect the rights, property, or safety of IMNOTSHY, our users, or the public.

Business transfers: If IMNOTSHY is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

Some of our service providers may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses, to protect your data to the same standard as required under UK GDPR.

Essential cookies: These are necessary for the Platform to function and cannot be switched off. They include session cookies that keep you logged in and security cookies that help protect against fraud.

Analytics cookies: We use analytics tools to understand how visitors use the Platform. This helps us improve performance and user experience. These cookies are only set with your consent.

Preference cookies: These remember your settings and preferences (such as age gate confirmation). You can control these through your browser settings.

You can manage or disable non-essential cookies at any time through your browser settings. Note that disabling cookies may affect the functionality of the Platform.

We retain your personal information for as long as your account is active or as needed to provide our services.

Financial records and transaction data are retained for a minimum of 6 years to comply with HMRC requirements.

Age verification records are retained for as long as required by applicable law, including the Online Safety Act 2023.

If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law or for legitimate fraud prevention purposes.

Right of access: You can request a copy of the personal data we hold about you.

Right to rectification: You can ask us to correct inaccurate or incomplete personal data.

Right to erasure: You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.

Right to restrict processing: You can ask us to pause processing of your data in certain circumstances.

Right to data portability: You can request your data in a structured, machine-readable format.

Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.

Rights related to automated decision-making: You have the right not to be subject to solely automated decisions that significantly affect you.

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS) and at rest, access controls, and regular security reviews.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected users without undue delay.

IMNOTSHY is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it immediately and terminate the associated account.

If you believe a minor has accessed the Platform or provided us with personal data, please contact us immediately at [email protected].

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a prominent notice on the Platform. The date at the top of this page indicates when the policy was last updated.

Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Controller at: [email protected]

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues: ico.org.uk / 0303 123 1113.