privacy policy

we love keeping your data private and secure...

Last updated: Monday 13th October 2025

fan3 Limited ("we", "us", "our") is the controller responsible for your personal data (in addition to any joint controllers set out below). We collect and process your personal data when you visit our website, sign-up for, use, or download our mobile application, any passes facilitated by fan3 (a "fan3 Pass"), or any other services or products that we offer or that are available through our website, mobile application, and fan3 Passes (our "Services"). This privacy notice provides information on how we collect and process your personal data when you access our Services. Our Services are not intended for children or those under 13 and we do not knowingly collect data relating to children.
Please read the following carefully to understand our practices regarding your personal data and how we will treat it. This Policy describes how we collect, handle, and store your personal information in accordance with applicable privacy laws in the United Kingdom (UK), European Union (EU), and the United States of America (USA)
Please note that, depending on how you utilise our Services, other privacy terms or notices may be applicable to you, including from any third parties (such as events, artists, athletes and brands ("fan3 Partners")) who you have registered for. If you have registered in connection with any fan3 Partners, we will be joint controllers of your personal data with such fan3 Partners.

Contact Details:

Full name of legal entity: fan3 Limited
Email address: hello@fan3.io
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO) (the UK regulator for data protection issues).

Changes to the privacy notice

We endeavour to keep our privacy notice under regular review. This version was last updated on the version date specified above. It may change and, if it does, those changes will be posted on this page and notified to you. You may be required to read and acknowledge the changes to continue your use of our Services.

Third party links and sites

Our Services may, from time to time, contain links to and from the websites of third parties, such as those of ticketing agents, record labels, events, and artists. Please note that these websites (and any services accessible through them) are controlled by those third parties and are not covered by this privacy notice. You should review their privacy notices as well to understand how they use your personal data before you submit any personal data to these websites or use these services.

How is your personal data collected?

  • Registration. We may collect the following identity and contact data when you register your account with us: email address, location data, and sometimes name, phone number and date of birth for the performance of our contract with you.
  • Communications. When you communicate with us (e.g. via email) we may collect the personal data that you provide and the content of any communications. If the communication relates to an error or problem you are having with our Services, we may also collect associated data for diagnosis and improvement for the performance of our contract with you.
  • Information you generate when using our Services and which we collect whilst monitoring our Services. Each time you access and use the fan3 Pass and Services we collect personal data related to your device, your personalisation settings and usage data. We collect personal data relating to any content where you upload it to the fan3 Pass or interact with the content available through the Services. We collect this information for the performance of our contract with you and for the legitimate business interests of improving our services.
  • fan3 Partners. When you communicate with fans or fan3 Partners, or otherwise interact with the fan3 Pass and our Services, including through content, we may collect the content of any such communications for the performance of our contract with you.
  • Additional information we otherwise collect through our fan3 Passes, Sites and Services where we have your consent to do so. Where you provide your consent, we collect your location data on an ongoing basis while you have the fan3 Pass installed on your device, for the legitimate interests of ensuring that fan3 Passes are used by genuine fans and fraud detection. We may also use this information for the performance of our contract with you.
  • Direct Marketing. We collect and record direct marketing data when we add you to our marketing database, you request to change your direct marketing preferences, or we receive prospect information from our data broker partners, including fan3 Partners. Any such information is used for the performance of ongoing and prospective contracts.
  • Information we receive from third parties. We may receive personal data about you from the third parties set out below:
    • Third Party Services Data. Where you consent for us to do so, we collect data when you choose to connect your social media, streaming, or email account to your account, such as your username, email address, login information and your preferences, for the performance of our contract with you and for the legitimate interests of running and growing our business.
    • Purchases. When you purchase items through our Services or from our partners (such as Shopify), we may receive information about any purchases, for the performance of our contract with you (including where any purchases are related to your fan3 passes) and for the legitimate interests of running and growing our business.

How we use your personal data

We will only use your personal data when we have a lawful basis to do so. Most commonly we will use your personal data in the following circumstances:
  • Consent. Where you have freely consented before the processing in a specific, informed and unambiguous indication of what you want. You can withdraw your consent at any time by contacting us for any other information.
  • Performance of a contract. Where we need to process your personal data to perform a contract with you or where you ask us to take steps before we enter into a contract with you. Where we rely on performance of a contract and you do not provide the necessary information, we will be unable to perform your contract.
  • Legitimate interests. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
  • Legal obligation. Where we need to use your personal data to comply with a legal or regulatory obligation. Where we rely on legal obligation and you do not provide the necessary information, we may be unable to fulfil a right you have or comply with our obligations to you, or we may need to take additional steps, such as informing law enforcement or a public authority or applying for a court order.

Automated decision making

Please note that we may make decisions based on automated process or profiling as we use various techniques to ensure any pre-sale tickets are purchased by genuine fans and not bots or ticket touts. When engaging with our platform in relation to a fan3 Parter, for example, we may limit the number of times you can claim a fan3 Pass. If you have any questions please feel free to get in touch.

Criminal offence data and special category data

We do not intentionally collect criminal offence data about you. However we may process data relating to criminal offences in monitoring the use of our Services for security purposes, where we suspect you may have committed a crime, such as attempting to make a fraudulent purchase or claim or circumvent the security of the Services. In such circumstances we will provide that information to law enforcement and/or use it to establish, exercise or defend a legal claim. In those circumstances, according to the type of activity and purpose, we will rely on legitimate interests (protecting our business, employees and other users) and legal obligation (where required by legal, judicial or law enforcement to disclose or process that information).
Otherwise, we do not collect or process and request that you do not provide us with any special categories of personal data (as this term is used in the UK and EU).

Disclosures of your personal data

We may share your personal data with the following third parties:
  • fan3 Partners. If you have signed up to our services as a fan of a particular artist or an event (a "fan3 Partner"), we may disclose your information to that artist and/or that event and/or their applicable representatives (including their record labels, agents, management and publishers). The fan3 Partners for whom you have registered may also export your personal data (including to third-party platforms). At the point at which this personal data has been transferred, the fan3 Partner will then become a separate and independent controller. Please note that this will then be subject to their applicable privacy policy.
  • Ticketing Providers. To facilitate transactions and check your eligibility, for ticket allocations, pre-sales, and ticketing relating to your registered fan3 Partners.
  • Internal third parties. Other companies in the fan3 Group, including in the USA, and those who provide and service our IT and system services.
  • External third parties.
    • Our professional advisors including lawyers, auditors, insurers, consultants and others offering business, legal, accounting and insurance services.
    • Your service providers that you have appointed and we need to contact to fulfil your requests, such as your banking or payment card provider to process your transactions, where applicable.
    • Third party partners where you have consented or subscribed to receive marketing from or with them.
    • Vendors and service providers.We may disclose your personal data to third party service providers who have access to your personal data in the context of providing their services, including those who provide services offered through our Services.
    • Third parties who we use to facilitate the creation of fan3 Passes and digital wallets (see below), as well as sales, payments or other transactions and providers of messaging and notification services.
  • Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
  • Regulators, law enforcement, public authorities or other third parties where necessary to exercise our rights or comply with a legal obligation.

International transfers

The personal data that we collect from you is stored on cloud services. We may transfer your personal data outside of the UK and EEA, including to our affiliate company(ies) in the USA (such as fan3, Inc.) and to the third parties such as those set out above. Whenever we transfer your personal data out of the UK or EEA, we endeavour to ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: (i) we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data; and/or (ii) by using pre-approved contractual protections for the transfer of your personal data.
Please contact us using the contact details above if you want further information on the specific mechanism used by us when transferring your personal data internationally.

Custodial Wallets & fan3 Passes

To authenticate genuine fans and maintain information security, our fan3 Passes are currently held on non-transferrable custodial blockchain wallets with unique wallet addresses associated with your fan3 user account. However, at no point is any personal information made public in this process. Please let us know if you have any questions.
It is intended that your fan3 Pass is unique to you and acts as a membership card for your fan3 Partner community. We may place a limit on the fan3 Passes per device and should you breach these terms of use and be discovered to have more than any such per-device limits then we reserve the right to cancel your account without notice.

Data security

Where we have given you (or where you have chosen) a password that enables you to access certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. Where your account or fan3 Pass is accessed via your email, you are responsible for maintaining the security of such email account and ensuring that no emails are lost in your junk folders. Once we have received your information, we will use strict procedures and security features to protect your personal data from loss, unauthorised use or access.
Ensure when using any social/public-facing features enable by the Services that you do not submit any personal data that you do not want to be seen, collected or used by other users.
We have put in place procedures to detect and respond to personal data breaches and notify you and any applicable regulator when we are legally required to do so.

Data retention

By law we may have to keep basic information about our customers for six years after they cease being customers.
In some circumstances you can ask us to delete your data (see below).
Once we no longer have a legal right to hold your personal data, we will delete or, in some circumstances, we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
If you do not use the Services for a period of six years then we will treat the account as expired and will delete your personal data.

Your legal rights

You have the following rights under data protection laws in relation to your personal data.
  • Access. Request access to and/or a copy of the personal data we process about you (commonly known as a data subject access request).
  • Correction. Request correction of any incomplete or inaccurate data we hold about you.
  • Deletion. Request us to delete or remove personal data where there is no good reason for us continuing to process it, where you have successfully exercised your right to object to processing (see below), where we have processed your information unlawfully, or where we need to erase your personal data to comply with law.
  • Objection. Object to us processing your personal data.
  • Restriction. Request that we restrict or suspend our processing of your personal data:
    • if you want us to establish the data's accuracy;
    • where our use of the data is unlawful, but you do not want us to erase it;
    • where we no longer require it, but you need us to hold onto it to establish, exercise or defend legal claims; or
    • you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
  • Data portability. Request we transfer certain of your personal data to you or your chosen third party in a structured, commonly used, machine-readable format.
  • Withdraw consent. Withdraw your consent at any time where we are relying on consent to process your personal data.
  • Complain to the UK or your local data protection regulator.If you are unhappy with how we process your personal data, we ask that you contact us first using the details so that we have the chance to put it right.