Definitions

Personal data is information about an "identified" person or an "identifiable natural person". An "identifiable natural person" can be identified, directly or indirectly, in particular reference to an identifier such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

Sensitive personal data: Sometimes known as 'special categories of personal data' or 'sensitive personal data', is personal information about an individual's race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership (or non-membership), genetics information, biometric information (where used to identify an individual) and information concerning an individual's health, sex life or sexual orientation.

Data Subject means the individual to whom the personal information relates.

Processor
A processor as a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller. Processors act on behalf of the relevant Controller and under their authority.

Controller
A controller is a natural or legal person, public authority, agency, or any other body which alone or jointly with others determines the purposes and means of the processing of personal data, where the purposes and means of processing are determined by the EU or UK laws, the Controller may be designated by those laws. Art.2(d) GDPR.

Who We Are

ELHUEVO WORLDWIDE LIMITED, trading as MORE THAN FANZ, is a Company registered in the UK with the Company number 16298692.
Our registered office address is Belmont Suite, Paragon Business Park, Chorley New Road, Bolton, Lancashire, England, BL6 6HG.
Please note that we are registered with the Information Commissioner's Office (Reference: ZB888166).

Policy

For the avoidance of doubt, you are a 'user' if you sign up as a 'fan'. Please note that we have a separate Privacy Notice for 'creators', who are also referred to as 'models'.

The Law

We are required under data protection legislation to notify you of the information contained in this privacy notice.
This notice does not form part of any contract to provide services or any other contract and may be updated at any time.

We will comply with data protection laws. This says that the personal information we hold about you must be:

1. Used lawfully, fairly and in a transparent way.
2. Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
3. Relevant to the purposes we have told you about and limited only to those purposes.
4. Accurate and kept up to date.
5. Kept only as long as necessary for the purposes we have told you about.
6. Kept securely.

Age Verification and Legal Compliance

In compliance with the UK Online Safety Act 2023, MorethanFanz requires all users accessing the Platform to confirm they are 18 years or older. This is achieved through Ondato’s certified age-assurance system, which verifies age without collecting identification documents or biometric data. This approach is approved under PAS 1296 and satisfies Ofcom’s current guidance for effective and privacy-preserving age verification.

Our Commitment

• Being completely transparent about how, when and why your data is controlled and processed by us.
• Allowing you control over the personal data we collect from you and how we process that personal data.

It is important that you read this notice, together with any other privacy notice that is provided on specific occasions when we are collecting or processing personal information about you so that you are aware of how and why we are using such information.

How We Collect Personal Data

At present, all data processed and stored by us is collected directly from you at the sign-up stage.

What Kind of Information We Collect and Process

The personal information we generally collect and process will be limited to:

• Your Name
• Your Email Address
• Your Phone Number
• Your Sex
• Your Date of Birth
• Your Country of Residence
• Payment Information (Bank Account Details)

We and/or our third-party verification provider (Ondato) process different levels of verification data depending on your role:

• For Users (Fans): Ondato provides age-assurance verification only. This process confirms that you are 18 years or older without requiring or storing your ID document or biometric data. We receive only an encrypted confirmation token showing that your age has been verified.
• For Content Creators: Ondato performs full Know Your Customer (KYC) verification, which includes copies of government-issued identification, selfie verification, and document authentication to satisfy legal and compliance obligations.

If we collect any additional information, we will explain why and may gain your consent to process it where it falls into the sensitive data category.

Where We Store Your Information

Any personal data we hold on you will be stored securely within our website.
For Users, age-verification tokens are securely transmitted and stored by Ondato and contain no personal identity information.
For Creators, Ondato stores ID documentation in compliance with KYC, Online Safety Act 2023, and GDPR standards.
However, please note that our third-party payment processor (CCBill) may also store your personal data (KYC and payment data, respectively).

How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, this will be:

• Where you have provided your consent to the processing of your personal data.
• Where you have entered into a contract with us and we need to process your personal information to deliver a contractual service to you.
• Where we need to use your personal data for our legitimate interests (or those of a third party), and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation, cooperate with regulators or resolve disputes and legal claims.
• In rare cases, where we need to process your data to protect someone's life – usually in an emergency situation.

The lawful basis for this processing is:

• Consent
• Contract
• Legitimate Interest
• Legal Obligation
• Vital Interest

Data Security

All personal data we collect and process is stored following reasonable security practices, including the use of appropriate security measures at our offices and secure IT practices. Any personal data collected by us is only accessible to a limited number of employees and certain third parties (at present, this is limited to our ID Verification Service, our payment processor, and our website developers) on a need-to-know basis.

Your Rights and Obligations

User Obligations

• Provide accurate and complete information when requested, particularly when creating an account.
• Promptly inform us of any changes to their personal data.
• Use personal data responsibly and only share information with us that they are legally entitled to provide.
• Respect the data protection rights of others, including our employees and other users.

Sharing of Personal Data

We may share your personal data with third parties with your consent or based on an otherwise lawful reason for doing so.

• For Users, we share only minimal, non-identifiable information with Ondato, limited to what is necessary for age-assurance verification. Ondato provides us only with a confirmation token verifying that you are 18 years of age or older. No personal identification documents or biometric data are shared with or stored by MorethanFanz.
• For Content Creators, we share information required for full KYC verification in accordance with the Online Safety Act 2023, the Digital Economy Act 2017, and 18 U.S.C. §2257.

Transfers Outside of the EEA

In some cases, your personal data may be transferred to countries outside the United Kingdom (UK) and the European Economic Area (EEA). We ensure appropriate safeguards are in place, including adequacy decisions, IDTAs, or equivalent security measures.

Updates to Privacy Notice

We may update this notice from time to time. You should occasionally check to ensure you are happy with any changes.

Concerns or Complaints

If you have any concerns or complaints relating to this policy or how we collect, control and/or process your data, please contact our Data Protection Officer, Edward Cullen (Director), at support@morethanfanz.com.

Reviewing

The Director is responsible for ensuring that this privacy notice is complete and up-to-date and will review it at least once a year or more frequently if needed due to changes in laws, regulatory guidance, or best practice.