Home / Privacy
Privacy policy
Last updated 9 Nov 2026
- I collect what you type into the booking form, the emails we exchange, and basic site analytics.
- I use it to reply, run your audit and send invoices. Nothing else.
- I never sell your data or use it for ads.
- Email megan@fanfavorite.ai to see, fix or delete what I have about you.
Who is responsible for your data?
Fan Favorite is run by Megan de Graaf, an individual entrepreneur registered in Georgia. Full business details are on the terms page. I decide how your data is used. Contact: megan@fanfavorite.ai.
What do I collect?
| What | Examples | Why |
|---|---|---|
| Booking form | Name, work email, role, company website, market, competitors, start date, how you heard about Fan Favorite, what you want to find out | To reply, check we’re a fit, and plan your audit |
| Emails and calls | What you write to me, notes from our calls | To do the work you hired me for |
| Invoicing | Company name, billing address, payment confirmation | To invoice you and keep records the law requires |
| Site analytics | Pages visited, device, browser, approximate location (city level) | To see which pages help people, and fix the ones that don’t |
I don’t collect card numbers. Payments go through the bank transfer details on your invoice.
What is the legal basis?
- Taking steps toward a contract, and the contract itself: replying to your booking, running your audit.
- Legal obligation: keeping invoices and tax records.
- Legitimate interest: basic security logs and improving the site.
- Consent: analytics cookies, where the law requires consent (for example in the EU and UK). You can withdraw it at any time.
Who else sees your data?
Only the services that make the work possible:
| Service | What it does |
|---|---|
| Cloudflare | Hosts this website and protects it from attacks |
| Web3Forms | Receives booking form submissions and emails them to me |
| Zoho Mail | Business email |
| Google Analytics (via Google Tag Manager) | Site analytics |
| Wise | Receives payments |
Your company name and competitor names go into Semrush to track AI answers during your audit. That’s company data, not personal data. I don’t sell or rent your data to anyone, and I don’t use it for advertising.
Is your data sent abroad?
Some of these services store data in the US or the EU. Where data leaves Georgia, I rely on the safeguards each provider offers, such as standard contractual clauses.
How long do I keep it?
- Booking forms that don’t lead to an audit: 12 months, then deleted.
- Client records and invoices: 6 years after the end of the year they relate to, as Georgian accounting rules require.
- Analytics: 14 months.
What are your rights?
You can ask to see, correct or delete your data, to limit how I use it, or to get a copy. You can also object to processing and withdraw consent. Email megan@fanfavorite.ai and I’ll reply within 30 days.
If you’re not happy with my answer, you can complain to the Personal Data Protection Service of Georgia, or to the data protection authority where you live.
Changes to this policy
If anything important changes, I’ll update this page and the date at the top.