Idollist — Privacy Policy Last updated: 30 May 2026 This Privacy Policy explains how Idollist collects, uses, shares, and protects your personal data when you use our Platform and Services. We are committed to protecting your privacy and complying with all applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Policy operates alongside the General Terms & Conditions and all other applicable Idollist policies. Where a conflict arises between this Policy and the General Terms on a matter this Policy specifically addresses, this Policy takes precedence. All defined terms carry the meanings given to them in the General Terms & Conditions, unless stated otherwise here. Data Controller: Idollist Ltd is the data controller of your personal data for the purposes of the Platform. For any data protection queries, you can reach us at support@idollist.com.Documentation Index
Fetch the complete documentation index at: https://legal.idollist.co/llms.txt
Use this file to discover all available pages before exploring further.
1. WHAT DATA WE COLLECT
We collect and process the following categories of personal data, depending on how you use the Platform: Data you provide directly: Identity data — such as your name, date of birth, and nationality; Contact data — such as your email address and phone number; Payment data — such as card or bank details and billing address; Idol verification documents — such as government-issued ID and liveness scan results; and Communications — such as messages sent to our support team or complaints submitted through the Platform. Data we collect automatically: Usage data — such as login times, content viewed, and interactions on the Platform; Technical data — such as your IP address, browser type, and device model; Location data — derived from your IP address or device permissions; and Session activity — such as your navigation patterns and in-platform interactions. Data received from third parties: Identity verification and fraud prevention data from our approved verification provider (Sumsub); and Analytics data from platforms we use to understand how the Platform is used. We may combine data from different sources to improve our services, protect Users, and detect misuse or fraudulent activity.2. HOW WE USE YOUR DATA
We process your personal data for the following purposes and on the following legal bases:3. COOKIES AND TRACKING
We use cookies and similar tracking technologies to operate, secure, and improve the Platform. Please refer to our Cookie Policy for a full explanation of how cookies work and how you can manage your preferences.4. WHO WE SHARE YOUR DATA WITH
We share your personal data only where necessary and for legitimate purposes. Recipients include: Payment processors, to handle transactions made through the Platform; Identity verification and fraud prevention providers (including Sumsub); Analytics providers, to help us understand how the Platform is used; Marketing platforms, where you have given your consent; Customer support tools, to facilitate responses to your queries; and Law enforcement authorities and regulators, where required by law or court order. Where we engage third-party providers to process personal data on our behalf, we enter into appropriate data processing agreements to ensure your data is handled securely and in accordance with applicable law. The Platform may contain links to external websites or services not operated by Idollist. We are not responsible for the privacy practices of those third parties and recommend reviewing their privacy notices before submitting any personal data to them.5. INTERNATIONAL DATA TRANSFERS
Some of our service providers are located outside the United Kingdom. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including: Adequacy decisions issued by the UK government in respect of the recipient country; Standard Contractual Clauses (SCCs) approved for use under UK data protection law; and UK Addendum to SCCs, where required.6. HOW LONG WE KEEP YOUR DATA
We retain your personal data only for as long as is necessary for the purposes described in this Policy. This includes retaining data: For the duration of your active Account; For such further period as may be required for legal, regulatory, tax, or audit purposes; and For a limited period following account closure, as required or permitted by law. Once data is no longer required, it is securely deleted or anonymised.7. YOUR RIGHTS
Under UK data protection law, you have the following rights in relation to your personal data: Right of access — to request a copy of the personal data we hold about you; Right to rectification — to ask us to correct inaccurate or incomplete data; Right to erasure — to ask us to delete your data in certain circumstances; Right to restrict processing — to ask us to limit how we use your data; Right to data portability — to receive your data in a structured, machine-readable format; Right to object — to object to certain types of processing, including processing based on legitimate interest; Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time; and Right to lodge a complaint — with the UK Information Commissioner’s Office (ICO). To exercise any of these rights, please contact us at support@idollist.com. For further information about your rights or to submit a complaint to the regulator, you can contact the ICO at https://ico.org.uk.8. CHILDREN
The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you become aware of a person under 18 accessing or using Idollist, please notify us immediately at support@idollist.com so that we can take appropriate action.9. AGE VERIFICATION DATA
To comply with age verification laws in applicable jurisdictions, we process additional personal data as described in our Age Verification Policy. This includes: For Fans: basic age confirmation status and the timestamp of verification; and For Idols: government identity document details, biometric matching data, and verification records. Age verification is carried out by Sumsub under a data processing agreement that reflects applicable data protection law. We store only the minimum data necessary for compliance purposes: Verification status (pass or fail); Verification timestamp; and For Idols only: document data retained in accordance with USC 2257 and other applicable legal requirements. Age verification data is: Processed on the basis of legal obligation and legitimate interest; Retained for the duration of your Account; Subject to enhanced security controls; and Never used for marketing purposes.10. SECURITY
We take the security of your personal data seriously and implement appropriate technical and organisational measures to guard against accidental loss, unauthorised access, disclosure, or misuse. These measures include: Encryption of sensitive data and use of secure servers; Strict access controls and confidentiality obligations for staff who handle personal data; and Breach detection and notification procedures, in line with our obligations under applicable data protection law. You are responsible for keeping your Account credentials confidential. You must not share your login details with any other person.CONTACT & SUPPORT
If you have questions about this Policy or about how we handle your personal data: Email: support@idollist.com Website: idollist.co Idollist may update this Policy from time to time. The current version will always be available at legal.idollist.co. Where changes are material, we will take reasonable steps to notify affected Users.Questions about this policy? Email us at support@idollist.com