Privacy Policy

OFANDI is a private growth and monetization partner for creators. For the purposes of the General Data Protection Regulation (GDPR), OFANDI acts as the data controller for personal data collected through this website unless stated otherwise.

Depending on how you use this website, we may collect:

• Identity details such as your first name, last name, creator or brand name.
• Contact details such as your email address, phone number or WhatsApp number.
• Professional information such as your niche, social platform, profile URL, audience size, reach and current monetization methods.
• Commercial information such as approximate revenue figures, partnership interests and project requirements that you choose to provide.
• Technical information such as IP address, browser type, device information, operating system and basic usage data.
• Any other information you voluntarily provide through forms, email or direct communication.

We process personal data for the following purposes:

• To review partnership applications and assess whether there is a potential fit.
• To respond to enquiries and communicate with you.
• To prepare, enter into and perform agreements with creators and business partners.
• To operate, secure and improve our website and services.
• To comply with legal, accounting and regulatory obligations.
• To send marketing communications where permitted by law and, where required, with your consent.

Under the GDPR, we rely on one or more of the following legal bases:

• Contract: where processing is necessary to take steps at your request before entering into a contract or to perform a contract.
• Legitimate interests: for example, operating our business, assessing partnership opportunities, preventing misuse and improving our services, provided those interests do not override your rights and freedoms.
• Consent: where you have actively agreed to a specific use of your data, such as certain marketing or non-essential cookies.
• Legal obligation: where processing is required to comply with applicable law.

We may share personal data with service providers that help us operate the website and our business, such as hosting, analytics, communications, CRM, form-processing, payment or infrastructure providers. These providers may process data only where necessary for the services they provide to us and subject to appropriate contractual and security safeguards.

We may also disclose data where required by law, to protect our legal rights, or as part of a business reorganisation, merger or sale.

We do not sell personal data.

Some service providers may process personal data outside the European Economic Area. Where this happens, we use appropriate safeguards required by the GDPR, such as an adequacy decision or the European Commission's Standard Contractual Clauses, where applicable.

We keep personal data only for as long as necessary for the purpose for which it was collected, including any legal, accounting, contractual or dispute-resolution requirements. Retention periods vary depending on the type of information and our relationship with you. Partnership applications that do not progress may still be retained for a reasonable period so we can manage follow-up, prevent duplicate applications and maintain business records, unless you ask us to delete them and we have no overriding lawful reason to retain them.

This website may use essential technologies required for the website to function and, where enabled, analytics or other non-essential technologies. Where EU law requires consent for non-essential cookies or similar technologies, they should only be activated after you have provided that consent.

You can also manage cookies through your browser settings. Disabling certain technologies may affect how parts of the website function.

We do not currently make decisions that produce legal effects, or similarly significant effects, solely by automated means based on personal data collected through this website. If that changes, this policy will be updated and the relevant information will be provided as required by law.

Subject to the conditions and exceptions in applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to processing based on legitimate interests or to direct marketing.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent.

To exercise your rights, email info@ofandi.com. We may need to verify your identity before acting on a request.

You have the right to lodge a complaint with a competent data protection authority. If OFANDI is established in the Netherlands, the relevant supervisory authority is generally the Autoriteit Persoonsgegevens. You may also contact the supervisory authority in the EU/EEA country where you live, work or where you believe an infringement has occurred.

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, unauthorised access, disclosure, alteration or destruction. No online system can be guaranteed to be completely secure, but we take data protection seriously and review our safeguards as our systems evolve.

We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal obligations. The latest version will always be published on this page with an updated effective date.