Policy And Privacy.

1. Who We Are

This Policy explains how About Fraud (CY) Ltd (“About Fraud,” “we,” “us,” or “our”) collects and uses personal information in connection with fraudfightclub.com (the “Website”), related forms and emails, ticket sales, Fraud Fight Club events (the “Event”), and any official event application we designate.

About Fraud (CY) Ltd
Company number HE 429908
Spyrou Kyprianou Avenue 16, H&S Centre, Office 15, 6058 Larnaca, Cyprus
Email: info@about-fraud.com
Phone: +357 95 955 651

We are the data controller for personal information we collect for our own Event, Website, and marketing purposes. Fraud Fight Club is an event brand we produce.

This Policy is a notice, not a separate paid contract. Ticket purchases are also governed by our Terms And Conditions. Where this Policy and the Terms conflict on a privacy point, this Policy controls.

Related sites such as about-fraud.com may carry their own notices. Read the notice on the site you are using.

Privacy requests: info@about-fraud.com

2. Who This Policy Covers

This Policy applies to Website visitors, waitlist and enquiry contacts, Ticket purchasers and named attendees, coaches, guests, people who appear in official Event photography or short recap film, and business contacts at financial institutions, fintechs, and sponsor organizations.

The Event is a professional B2B conference. We expect users to be adults acting for their employer.

3. Notice At Collection (including California and other US states)

At or before we collect personal information, we collect the categories below for the purposes in section 5. We keep each category for the periods in section 10.

• Identifiers: name, email, phone, IP address. Sources: you, your colleague, logs. Recipients: hosts, email, payment, Event app.
• Professional information: title, employer, role, eligibility details. Sources: you; public professional profile. Recipients: Event operations; other attendees in the app if you appear there.
• Commercial information: Ticket tier, payment status, refunds. Sources: you; payment provider. Recipients: payment provider; accounting.
• Internet or device activity: pages viewed, approximate location from IP, security signals. Sources: automatic. Recipients: hosting and security providers; analytics if enabled.
• Audio or visual information: official photos and short recap film. Sources: Event capture. Recipients: contractors; public marketing channels for official recap use.
• Inferences: we do not use inferences to profile you for decisions.

We do not sell personal information for money. We do not disclose the attendee list to sponsors for their own marketing. If a tag on the Website later sends data to an advertising network in a way that is “sharing” for cross-context behavioral advertising under California law, we will offer an opt-out and update this Policy.

We do not use sensitive personal information to infer characteristics.

To request access, correction, deletion, or an opt-out, email info@about-fraud.com. If we refuse, you may appeal by writing again with the subject line “Privacy appeal.” We will not deny a Ticket-related service, charge a different price, or degrade quality because you exercised a privacy right, except where the data is required to provide the service (for example a name on a badge).

4. Information We Collect

4.1 You give us

Depending on the form or purchase: name, job title, employer, country; work email and phone if provided; Ticket and billing details; eligibility information; messages; marketing-consent choices; featured-image opt-out requests; transfer, refund, or accessibility requests.

The waitlist form collects name, title, company, email, a note, and a consent tick box.

You do not have to give us this information, but we cannot issue a Ticket, run the waitlist, or answer you without the fields that form requires.

4.2 Collected automatically

Hosts and security tools typically log IP address, approximate location derived from IP, browser and device type, pages viewed, referring URL, timestamps, coarse usage statistics, and bot-detection signals (including Cloudflare Turnstile on forms).

4.3 Tickets, payments, and the Event app

When you buy a Ticket we and the payment provider named at checkout process the data needed to take payment, issue a confirmation, check eligibility, and admit you.

After purchase we may provision access to the official Event app (currently Brella). The app may show an attendee directory, profiles, and meeting booking to other ticket holders. We do not make that directory public before purchase.

We are the controller for deciding to use an Event app and for the registration data we send into it. Brella is the controller for how the app itself is provided and for features other attendees can see inside the app. Brella’s terms and privacy notice also apply.

4.4 Event photography and film

Official photographers and videographers may capture stills and short footage in public areas, on the Main Stage, and at official networking formats, including image, voice, and badge-visible affiliation. See section 7 and the Photography And Recording section of the Terms.

4.5 Sources other than you

We may receive information from a colleague who registers you, your employer’s billing contact, the Event app provider, the payment provider, publicly available professional profiles if we verify eligibility, and sponsors only where you engage with their contracted activation.

We do not buy consumer marketing lists for the Event. We do not send marketing texts to US numbers unless you separately agree.

5. Why We Use Information And Legal Bases

Where European or UK data-protection law applies, the bases below apply. US law does not use the same labels; the purposes still apply.

• Website security and hosting: legitimate interests; legal obligation where required.
• Waitlists and enquiries: legitimate interests; steps toward a contract if you ask to buy.
• Ticket sale and administration (registration, eligibility, invoicing, refunds, transfers, badges): contract; legitimate interests for eligibility screening.
• Running the Event: contract; legitimate interests.
• Official photography and short recap clips: legitimate interests; separate consent or release for featured close-ups where required.
• Email about this Event and later editions: consent where we use a tick box; legitimate interests for existing Ticket buyers about the Event they bought.
• Analytics: consent where required.
• Tax, accounting, law-enforcement requests: legal obligation.
• Disputes and chargebacks: legitimate interests; legal obligation.

Buying a Ticket is a contract. Consent is not the only basis for Ticket administration.

You may object to legitimate-interest processing or withdraw consent where we rely on consent. We may still process data we need for the contract or the law.

We do not use your information to make solely automated decisions that produce legal or similarly significant effects.

6. Cookies And Similar Technologies

The Website is hosted on Webflow and served through Cloudflare. Third-party scripts may set cookies or similar identifiers.

• Strictly necessary: host session, security, load balancing, Cloudflare, Turnstile.
• Analytics: Google Tag Manager is present. Measurement tags may run through that container. Non-essential analytics for EEA or UK visitors should run only after consent.
• Functional or content: web fonts and animation libraries, including Google Fonts.
• Marketing or social: only if we embed pixels or ad tags, and not for EEA or UK visitors without consent.

Providers in the current stack include Webflow, Cloudflare (including Turnstile), Google Tag Manager, Google Fonts, and other public JavaScript CDNs. Cloudflare may set a security cookie such as _cfuvid.

You can block or delete cookies in your browser. Strictly necessary tools may still run. We do not currently respond to Do Not Track signals in a standardized way.

7. Event Photography, Film, And The Closed Room

Select portions of the Event may be recorded for operations and archive. We do not release full session recordings or a public video-on-demand library.

We may use official stills and short recap clips from public areas and the Main Stage to operate and market Fraud Fight Club and About Fraud.

Deep Dive rooms and sessions marked off-record are not used in public marketing as featured, identifiable portraits without separate consent.

To opt out of featured marketing close-ups, email info@about-fraud.com before the Event and identify yourself to the official photographer on site. Wide crowd shots may still include you.

Other attendees must not record sessions. Their personal photos in networking areas are their responsibility.

8. Who We Share Information With

• Webflow: Website hosting and forms.
• Cloudflare: CDN, security, Turnstile.
• Google: Tag Manager, Fonts, and Analytics if enabled.
• Brella or a successor Event app: attendee app, directory, meeting booking.
• Email delivery provider named in our emails.
• Payment provider named at checkout.
• Official photographer or videographer.
• Venue and credentialing contractors.
• Professional advisers.

Other ticket holders may see the information you choose to display in the Event app.

Sponsors do not receive the full attendee list from us as a default. Lead capture at a sponsor activation is the sponsor’s responsibility if you choose to engage.

We may disclose information if required by law, to protect rights or safety, to investigate fraud or eligibility abuse, or in a merger or sale of About Fraud, under equivalent protections.

9. International Transfers

We are established in Cyprus. Many attendees are in the United States. Some providers may process data in the United States or other countries outside the EEA and United Kingdom.

Where GDPR or UK GDPR applies, we rely on an adequacy decision if one exists, or on Standard Contractual Clauses (and the UK addendum where required), plus supplementary measures the provider offers.

10. Retention

• Waitlist and marketing contacts: until you unsubscribe, plus a short suppression record.
• Ticket, invoice, and refund records: Event cycle plus the statutory accounting period (up to seven years where tax law requires).
• Eligibility and conduct records for a ban or dispute: as long as the risk remains.
• Official photos and recap clips: while used for archive and B2B marketing, or until a featured-use objection is upheld.
• Server and security logs: a short operational period unless needed for an incident.

When we no longer need information we delete or irreversibly aggregate it.

11. Security

We use reasonable technical and organizational measures, including HTTPS and hosting and network security provided by Webflow and Cloudflare.

No internet transmission is guaranteed secure. Submit Ticket and form data only on the official Website or the official checkout we name.

If a personal-data breach is likely to result in a risk to your rights, we will notify the competent authority and, where the law requires, affected individuals.

12. Children

The Website and Event are for working professionals. We do not knowingly collect information from children under 18. If you believe we have, write to info@about-fraud.com.

13. Your Rights

13.1 EEA, United Kingdom, and Switzerland

Subject to legal limits, you may access, correct, or delete your information, restrict or object to processing, withdraw consent, receive a portable copy of data you provided, and lodge a complaint with a supervisory authority.

Lead authority:

Office of the Commissioner for Personal Data Protection
Kypranoros 15, 1061 Nicosia, Cyprus
P.O. Box 23378, 1682 Nicosia
commissioner@dataprotection.gov.cy
https://www.dataprotection.gov.cy

You may also complain to the authority where you live or work.

13.2 United States

US attendees have the rights in section 3. Other state laws may provide similar access, deletion, correction, and appeal rights. Email info@about-fraud.com.

13.3 How to ask

Email info@about-fraud.com. We may need to verify you. We respond within the time the applicable law sets.

14. Email

Waitlist and Ticket buyers receive operational messages (confirmation, logistics, app access). Those are not marketing.

Marketing emails about future editions are sent only where we have consent or another lawful basis. Every marketing email includes an unsubscribe method.

15. Links And Third-Party Sites

The Website links to hotels, maps, LinkedIn, about-fraud.com, payment pages, and the Event app. Their privacy notices govern what they collect.

16. Changes

We may update this Policy. The date at the top will change. Material changes that affect Ticket holders during an active sales cycle will also be flagged by email where we have an address.

17. Contact

About Fraud (CY) Ltd
Spyrou Kyprianou Avenue 16
H&S Centre, Office 15
6058 Larnaca, Cyprus
info@about-fraud.com
+357 95 955 651