Legal · Data Protection
Privacy Policy
Built for principal-level engagements. Aligned with the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA/CPRA) and the UAE Personal Data Protection Law (PDPL).
Effective April 22, 2026
1. Data Controller
FAME 911 (“FAME 911”, “we”, “us”, “our”) is the controller of personal data processed through this website and through any intake, retainer, or advisory engagement. Questions, requests, or formal data-subject notices should be addressed to info@fame911.com. Where required by law, our data protection point of contact responds within the statutory timeframe applicable to the requester’s jurisdiction.
2. Scope
This policy applies to personal data collected through the FAME 911 website, intake channels (WhatsApp, email, telephone, the AI triage assistant, and the operator dashboard), and during the delivery of crisis communications, reputation, narrative control, suppression, and advisory services. Separate engagement letters and non-disclosure agreements (NDAs) govern the confidentiality of case material and supersede this policy to the extent of any conflict in the client’s favour.
3. Categories of Data We Process
- Identity & contact data — full legal name, pseudonyms or stage names, email address, phone number, organisation, legal counsel contact, messaging handles.
- Engagement data — facts of the situation provided by the client, timeline, threat actors, publications involved, existing legal posture, desired outcomes.
- Sensitive data (when voluntarily provided) — information that may reveal legal exposure, medical or mental-health detail, criminal allegations, family-member identifiers, security threats or biometric attributes. We process such data only where strictly necessary to perform the engagement and on the lawful basis of the client’s explicit consent, substantial public interest, or the establishment/exercise/defence of legal claims (GDPR Art. 9(2)(a), (g), (f)).
- Technical data — server logs (IP address, user agent, request timestamps), limited analytics retained for security and fraud prevention, and operational metadata from messaging platforms via our Unipile integration.
- AI triage transcripts — the in-widget assistant stores conversation turns in your browser and (if a case is escalated) in our encrypted operator dashboard, scoped to the core crisis team only.
4. Lawful Bases for Processing
We rely on the following lawful bases under the GDPR and equivalent regimes:
- Contract (Art. 6(1)(b)) — to respond to inbound inquiries, prepare proposals, execute engagement letters, and deliver the contracted services.
- Legitimate interests (Art. 6(1)(f)) — website security, prevention of abuse, due diligence on counter-parties, and the operation of our internal dashboards. We balance these interests against the rights of data subjects and document the assessment.
- Consent (Art. 6(1)(a); Art. 9(2)(a)) — for any optional messaging, newsletters, or processing of sensitive categories. Consent is always opt-in and may be withdrawn at any time without affecting prior processing.
- Legal claims & compliance (Art. 6(1)(c); Art. 9(2)(f)) — to comply with court orders, preserve evidence, and defend against or pursue legal claims.
5. Purposes of Use
- Confidential intake, scoping, and triage of a crisis or reputation matter.
- Coordinated response with your legal counsel, security team, family office or investor relations team.
- Media outreach, narrative architecture, search-result suppression and strategic placements.
- Operational security of our platforms and the integrity of the operator dashboard.
- Fulfilling regulatory, tax, and audit obligations.
We do not use personal data for behavioural advertising, we do not sell personal data, and we do not train external AI models on client content.
6. Recipients & Disclosures
Personal data may be disclosed to:
- The core FAME 911 crisis team and senior strategists named in the engagement letter.
- Vetted processors under data processing agreements — infrastructure providers (hosting, database, email routing), our messaging aggregator (Unipile), AI inference providers operating under zero-retention terms, and payment/accounting partners.
- Your own counsel, publicists, security personnel or family office, on your written instruction.
- Regulators, courts, or law-enforcement bodies where disclosure is legally compelled, with scope and notice to the client where lawfully permitted.
A current list of sub-processors is available on request. We require every sub-processor to implement at least the same level of security and confidentiality set out in this policy.
7. International Transfers
FAME 911 operates across London, Dubai and Los Angeles. Personal data may be processed outside the European Economic Area, the United Kingdom or the UAE. Where required, we implement an appropriate transfer mechanism: the EU Standard Contractual Clauses (2021), the UK International Data Transfer Addendum, and supplementary technical measures including encryption-in-transit and at-rest and access controls scoped to the core crisis team.
8. Retention
We retain personal data only as long as necessary for the purpose for which it was collected, plus any additional period required to satisfy legal, regulatory, tax or insurance obligations. Intake material from inquiries that do not become engagements is reviewed for deletion within 180 days. Engagement records are retained for the duration of the applicable statute of limitations in the relevant jurisdictions, then purged or fully anonymised.
9. Security Measures
Our controls include, without limitation:
- TLS 1.2+ in transit on every endpoint; HSTS and modern cipher suites.
- Encryption at rest of operator databases and backups.
- HMAC-signed session cookies and server-side authentication for the operator dashboard.
- Role-based access control — only the core crisis team sees case material.
- Rate-limiting and abuse detection on all public endpoints.
- Vendor risk review before any sub-processor is introduced.
- Documented incident-response protocol with a 72-hour breach-notification target.
10. Your Rights
Subject to the law of your jurisdiction, you may exercise the following rights:
- Right of access to the personal data we hold about you.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) where applicable.
- Right to restriction of processing.
- Right to object to processing based on legitimate interests.
- Right to data portability in a machine-readable format.
- Right to withdraw consent at any time, without affecting prior lawful processing.
- Right to lodge a complaint with a supervisory authority — your local data-protection regulator (e.g. the ICO in the UK, an EU supervisory authority, the California Privacy Protection Agency, or the UAE Data Office).
Requests are honoured without undue delay and, in any event, within the statutory period applicable to the requester. Identity verification may be required for sensitive requests.
11. Minors
FAME 911 services are designed for adults and for principals engaged through authorised representatives. We do not knowingly collect personal data from children under the age of 16. Where a crisis involves a minor (for example, a family-office protection brief), processing is carried out solely on the lawful instruction of the parent or legal guardian and under heightened safeguards.
12. Cookies & Similar Technologies
This site uses a minimal set of strictly necessary cookies and local storage items — principally the theme preference (fame911-theme) and, during a session, the AI assistant’s conversation state. We do not use advertising cookies and we do not load third-party trackers without your prior consent.
13. Automated Decision-Making & AI Triage
Our intake assistant uses large-language-model inference to suggest a triage path, never to make a final legal or contractual decision about you. A human senior strategist reviews every case before an engagement is opened. You may at any time request a purely human intake channel by contacting us via WhatsApp, telephone or email.
14. Changes to This Policy
We may update this policy to reflect changes to our services or to applicable law. The “Effective” date at the top of this page reflects the latest revision. Material changes are communicated to active-engagement clients in writing.
15. Contact
Data-protection inquiries, access requests, or complaints: info@fame911.com. FAME 911 — London · Dubai · Los Angeles.
This document is a plain-language statement of our privacy practices and is not legal advice. The English version prevails in the event of any translation conflict.