מדיניות פרטיות

1. Data We Collect

Personal Information

When you register and use our services, we collect:

• Name, email address, date of birth
• Phone number (optional)
• Gender and gender preferences
• City and country of residence
• Profile information you choose to provide
• Event attendance and participation records
• Your match selections and preferences

Payment Information

We use Stripe to process payments. We do not store your full credit card details on our servers. Stripe collects and processes payment information in accordance with their privacy policy.

Automatically Collected Information

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies

2. How We Use Your Data

We use your information to:

• Create and manage your account
• Process event bookings and payments
• Match you with other participants based on mutual interest
• Communicate with you about events, bookings, and matches
• Send you marketing communications (with your consent)
• Improve our services and user experience
• Prevent fraud and ensure platform security
• Comply with legal obligations
• Analyze usage patterns and trends

3. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract: Processing necessary to fulfill our contract with you (e.g., providing event services)
• Consent: You have given explicit consent for specific purposes (e.g., marketing communications)
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, service improvement)
• Legal Obligation: Processing required to comply with legal requirements

4. Data Sharing and Disclosure

With Other Users

When you match with another participant, we share your contact information (name, email) with them so you can connect. This is a core part of our service.

With Service Providers

We share data with trusted third-party service providers who help us operate:

• PostgreSQL: Database services (data stored in EU region)
• Stripe: Payment processing
• Email service providers: For sending notifications and communications

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. You will be notified of any such change.

We never sell your personal data to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Understand how you use our website
• Provide personalized content

You can control cookie settings through your browser. Disabling cookies may affect website functionality.

6. Data Retention

We retain your data for as long as:

• Your account is active
• Needed to provide you services
• Required by law (e.g., tax records, payment information)
• Necessary for legitimate business purposes (e.g., fraud prevention)

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we're legally required to retain it.

7. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restrict Processing: Request that we limit how we use your data
• Data Portability: Request your data in a machine-readable format
• Object: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Complain: Lodge a complaint with a supervisory authority (ICO in the UK)

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data is primarily stored in the EU. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

10. Children's Privacy

Our services are not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our website. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us About Privacy

To exercise your rights or if you have questions about this Privacy Policy or our data practices, please contact us at:

Data Protection Contact:
Email: privacy@thespeeddating.co.uk

Please allow up to 30 days for us to respond to your request.