FindAThreesome UK ("we", "our", or "us") is dedicated to protecting your fundamental right to personal privacy and data autonomy. This Privacy Notice outlines how we process personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller Information
FindAThreesome UK acts as the Data Controller in respect of personal information processed through our digital services. You may contact our Data Protection Officer (DPO) regarding any privacy inquiry at our secure contact desk.
2. Categories of Information We Process
- Account Credentials: Pseudonymous username, encrypted email address, hashed password, and confirmed age verification indicator (strictly 18+).
- Match Preferences: Orientation (couple or single), matching criteria, boundary parameters, and geographical district / postcode prefix.
- Media & Photo Vault Data: Profile photos provided voluntarily. We offer automated facial obscuring tools; raw photos in private albums are stored encrypted and revealed strictly with user consent.
- Technical Telemetry: Essential session cookies, IP addresses (hashed for abuse prevention), and browser user-agent tokens necessary for cybersecurity and DDoS mitigation.
3. Lawful Bases for Data Processing
We process your data strictly under the following lawful grounds recognised by UK GDPR Article 6:
- Contractual Necessity: Delivering matchmaking, boundary alignment, and account access services requested by you.
- Explicit Consent (Special Category Data): Sexual orientation and relationship preference data constitutes special category personal data under Article 9; processing is conducted solely with your explicit, revocable consent.
- Legitimate Interests: Preventing fraud, enforcing community standards against harassment, and maintaining cybersecurity.
- Legal Obligations: Compliance with applicable UK law enforcement requirements, tax reporting, and child safety mandates.
4. Data Minimisation and Storage Limitations
We practice strict data minimisation. Profiles that have remained inactive for twelve consecutive months are automatically queued for irreversible purge. Members can trigger instantaneous and complete account deletion through their profile settings at any moment.
5. Third-Party Disclosures & Physical Isolation
We do not sell, rent, or trade your personal information with third-party advertisers or data brokers. All payment transactions are handled through accredited PCI-DSS Level 1 compliant processing gateways utilizing neutral, non-descriptive bank statement billing.
6. Your Statutory Rights Under UK GDPR
As a resident of the United Kingdom, you hold the following fundamental rights:
- Right of Access: Request a full copy of the personal data we hold concerning you.
- Right to Rectification: Request correction of any inaccurate or outdated information.
- Right to Erasure ("Right to be Forgotten"): Request immediate deletion of your profile and media.
- Right to Restrict Processing & Data Portability: Obtain your data in a structured, machine-readable JSON format.
- Right to Lodge a Complaint: You have the right to lodge a formal complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.
7. Updates to this Notice
We may revise this Privacy Notice periodically to reflect technological enhancements or legal modifications. Substantial changes will be communicated via in-app notification prior to implementation.