Privacy Policy

Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website, create an account, or use our services. It also explains your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) where relevant.

Information We Collect

We collect information that is necessary to provide services, meet legal obligations, and improve your experience. The types of information we collect include:

Account and identity information: your name, date of birth, email address, postal address, and any other identity information you provide when registering or verifying your account.
Verification documents: government-issued ID, proof of address, and other documents you submit to confirm your identity when required for verification or compliance checks.
Communications: correspondence you send and receive with our support team, including emails and chat transcripts.
Technical and usage data: device identifiers, IP address, browser type, operating system, pages viewed, features used, interaction data, and diagnostic information collected automatically when you use our site.
Location data: approximate location derived from IP address or other technical means to enforce geographic restrictions and comply with legal obligations.
Preferences and settings: language, display preferences, and other information you choose to provide to personalise your experience.

How We Use Your Personal Data

We use personal data for a range of purposes that enable us to operate our site, meet legal requirements, and provide you with services and support. These purposes include:

Account setup and management: creating and maintaining your account, authenticating your identity, and handling account administration.
Verification and compliance: performing identity checks, age verification, and other compliance-related procedures required by law or our internal policies.
Customer support: responding to inquiries, investigating complaints, and resolving issues you raise with our support team.
Security and fraud prevention: detecting, preventing, and responding to suspicious activity, fraud, abuse, and other security incidents.
Service improvement and analytics: analysing usage patterns, improving site performance, and developing new features.
Communications: sending service messages, updates, operational notices, and, where you have given consent, marketing communications.
Enforcing terms and legal obligations: enforcing our terms of use and responding to legal requests from authorities or to defend our rights.
Responsible use and protections: implementing age limits, self-exclusion requests, duty-of-care measures, and other responsible-use tools that you may activate or that we apply where required.

Legal Basis for Processing (GDPR)

Where the GDPR applies, we process your personal data on the following legal grounds:

Contract performance: processing necessary to perform our contract with you, such as account provisioning and service delivery.
Legal obligation: processing to comply with applicable laws and regulatory requirements, including identity verification and record-keeping obligations.
Legitimate interests: processing for fraud prevention, security, service improvement, and enforcing our terms, balanced against your rights and freedoms.
Consent: where we ask for your consent (for example, for certain marketing communications or optional tracking), you may withdraw consent at any time.

Sharing and Disclosure of Personal Data

We may share personal data with third parties where necessary to provide services, comply with the law, or protect our rights. Typical categories of recipients include:

Service providers: external companies that perform services on our behalf, such as technical hosting, analytics, and customer support.
Compliance and verification partners: organisations involved in identity verification, fraud detection, and regulatory compliance.
Legal and regulatory authorities: when required by law, to comply with legal requests, law enforcement, or to respond to claims and disputes.
Business transfers: in connection with a merger, sale, reorganisation or acquisition of assets, your personal data may be transferred as part of that transaction subject to appropriate safeguards.
Alternative dispute resolution and complaints: where you raise a dispute or complaint that requires escalation to a designated external body, relevant personal data may be disclosed to that body for resolution.

We require all recipients to process personal data in accordance with applicable privacy standards and only for permitted purposes.

International Transfers

Your personal data may be processed in jurisdictions other than the one where you live. When we transfer your data across borders, we put appropriate safeguards in place to protect it. Those safeguards may include contractual clauses, internal policies, and other measures required by applicable data protection laws.

Cookies and Similar Technologies

We and our partners use cookies and similar tracking technologies to operate our website, remember preferences, measure performance, and personalise content. You can manage cookie settings through your browser or device. Where required by law, we will seek your consent before using non-essential cookies.

Data Security

We implement reasonable organisational and technical measures to safeguard personal data against unauthorised access, loss, misuse, or alteration. These measures are designed to protect the confidentiality and integrity of your information. No system is completely secure, so if you suspect misuse of your account, contact us immediately.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the nature of the data and legal requirements. When data is no longer needed, we will securely delete or anonymise it.

Your Rights

Depending on applicable law, you may have the following rights regarding your personal data:

Access: request a copy of personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete information.
Erasure: request deletion of your personal data in certain circumstances.
Restriction: request that we limit how we use your data in certain situations.
Portability: where applicable, request a portable copy of data you provided to us.
Object: object to certain types of processing, including profiling and direct marketing.
Withdraw consent: withdraw any consent you have given for processing at any time without affecting processing already performed.

To exercise your rights, contact us using the details below. We may need to verify your identity before acting on a request. You also have the right to lodge a complaint with a supervisory authority if you consider our processing infringes applicable law.

Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal data from persons under the age required by law. If we become aware that a minor has provided us with personal data, we will take steps to delete that information as soon as practicable.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our site and indicate the effective date. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.