Launch draft · 22 August 2026
Privacy notice
This notice explains how YourDate.lol intends to collect and use personal information. It is written for a UK launch and must be checked against the final business, hosting, age-assurance and payment setup.
Who controls your information
The data controller will be the person or company operating YourDate.lol. The controller’s legal identity, service address and privacy contact are launch blockers and will be published here before real registrations open.
Information we collect
- Account information supplied by the sign-in provider, including email and display name.
- Private date of birth and the public age calculated from it.
- Public profile information: first name, gender, dating preference, city, country, biography, Instagram handle and profile photo.
- Boost payments, refunds, payment references and ranking history. Stripe handles card details; YourDate.lol does not receive full card numbers.
- Hearts, profile views, Instagram clicks, reports, verification requests, security events and approximate session activity.
- Messages sent to support or through complaints and rights-request channels.
Sensitive dating information
Gender and “interested in” information may reveal sexual orientation or sex-life information. We ask for separate explicit consent before publishing or filtering by these fields. You may withdraw that consent by deleting your profile; withdrawal does not make earlier lawful processing unlawful.
Why we use it
- Contract: to create profiles, supply paid visibility and keep transaction records.
- Explicit consent: to process and publicly display sensitive dating preferences.
- Legitimate interests: to prevent fraud, secure the service, measure basic performance and moderate harmful conduct, after balancing these interests against user rights.
- Legal obligation: for tax, accounting, consumer-rights, regulatory and lawful-authority requirements.
Who receives it
Information may be processed by hosting and storage providers, the sign-in provider, Stripe when payments are activated, email/support providers, professional advisers and public authorities where legally required. Instagram receives information only when you follow a link or complete an approved verification connection. We never ask for your Instagram password.
Public information
Your profile, calculated age, Instagram handle, location, biography, Hearts, views, verification status, ranking and boost total are public. Your email and full date of birth are not public.
Retention
Active account and profile information is kept while the account exists. Deleted profile content is scheduled for removal from active systems within 30 days, subject to backups and legal holds. Payment, refund and fraud records may be retained for up to seven years. Open safety reports are kept while investigated and then only as long as needed for legal, safeguarding or repeat-abuse purposes. Final retention periods must be confirmed before launch.
Your rights
Depending on the legal basis, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent. A working electronic privacy-request and complaint channel must be published before launch. You may also complain to the UK Information Commissioner’s Office.
Adults only
The service is intended only for people aged 18 or over. A self-declared date of birth is not being represented as highly effective age assurance. The required children’s-access assessment and final age-assurance approach must be completed before the service opens publicly.
Security and international transfers
We use access controls, secret-managed payment credentials, signed webhooks, upload limits and audit records. No service can guarantee absolute security. Any international transfers must use a lawful UK transfer mechanism and be named here once the final providers are confirmed.
Changes
Material changes will be dated and communicated where required. The consent and policy version accepted with each profile is recorded.