Privacy Policy

1. Introduction

SweetTrans ("we", "us", "our") is committed to protecting your personal data. This privacy policy explains how we collect, use, store and share your information when you use our website and services at sweettrans.com (the "Service").

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have questions about this policy, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

• Account information: username, email address, password, date of birth, gender identity, location and what you're looking for.
• Profile information: photos, bio, interests, physical attributes and arrangement preferences.
• Communications: messages you send to other members and correspondence with our support team.
• Verification data: photos, ID documents and other materials submitted for profile verification.
• Payment information: billing details processed by our third-party payment provider. We do not store full card numbers.

2.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, referring URL, pages visited, time spent and interaction patterns.
• Cookies: strictly necessary cookies for authentication and session management. See our Cookie Policy for details.
• Location data: approximate location derived from your IP address, or precise location if you grant permission.

3. How We Use Your Information

We process your personal data on the following lawful bases under UK GDPR:

Purpose	Lawful Basis
Providing the Service (account creation, matching, messaging)	Contract performance (Article 6(1)(b))
Profile verification and fraud prevention	Legitimate interests (Article 6(1)(f))
Safety and moderation (preventing abuse, enforcing terms)	Legitimate interests (Article 6(1)(f))
Sending service-related emails (password resets, security alerts)	Contract performance (Article 6(1)(b))
Marketing communications (where opted in)	Consent (Article 6(1)(a))
Analytics and service improvement	Legitimate interests (Article 6(1)(f))
Legal compliance (responding to lawful requests, legal obligations)	Legal obligation (Article 6(1)(c))

3.1 Special Category Data

Gender identity information is considered special category data under UK GDPR. We process this data based on your explicit consent (Article 9(2)(a)), which you provide when creating your profile. You may withdraw this consent at any time by deleting your account.

4. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

• With other members: your public profile information (username, photos, bio, location, preferences) is visible to other registered members.
• Service providers: hosting, email delivery, payment processing and analytics providers who process data on our behalf under data processing agreements.
• Legal requirements: when required by law, court order or to protect the safety of our users.
• Business transfers: in the event of a merger, acquisition or sale of assets, with appropriate protections.

5. Data Retention

• Active accounts: we retain your data for as long as your account is active.
• Deleted accounts: profile data is deleted within 30 days of account deletion. Some data may be retained for up to 6 months for safety, fraud prevention and legal compliance.
• Messages: deleted when both participants have deleted their accounts.
• Verification documents: deleted within 90 days of successful verification.
• Server logs: retained for up to 12 months.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: request a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data ("right to be forgotten").
• Right to restrict processing: limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email [email protected]. We will respond within one month.

7. International Transfers

Your data is primarily stored on servers within the United Kingdom. Where data is transferred outside the UK, we ensure adequate protections are in place through Standard Contractual Clauses or adequacy decisions recognised by the UK Government.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing (bcrypt)
• Regular security assessments and penetration testing
• Access controls and staff training
• Incident response procedures

9. Children

SweetTrans is for adults aged 18 and over only. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, please contact us immediately at [email protected].

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be notified via email or a prominent notice on the Service. The "Last updated" date at the top reflects the most recent revision.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

12. Contact Us

For any privacy-related questions or requests:

• Email: [email protected]
• Or use our Contact Form