Privacy policy

Gaymeetup Ltd ("we", "us", "our") operates the Gaymeetup platform. We are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact our Data Protection Officer: privacy@gaymeetup.co.uk

We collect the following categories of personal data:

• Account data — name, email address, date of birth, password (hashed, never stored in plain text)
• Identity verification — government-issued ID and selfie photograph, used solely to verify your identity
• Profile data — display name, city, bio, profile photo, interests, looking-for status
• Payment data — transaction records and top-up amounts. Card details are handled entirely by Stripe and PayPal — we never see or store raw card numbers
• Communications — messages and media you send through the platform
• Usage data — log data, IP address, device type, session activity

• To create and manage your account (contract)
• To verify your identity and prevent fraud (legal obligation + legitimate interest)
• To process payments and maintain your wallet balance (contract)
• To deliver messages and media between members (contract)
• To respond to reports and enforce our community guidelines (legitimate interest)
• To send transactional emails such as receipts and approval notices (contract)
• To comply with legal obligations including anti-money-laundering checks

Your ID document and selfie are encrypted at rest using AES-256 encryption and stored on UK-based secure servers.

They are reviewed only by our human verification team during the approval process. Other members can never see your ID.

Retention: We retain encrypted ID documents and selfies for the lifetime of your account and for a period of 7 years after account closure. This is necessary to comply with our legal obligations, prevent fraud, and cooperate with law enforcement agencies in cases of criminal activity, safeguarding concerns, or court orders.

Controlled access: Access to stored ID documents is strictly controlled. Any access attempt by our team requires a reason, generates an audit log entry, and requires approval via a secure time-limited email link. We do not access ID documents except when required for a specific legitimate purpose.

Law enforcement: We will disclose ID documents and associated account information to law enforcement agencies when required by law, court order, or where we reasonably believe disclosure is necessary to protect the safety of any person.

• Account and profile data — for the lifetime of your account, plus 30 days after deletion
• ID documents — deleted within 30 days of review decision
• Transaction records — 7 years (UK financial regulation)
• Messages — until you or the recipient deletes them, or account closure

Under UK GDPR you have the right to: access your personal data, correct inaccurate data, erase your data, restrict processing, data portability, and object to processing.

Email privacy@gaymeetup.co.uk to exercise any right. You may also complain to the ICO at ico.org.uk.

• Stripe — payment processing (PCI DSS Level 1). Stripe privacy policy
• PayPal — payment processing. PayPal privacy policy
• IONOS — server hosting and email delivery

We use only essential cookies and localStorage to keep you logged in. We do not use advertising or tracking cookies. No third-party analytics scripts are loaded.