Privacy Policy

DateFoundry · Privacy Policy · v2.1 · Effective 8 October 2026

1. Introduction and scope

This Privacy Policy explains how AMORIAX LTD, trading as DateFoundry, handles personal data of visitors, account holders, people appearing in member reports and individuals who contact us. DateFoundry provides adult dating profiles, search, matching and messaging, together with paid digital actions such as tokens, packs of likes and virtual gifts. These functions can involve intimate information; we therefore describe profile visibility, consent choices, safeguards and retention separately from normal account administration. This notice covers information processed through datefoundry.com and communications associated with it, not the independent practices of unrelated websites linked by members.

You should read this notice before creating a profile, especially before disclosing your religious beliefs, orientation, relationships or intimate information in fields, photographs or messages. You can often choose not to complete optional fields, although some preferences are needed to provide the matching features you request. Our Terms & Conditions and Cookie Policy explain related service and device-storage rules; those documents do not replace the privacy rights set out here.

2. Data controller and contact

AMORIAX LTD is the controller of personal data for the DateFoundry functions it determines. It is registered under company number 17502222 and may be contacted at info@datefoundry.com or at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Requests about privacy, access, rectification, objection, consent withdrawal or erasure may use that address. A separate data protection officer is not identified in this notice; communications are directed to the operator's privacy contact.

Independent card issuers, payment processors and other providers may be separate controllers for their own statutory compliance or transaction-security activities. We provide relevant information about processing when it takes place, including any distinct provider notice made available at payment. A processor acting on our instructions must be subject to appropriate contractual safeguards. You may make a request without providing your password or complete payment-card credentials.

3. Age position and children

DateFoundry is an adult-only dating service for persons aged 18 or over. It is not directed to children, and a parent or guardian cannot permit an underage child to use an adult profile. Registration may involve declaration of age and proportionate checks where misuse is suspected. If we have reason to believe an Account belongs to a minor, we may restrict it and assess removal of associated information, while preserving the minimum evidence needed to investigate serious safeguarding concerns or meet a legal obligation.

If you believe a child has registered or is featured in content, notify info@datefoundry.com with the profile location and reason for concern rather than circulating the content. We take care not to disclose an affected child's data while investigating. Any handling of age-verification information is limited to an appropriate purpose and retention period, subject to security and data-minimisation requirements.

This 18-and-over position is a service eligibility rule rather than a substitute for assessing the age or vulnerability of individuals whose information appears in reports or user messages. If an underage profile is identified, processing of any necessary incident record must be minimised and directed to safeguarding, enforcement or legal purposes; it must not be repurposed for dating recommendations or direct marketing.

4. Categories of personal data

The categories include sign-in identifiers, profile data, photographs, search preferences, likes, matches, message metadata and submitted messages, payment references, entitlement balances, device information, safety reports and customer-service correspondence. We do not require a postal shipping address to deliver an intangible product. The account-to-entitlement ledger links a transaction to the right to perform an action or display a gift, and is necessary to resolve delivery disputes and reversals. We may also infer technical indicators of suspicious automated use from logs, subject to proportionate controls.

Some information voluntarily supplied or reasonably inferred from dating preferences, messages or profile choices may constitute special-category personal data under the UK GDPR, including information about sexual orientation, sex life, religion or health. Such data receives additional safeguards and requires an applicable Article 6 lawful basis and a separate Article 9 condition. Explicit consent for optional sensitive profile functions should be distinct from accepting general Terms and from consenting to advertising cookies.

A preference for partners of a particular gender is not automatically proof of a user’s sexual orientation, yet preference combinations, messages, photographs and religious indicators can reveal or permit sensitive inferences. Profile visibility settings do not by themselves make this information freely reusable for advertising. We distinguish optional public profile publication from internal matching, fraud investigation and compliance records when deciding who may see what.

Categories of personal data

5. Sources of personal data

We collect information when you register, update a profile, upload media, send a message, purchase digital entitlements, change preferences or contact customer support. Other members may provide information about you in a message or a safety report; we do not treat an unverified allegation as established fact. Devices and browsers automatically send technical metadata needed to deliver pages and protect a session. Our payment provider may supply a transaction status, receipt reference, masked account information or fraud signal without disclosing full card credentials to us.

With your choice and as permitted by law, we may receive referral, advertising or analytics signals associated with a campaign or visit. We distinguish these optional uses from essential session and security information. A third-party service linked from a profile is responsible for its own collection once you leave DateFoundry, and its terms should be reviewed separately.

6. How we use personal data

The core purposes are account establishment, authentication, presentation of profile information to audiences you select, matching search preferences, messaging, crediting digital purchases, investigating failed deliveries and preventing account abuse. We use transaction records to issue receipts, verify balances, make lawful refunds and respond accurately to payment disputes. Member reports may be processed to remove unlawful material, restrict a threatening user or protect the safety of another member. Each activity should involve only information reasonably needed for that purpose.

Separate optional purposes include member communications and personalised or analytical functionality for which consent is required. We do not treat a purchase or a general contractual acceptance as permission for all profiling, targeted advertising or processing of sensitive dating information. We may aggregate or anonymise information for service performance when the result cannot reasonably be used to identify a person. The lawful bases and retention schedule below differentiate contractual uses from legal duties and optional activities.

We do not use purchases of gifts or likes as evidence that a recipient has consented to direct contact or that the buyer and recipient have a relationship. The ledger is used to reconcile the payment and action, whereas member-content access is controlled separately. Where an allegation concerns stalking or coercion, relevant material may be examined by a limited authorised review function rather than broadly shared with other members.

7. Lawful bases and sensitive-information conditions

Processing needed to create an Account, deliver messaging features or fulfil a purchased digital right may rely on performance of a contract under Article 6(1)(b) of the UK GDPR. Security, abuse prevention, platform integrity and service improvement may rely on legitimate interests where our documented balancing assessment supports the processing and the interests or rights of users do not override them. Retention of accounting evidence, legally required responses and cooperation with lawful authorities may rely on a legal obligation. Consent is used where a genuine affirmative choice is required, especially optional non-exempt tracking and marketing.

Sensitive fields are not bundled into a single permission for profile display, recommendations, partner search and advertising. A person may choose which sensitive details appear to other members where the feature supports that choice, and may contact us to stop a specific optional use. A separate safeguarding or legal-claims record is subject to purpose limitation, restricted access and a suitable Article 9 condition rather than indefinite reuse for matchmaking.

Processing information that reveals sexual orientation, sex life, religion, health or other special-category matters requires both a lawful basis under Article 6 UK GDPR and a separate condition under Article 9. For optional profile display and sensitive matching choices, we request clear, specific and separately recorded explicit consent where that condition is appropriate; users must be able to withdraw it without being coerced into wider publication. Other Article 9 conditions are used only where their legal requirements actually apply, such as establishing or defending legal claims, and not as a general substitute for choice.

Lawful bases

8. Payments and checkout

Purchases of tokens, packs of likes and virtual gifts produce transaction identifiers, the amount and currency authorised, the product, the relevant Account and the status of fulfilment or reversal. Payment-card data should be entered only through the designated secure checkout provided by the relevant payment provider, never into a profile message. The provider may carry out authentication, fraud screening and card-network compliance as an independent controller or processor in accordance with its role. DateFoundry uses the information necessary to reconcile orders, respond to disputes and enforce a user's entitlements.

Where payment credentials are tokenised for an expressly disclosed recurring membership, any billing consent and cancellation arrangements must be distinct from a one-time virtual-item order. Full card numbers or security codes should not be submitted in emails to us. If you suspect an unauthorised payment, notify your issuer immediately and contact DateFoundry with the date, amount and masked card information. The Payment Policy explains the purchase process, including possible verification holds.

The payment processor may act as an independent controller for anti-fraud, statutory payment and network functions, while supplying the merchant with tokenised references and transaction status needed to deliver entitlements. We require a lawful data flow for payment details and do not solicit primary account numbers or card verification codes by ordinary email. The presence of a hosted card-entry page alone should not be interpreted as proof that every payment integration has the same roles or retention settings.

9. Cookies and similar technologies

Essential session, authentication, security and payment-flow tools may be used to provide functions specifically requested or to safeguard the Service. Other identifiers used to measure audiences, personalise communications or target advertising are governed by the Cookie Policy and applicable requirements of the Privacy and Electronic Communications Regulations. When consent is required, such technology must not be enabled before a valid choice. Any statutory exception for qualifying technologies requires its own conditions and appropriate user controls.

You can review and revise device-level choices through the applicable cookie-preference interface, as well as through browser controls where supported. Turning off necessary storage may disrupt login or purchase reconciliation. Withdrawing optional cookie consent does not affect the lawfulness of earlier permitted processing, but should stop the relevant future access or storage. Cookie choices do not erase ordinary order records required for contractual or statutory purposes.

10. Sharing of personal data

Information is displayed to other members only to the extent supported by the intended profile, messaging and audience settings. A message recipient can retain or report content independently; therefore you should avoid distributing material that would put you at risk if copied. We may share limited data with providers supplying hosting, authentication, payment processing, transactional messaging, customer support, content moderation or security, subject to necessity, contractual measures and access restrictions. Providers do not receive permission to reuse sensitive member content for their own unrelated marketing merely because they assist the Service.

We may disclose relevant records to a card issuer in a genuine payment dispute, to professional advisers under confidentiality, or to competent authorities when lawfully required. A credible imminent threat may justify a proportionate safety disclosure permitted by law. We do not publish complainants' identities merely because they report abuse. Corporate restructuring may require a lawful transfer of information accompanied by appropriate notice and safeguards.

A person receiving a Virtual Gift may see the sender identity and gift representation that the feature is designed to show, but this is not an instruction to disclose the buyer’s payment card, billing address or support correspondence. Third-party reports can contain allegations about another member; those allegations are handled under restricted investigation access and are not automatically visible to the reported person in raw form.

11. International transfers

DateFoundry is operated from the United Kingdom but visitors, other members and service providers may be in other countries. An international transfer of personal data is made only where an applicable legal mechanism permits it, such as UK adequacy regulations, an International Data Transfer Agreement or the UK Addendum to standard contractual clauses, with supplementary measures when needed. Public profile display to members in other places is different from giving a processor unrestricted access to internal records, and we assess both the audience and processing context.

Where a provider processes data outside the UK, we seek sufficient information on destination, purpose, access, security and onward transfers before using it. You may request information about applicable safeguards at info@datefoundry.com. We avoid publishing confidential security measures or details that would expose other users, while explaining the lawful framework and available protections.

12. Data retention

We keep information for as long as needed for the identified purpose, with separate clocks for active profiles, dormant Accounts, transaction records, abuse reports and support cases. Accounts without activity for 24 months may be reviewed for closure; following verified closure, ordinary profile content and messages are targeted for deletion or de-identification within 90 days unless required for a legal claim, an investigation or another valid purpose. Tax and financial records are generally retained for six years after the relevant accounting period, subject to a legally mandated longer period or defensible dispute hold.

Routine security logs are ordinarily retained for up to 90 days and support correspondence for up to 24 months after case closure, unless a specific investigation reasonably requires preservation. Information supporting a chargeback, safeguarding allegation or lawful disclosure may be held for the duration reasonably necessary to resolve that event and applicable limitation periods; access is restricted and reviewed. Backups are overwritten through their established lifecycle and are not routinely used to restore a closed profile. A retention request may be answered with the relevant category and criterion.

Retention limits apply by purpose and record type. Deleting the public display of a dating profile does not necessarily remove a payment receipt, documented safety complaint or legal hold. Conversely, keeping a narrow transaction record is not a basis to retain unrelated photographs or the complete message history indefinitely. A request can identify the particular item to contest, and any exception to deletion is applied to the smallest defensible set of information.

Retention

13. Data security

We use access controls, authentication, role separation, appropriate transmission security, software maintenance and incident-response procedures to reduce unauthorised access or loss. Dating content is particularly sensitive, so members should use unique passwords, review privacy settings and report suspicious requests for photographs, money or off-platform communication. No online service can guarantee absolute security, but a reasonable protective standard applies and must be reviewed as threats change.

We restrict access to payment and safety records to personnel who need them, retain evidence of significant administrative actions and apply safeguards when passing information to suppliers. Where a personal-data breach meets a legal reporting threshold, we will inform the appropriate regulator and affected individuals within the applicable legal requirements. Users should avoid emailing passwords or complete card numbers and should report compromised Accounts as soon as reasonably possible.

14. Your privacy rights

Depending on the circumstances, you may request access, rectification, erasure, restriction, portability or object to a use based on legitimate interests; you may withdraw consent for a consent-based activity. Rights can be limited by lawful exemptions, another person's privacy, the need to preserve legal evidence or an overriding obligation. We may confirm your identity proportionately before disclosing sensitive material. The statutory response period is generally one month, subject to lawful extensions and conditions. We will explain a refusal and available remedies when required.

You also have the right to complain to the UK Information Commissioner's Office. Contacting us first may allow a practical correction, but is not a condition of regulatory access. If you are in another territory, additional mandatory rights may apply. A profile deletion request does not automatically cancel a pending transaction or erase statutory accounting records, and we explain the distinction when responding.

15. Marketing communications

We may send service notices concerning security, order fulfilment, changed contractual terms or a safety issue because they are necessary to administer the relationship. Promotional emails, recommendations and offers are distinct: we will apply the relevant consent or lawfully permitted existing-customer rules and provide a functioning unsubscribe method. An opt-out of marketing does not disable essential receipts, security warnings or support replies. We do not regard profile visibility or use of a dating feature as permission for unrestricted third-party advertising.

Where a message contains direct marketing, it should identify the sender and permit a straightforward change of preference. We will honour withdrawal or objection within the applicable rules and avoid continuing to target a person from a suppression record. Marketing preferences may remain recorded only to ensure the opt-out is respected and for defensible compliance evidence.

16. Automated decision-making and profiling

DateFoundry may use user-supplied preferences and activity signals to rank compatible profiles, detect spam patterns or suggest relevant content. Such ranking is a recommendation feature and does not promise a particular romantic outcome. Safety flags and anomalous payment signals may lead to additional checks or a temporary restriction; meaningful human review should be available for significant contested outcomes. Profiling involving sensitive dating characteristics requires particular care, a valid legal basis and any applicable Article 9 condition.

We do not rely on these Terms as blanket authorisation for decisions producing legal or similarly significant effects solely by automated means. Where such processing is legally permitted, we will supply required information and safeguards, including rights to seek human intervention, express a view or contest the decision as appropriate. Members may adjust certain preferences and contact support about inaccurate matching or moderation signals.

A preference-based ranking result ordinarily provides suggestions, not a final determination of a user’s legal rights. If a purely automated restriction could have a legally or similarly significant effect, we will assess the applicable safeguards and communicate the review channel. We will not silently infer intimate personal characteristics from payment frequency for marketing segmentation without an appropriate legal basis and special-category condition.

17. Third-party services and links

DateFoundry profiles or website pages may contain links to independent payment interfaces, social media pages or unrelated websites. A third party may collect information under its own notice when you interact with it. We do not control external privacy practices solely because a link appears on our website; review the recipient and avoid transferring intimate material to an unknown person or platform. Payment-provider disclosures should be presented at the point where payment data is collected.

If a third-party feature is embedded in a page, its storage or tracking must be assessed under the Cookie Policy rather than presumed essential. We will review processor arrangements and access before introducing materially new data uses. Links do not create a partnership or imply that the external service can redeem DateFoundry tokens or gifts.

18. Changes to this policy

We may update this notice when the Service changes, a new class of supplier becomes relevant or legal requirements evolve. Material changes to purposes, sensitive-data handling or rights will be communicated in an appropriate manner before new processing where law requires. A revised notice does not retroactively manufacture consent. Historical versions and records of user choices are managed in accordance with accountability requirements.

If we introduce a new optional processing purpose, we will identify the relevant basis and obtain separate permission when necessary. You may review the date shown above or contact the privacy address for more information. Continued use of a Service feature does not by itself substitute for explicit consent where explicit consent is legally required.

19. Contact and requests

Email info@datefoundry.com with the subject “Privacy request” and a clear description of the information, processing activity or right involved. State the account email if available, but do not provide a password or complete card details. For an account access or deletion request, we may ask limited questions to prevent an impersonator from receiving or erasing the wrong person's sensitive records. Where a request involves another member, we balance competing rights and may provide redacted information.

You may also write to AMORIAX LTD at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. If a response is unsatisfactory, you may seek independent advice or complain to the ICO. The Privacy Policy applies alongside the Terms & Conditions and the Cookie Policy but does not require a person to accept optional marketing or sensitive-data processing in order to ask for their rights.

For sensitive-data withdrawal, identify the profile field or feature concerned if possible; the option to withdraw may remove or reduce that feature rather than erase a separate legal record. We will respond to access requests without providing a third party’s private conversations as though the requester owned them. If an appeal concerns a privacy refusal, we explain the reason and the route to the ICO where required.

20. Schedule 1 – Practical Retention Guide

A user who deletes a profile can normally expect public display to cease following the effective account restriction or closure, although earlier recipients may possess lawful copies of messages or screenshots. Ordinary content is then handled under the post-closure retention timetable, separate from any records needed for a chargeback or safety allegation. If a refund has been issued, we preserve a limited transaction trail to show what was paid, what was delivered and how the dispute was resolved, without retaining unnecessary intimate messages.

A security report may require the temporary preservation of suspicious login records or reported content while an investigation is open. Such preservation is purpose-limited and subject to access control and periodic review. A request to unsubscribe from promotional emails is recorded as a suppression choice so that the individual is not accidentally added to a later campaign. We review retention schedules when service functionality, legal requirements or the sensitivity of collected fields changes.

DateFoundry · Privacy Policy · v2.1 · 8 October 2026. Published on the website; subject to update; the current published version governs.