Haystack Dating Privacy Policy
Haystack Dating (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy provides detailed information about how we collect, use, process, store, and protect your personal data, and explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand our practices and your options regarding your personal information.
Haystack Dating is a UK-based company, we organise dating and social events throughout the United Kingdom, combining technology and in-person experiences to improve modern dating. For the purposes of data protection law, Haystack Dating acts as the “data controller” for all personal data collected in connection with our services. Contact Details:
Email: dillan@haystack-dating.com
Website: https://haystack-dating.com
If you have any questions about this privacy policy or how we use your personal data, please contact us using the details above.
We process personal data in accordance with the following principles:
Lawfulness, Fairness, and Transparency: We process data lawfully, fairly, and in a transparent manner.
Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
Data Minimisation: We only collect data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
Accuracy: We take reasonable steps to ensure your data is accurate and, where necessary, kept up to date.
Storage Limitation: Personal data is kept in a form which permits identification of data subjects for no longer than is necessary.
Integrity and Confidentiality: We process data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
Accountability: We are responsible for, and can demonstrate, compliance with these principles.
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:
Identity Data: First name, last name, date of birth, and gender.
Contact Data: Email address, phone number, and postal code.
Event Data: Event registration details, preferences for matches, interests, group allocations (e.g., ensuring a maximum of 5 years’ age difference within each group), feedback, and attendance records.
Imagery: Photographs and videos taken at events where you are identifiable.
Marketing and Communications Data: Preferences in receiving marketing from us and your communication preferences, as well as engagement with our emails and newsletters.
Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, device type, operating system and platform, and other technology on the devices you use to access our website.
Usage Data: Information about how you use our website, such as page views, click-throughs, and form submissions.
Behavioural Data: Segmented or inferred data based on how you interact with our communications, website, and events.
Special Category Data: Only collected where necessary (e.g., dietary requirements, accessibility needs) and always with your explicit consent.
We do not intentionally collect data from children under the age of 18. If we learn that we have inadvertently collected personal data from a child, we will delete such data as soon as possible.
We use different methods to collect data from and about you, including:
Direct Interactions: You provide data by filling in forms (such as event registrations and feedback forms), subscribing to our communications, or corresponding with us by email, phone, or otherwise. Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns using cookies, server logs, and other similar technologies. Third Parties and Publicly Available Sources: We may receive personal data about you from analytics providers, advertising networks, ticketing platforms, social media platforms, and other third-party sources.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: A. Providing and Managing Services To register you for events, confirm attendance, and manage bookings. To create age-appropriate groups (e.g., ensuring a maximum of 5 years’ age difference within each group). To facilitate group and match assignments based on your preferences and form responses. To provide customer service and respond to your enquiries. To send you event updates, logistical information, and reminders.
B. Marketing and Promotions
To send you newsletters, event recommendations, and promotional materials. To inform you about events or services you may be interested in. To analyse and measure the effectiveness of our marketing campaigns. To use anonymised data to understand trends and improve our marketing strategies. C. Event Photography and Videography To document event atmosphere and activities through photos and videos. To use imagery for promotional purposes, including on our website, social media, and marketing materials. We always provide an opt-out option at each event; simply notify a team member if you do not wish to appear in such content. D. Analytics, Research, and Product Development To understand how attendees engage with our events and services. To analyse trends, improve event planning, and enhance our offerings. To use anonymised data for statistical and research purposes, such as evaluating the effectiveness of our group matching or event formats. E. Legal and Regulatory Compliance To maintain records for audit, tax, or regulatory purposes. To respond to legal claims, disputes, or requests from law enforcement or regulatory authorities.
We rely on the following lawful bases for processing your personal data: Consent: Where you have given clear consent for us to process your personal data for a specific purpose. You can withdraw your consent at any time. Contractual Necessity: Where processing is necessary for the performance of a contract with you. Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Legal Obligation: Where processing is necessary for compliance with a legal obligation.
We are committed to retaining your personal data only for as long as necessary for the purposes for which it was collected. Specifically: Event Form Data:
We retain your identifiable personal data collected through event forms for up to 90 days following the conclusion of each event. After this period, all identifiable information will be securely deleted from our systems, unless you have provided explicit consent for us to retain it for future communications or events.
Anonymised Data:
Before deletion, we may anonymise certain data from event forms so that it can no longer be linked to any individual. Anonymised data is used exclusively for analytical and statistical purposes, such as improving our event planning, understanding attendee preferences, evaluating the effectiveness of groupings (e.g., maximum 5-year age difference in groups), and enhancing our services. Once data has been anonymised, it is no longer considered personal data under UK GDPR and may be retained and used indefinitely. Marketing Data:
Retained until you unsubscribe or withdraw consent. Imagery:
Retained indefinitely for promotional purposes unless you request removal or withdraw consent. Financial and Legal Records:
Retained for 6–7 years as required by law.
We regularly review the personal data we hold and securely delete or anonymise data that is no longer necessary. You can request access to, correction, or deletion of your data at any time by contacting us at dillan@haystack-dating.com.
We may share your personal data with carefully selected third parties, including: Service Providers: Such as website hosts, ticketing platforms, marketing services, and analytics partners. These third parties are required to process your data only as instructed by us and to implement appropriate security measures. Professional Advisers: Including legal, financial, or compliance consultants to support our business operations and legal compliance. Regulatory Bodies or Law Enforcement: Where required by law or regulation, or to protect our rights, property, or safety, or that of our customers or others. Event Partners/Venues: For event management purposes, under appropriate data processing agreements. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data to any third party.
Some of our external service providers may be based outside the UK, so their processing of your personal data may involve a transfer of data outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: Transfers to countries that have been deemed to provide an adequate level of protection by the UK. Use of specific contracts approved by the UK Information Commissioner’s Office (ICO) which give personal data the same protection it has in the UK. If you would like further information on the specific mechanism used by us when transferring your personal data out of the UK, please contact us.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include: Encryption of sensitive data both in transit and at rest. Access controls and authentication for staff and systems. Regular review of our data security practices and breach detection protocols. Staff training on data protection and confidentiality. Secure disposal and deletion procedures for data that is no longer required. In the unlikely event of a data breach, we will notify affected individuals and the appropriate authorities as required by law.
We use cookies and similar technologies to: Maintain website functionality and session security. Analyse usage patterns and traffic. Serve targeted advertising content. Cookies are small text files placed on your device to collect standard internet log information and visitor behaviour information. You can control cookie settings via your browser or opt out by contacting us here: dillan@haystack-dating.com
We may use limited profiling techniques to segment our audience or customise marketing messages. For example, we may analyse event form data to recommend future events you may find relevant based on your preferences or age group. However, we do not engage in fully automated decision-making that produces legal or similarly significant effects on individuals.
Our services are intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that we have inadvertently collected such data, we will delete it promptly and take steps to prevent it from happening again.
Under UK GDPR, you have the following rights regarding your personal data: Right to be Informed: You have the right to be informed about the collection and use of your data. Right of Access: You may request access to the personal data we hold about you. Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. Right to Erasure (“Right to be Forgotten”): You have the right to request that your data be deleted where there is no compelling reason for its continued processing. Right to Restrict Processing: You may request that we restrict processing if you contest the accuracy of the data, object to the processing, or require us to retain data for legal claims. Right to Data Portability: You may request that we provide you or a third party with your personal data in a structured, commonly used, and machine-readable format. Right to Object: You may object to processing that is based on our legitimate interests or for direct marketing. Rights in Relation to Automated Decision-Making and Profiling: You have the right not to be subject to decisions based solely on automated processing. To exercise any of these rights, please contact us at dillan@haystack-dating.com. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk), the UK supervisory authority for data protection issues.
Our website and communications may include links to third-party websites, plug-ins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or practices. Please review their privacy policies separately before submitting any personal data.
We may update this Privacy Policy from time to time. Any significant changes will be communicated through our website or by email. Please check this page regularly for updates. If we make substantial changes to how we process your personal data, we will notify you directly, where reasonably possible.
If you have any questions about this privacy policy, the data we hold about you, or if you wish to exercise your data protection rights, please contact: Email: dillan@haystack-dating.com Haystack Dating reserves all legal rights in respect of this policy and your use of its services.
This Privacy Policy is governed by the laws of England and Wales.
By using our services or attending our events, you acknowledge that you have read and understood this policy.