Legal
Privacy policy
GDPR (EU), UK GDPR and UAE PDPL — in plain language. Your profile is never public; your documents are encrypted; declined applicants' documents are deleted on schedule.
1. Who we are
Troth [legal entity and registered address — placeholder] is the data controller for the personal data processed through trothclub.com and the matchmaking service. Contact: hello@trothclub.com [placeholder — a dedicated privacy address will be provisioned].
2. What we collect
Application data (identity, contact details, background, relationship status and intentions, lifestyle, preferences, photographs); verification data (government ID, liveness check, professional/education confirmation, optional background checks); interview notes; introduction and feedback history; and technical data strictly needed to run the site (see Cookie policy).
Religion is requested only on an optional basis and is processed, where given, as special-category data under your explicit consent.
3. Why and on what legal basis
To assess applications and run matchmaking (performance of contract); to verify identity and prevent fraud (legitimate interest and legal obligation); to send updates and invitations where you opted in (consent); to comply with law (legal obligation).
Profiles are visible only to matchmakers. Introductions reveal limited information, and only after both parties consent. Full access is logged and audited.
4. Retention
Identity documents of declined applicants are deleted within [X days — placeholder] of the decision. Member profiles are kept while membership is active and deleted or anonymised within [X months — placeholder] of exit, except where law requires longer. You can request erasure at any time.
5. Your rights
Access, rectification, erasure, restriction, portability and objection under GDPR/UK GDPR; equivalent rights under UAE PDPL for Dubai-based members. Complaints go to your supervisory authority (e.g. the Garante in Italy, the ICO in the UK, the UAE Data Office).
6. International transfers and security
Data is hosted in the EU with GCC content delivery. Transfers outside the EEA/UK rely on adequacy decisions or standard contractual clauses [to be confirmed by counsel]. IDs and photographs are stored encrypted; administrative access requires two-factor authentication and is audit-logged.
DRAFT — prepared for lawyer review across the three launch jurisdictions (Italy/EU, United Kingdom, UAE/Dubai). Figures, periods and addresses in brackets are placeholders to be confirmed.