This Privacy Policy explains how UrLittleSecret (“we”, “us”, “our”) collects, uses, and protects personal data.
We operate a UK-based platform for adult service providers. Our services are strictly limited to individuals aged 18 or over. We do not knowingly collect or process personal data relating to minors.
We design and operate our platform to meet applicable legal and regulatory obligations, including child safety and age-assurance requirements under the UK Online Safety Act 2023, while respecting users rights under the UK GDPR, EU GDPR, and other applicable data protection laws.
We follow the principle of data minimisation and only collect personal data that is necessary to operate the platform safely, lawfully, and securely.
To access provider features, identity verification is required. We collect:
How this data is used
The retained selfie is used solely to:
All comparisons are carried out through manual visual review by authorised staff where required.
We do not use facial recognition, biometric identification, biometric templates, or automated matching technologies.
Failure to provide verification information will prevent account activation or result in suspension of provider features.
We collect and process:
This data is used to operate the platform, display profiles, maintain security, prevent abuse, and ensure system integrity.
Payments are processed by third-party payment providers. We do not store full payment card details.
We may receive and retain limited payment-related metadata, including:
This data is used for billing, accounting, fraud prevention, dispute handling, and compliance with legal and regulatory obligations.
If verification is rejected, a secondary review may be requested.
We process personal data under the following lawful bases:
Where processing is required to comply with applicable laws, including age-assurance, child safety, financial, and record-keeping requirements.
To prevent fraud, impersonation, trafficking, abuse, and unlawful use of the platform, and to protect users, the public, and the business from legal and operational risk. These interests are balanced against users rights and expectations.
Where required by law and where no other lawful basis applies. Withdrawal of consent may result in limited access to features that depend on the relevant processing.
Certain processing activities are necessary to provide the service and cannot be opted out of without discontinuing use of the platform.
We retain personal data only for as long as necessary for the purposes described in this policy.
Government issued identity document images are deleted once verification has been completed, unless retention is required due to an active investigation or legal obligation.
Verification selfies are retained while the account remains active to support ongoing account integrity and impersonation prevention.
Accounts may be treated as inactive after a prolonged period without login or use. In such cases, data may be restricted, archived, or deleted in line with our retention policies.
Upon confirmed account deletion, retained verification selfies are permanently deleted from our primary systems within 30 days.
We treat identity and verification data as highly sensitive and apply appropriate technical and organisational safeguards, including:
General staff and platform administrators do not have access to verification images.
We use a limited number of carefully selected third-party service providers acting strictly asdata processors to support essential platform operations, including:
These service providers process personal data only on our behalf and only in accordance with our documented instructions. They are contractually prohibited from using personal data for their own purposes.
Identity verification data is handled separately.
Government issued identity documents are deleted after verification and are not shared with third parties.
Verification selfies are stored in segregated systems with restricted access and are usedsolely for manual account integrity checks, such as confirming that future uploads relate to the same account holder.
We do not permit third party service providers to use identity verification data to build profiles, train models, perform biometric analysis, or conduct automated facial recognition.
We are based in the UK. Our infrastructure and service providers may be located in the UK, EU, or United States.
Where personal data is transferred internationally, we rely on appropriate safeguards, including:
Our services are not intended for minors. The platform is designed to prevent individuals under 18 from accessing provider features.
If we suspect that an account is operated by or relates to a person under 18:
We maintain procedures to detect, investigate, and respond to personal data breaches.
Where required by law, we will notify the appropriate supervisory authority and affected users without undue delay.
Depending on your location and applicable law, you may have the right to:
Requests can be made using the contact details below.
We do not sell, rent, or voluntarily disclose identity data to third parties.
Personal data will only be disclosed where required by a valid legal order issued by a competent authority that we are legally obliged to comply with.
We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by other appropriate means.
Privacy contact