Privacy notice

RequestDinner Ltd. (“we”) is a London courtship concierge. This notice describes how we intend to process personal data, including special-category and criminal-offence data. It is a working draft for counsel and the ICO registration, not a finished policy.

Controller

RequestDinner Ltd., London. Enquiries: privacy@requestdinner.com. The authorised representative of the Concierge Desk is Mr. Martin Elliott.

What we collect

• Identity and contact data (legal name, email, telephone, date of birth).
• KYC artefacts (passport images, Stripe Identity session results).
• Criminal-offence data from UK DBS certificates, stored as encrypted references and shredded after the statutory review window.
• Referee names, emails, professions, and written references.
• Medical notes and dietary alerts disclosed for a supervised introduction.
• Location telemetry during an active date, broadcast in memory only.

Lawful bases

Contract and legitimate interests for membership operations. Explicit consent and substantial public interest (safeguarding) for special-category and criminal-offence data. Counsel must confirm the final schedule of conditions under UK GDPR Articles 6 and 9 and DPA 2018 Schedule 1.

Retention

DBS artefacts: 180 days, then cryptographic shredding. Failed vestibule applications: 30 days. Audit logs of decrypt-on-demand: 6 years. Precise schedules are for legal review.

Rights

Access, rectification, erasure, restriction, portability, and objection, plus the right to complain to the Information Commissioner’s Office (ico.org.uk).