Privacy Policy | Illicit Encounters

Last reviewed: 4 June 2026 · Effective from: 2004

Overview

This website is operated by Illicit Encounters. We are committed to protecting your privacy. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over your data.

All member contact and identification data is kept strictly confidential and is never disclosed to other members or to any third party except as set out in this policy.

1. Who we are

We act as the data controller of your personal data. The data controller is:

Online Tech Support Limited (company number 06419336)
Registered office: 86–90 Paul Street, London EC2A 4NE
Email: [email protected]

We are registered with the Information Commissioner’s Office (ICO) under registration number Z1614409.

2. Our lawful basis for processing

Under the UK GDPR we must have a lawful basis for processing your personal data. Depending on the activity, we rely on the following:

Performance of a contract — to create and operate your account and provide the service you sign up for.
Consent — to send you marketing communications and to set non-essential (advertising and analytics) cookies. You can withdraw consent at any time.
Legitimate interests — to keep the service secure, prevent fraud, and analyse and improve the service.
Legal obligation — to keep financial records and to respond to lawful requests.

Because of the nature of our service, some of the information you provide (for example your relationship preferences, and the fact that you use this site) is special category data that reveals information about your sex life. We process this type of data only on the basis of your explicit consent, which you give when you create your account and agree to this policy. You can withdraw that consent at any time by closing your account.

3. Information we collect

We never ask for your real name or address, and we recommend you use a unique email address and a username that cannot be traced back to you.

To provide the service we collect information you give us, which may include username, email address, age, gender, relationship preferences, and multiple-choice details such as height and build. You should be aware that some of this information may amount to special category data under applicable law (see Section 2).

We also collect technical information to provide and analyse the service, including device type, browser and operating system, and your IP address. Your IP address helps us diagnose server problems, administer the website, recognise your chosen setup, and gather broad demographic information. Some of this is collected using cookies (see Section 4).

4. Cookies

We use cookies to remember your chosen setup and to keep you logged in as you move between pages. These cookies are essential to the service.

With your consent, we and selected third parties also use cookies for advertising and analytics/measurement (see Section 9). You can give or withdraw consent and manage your preferences at any time through our cookie consent tool.

5. How we use the information we collect

We use the information we collect to provide the service and its functionality. This includes, but is not limited to: enabling members to search for and contact one another, electronic communication, authentication of credit and debit card payments, and data analysis.

6. Electronic communications and marketing

We may email you with important service notifications — for example, when another member has contacted you. With your consent we may also send you emails offering discounts or news about the service.

You can turn these communications on or off in the My Account section of the website, and every marketing email contains an unsubscribe link. We will never pass your email address to any other party for their own marketing.

7. Payment information

When you pay by credit or debit card, or by a digital currency such as Bitcoin, some personal information (such as name and card number) is required to process the payment. We do not store this information on our servers.

Payments are handled by PCI-compliant third-party processors (such as Stripe) that encrypt stored card data. If you are an automatic billing customer, an electronic token is used between us and the processor to facilitate future payments.

8. Data retention

We keep your personal data only for as long as necessary for the purposes set out in this policy:

Account data — deleted promptly when you close your account, unless we need to retain it to deal with a legal or financial dispute, in which case it is kept until the matter is resolved (normally no longer than three months).
Financial and transaction records — retained for six years after the relevant transaction to meet our legal, accounting and tax obligations, after which they are deleted or anonymised.

9. Sharing of data

We do not share your information with third parties other than as described in this policy and as follows:

Advertising affiliate (AdTraction) — affiliates that promote our service and use cookies to track and measure referrals for commission. Only user ID, payment amount, product purchased and payment date are recorded externally.
Live chat provider (Olark) — applicable only if you use Live Chat. Only user ID, username, chat content and time of chat are recorded.
Analytics providers (Google, Bing) — only limited information such as user ID, gender, age range, device, browser, product purchased and amount is held externally.

10. International data transfers

Where we transfer personal data outside the UK, we ensure an appropriate safeguard is in place:

For transfers to the European Economic Area, we rely on the UK’s adequacy regulations.
For transfers to the United States, we rely on the UK Extension to the EU–US Data Privacy Framework (the “UK–US Data Bridge”) where the recipient is certified under the Data Privacy Framework and has opted into the UK Extension.
Where no adequacy decision or framework applies, we use the ICO’s International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment.

Because some of the information you provide concerns your sex life and is special category data under the UK GDPR, we identify it as sensitive when relying on the UK–US Data Bridge so that it receives the additional protections available.

11. Your rights

Under UK data protection law you have the following rights in relation to your personal data, which you can exercise free of charge:

Right of access — to obtain a copy of the personal data we hold about you.
Right to rectification — to have inaccurate or incomplete data corrected.
Right to erasure — to have your personal data deleted, including by closing your account (see Section 13).
Right to restrict processing — to limit how we use your data in certain circumstances.
Right to data portability — to receive the data you provided in a structured, commonly used, machine-readable format, or have it transferred to another provider.
Right to object — to object to processing based on our legitimate interests, and to direct marketing at any time.
Right to withdraw consent — where we rely on your consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
Rights relating to automated decision-making — where applicable (see Section 14).

To exercise any of these rights, contact us at [email protected]. We will respond within one month. We will not ask for your real name and will verify your identity through your account.

If you are unhappy with how we have handled your data, you can complain to us directly, and you also have the right to complain to the Information Commissioner’s Office at ico.org.uk or 0303 123 1113.

12. Age verification and adult content

This service is strictly for adults aged 18 or over. No profile or member information is visible until a user has completed our age-assurance process and confirmed they are over 18.

Some content shared between members may include nudity. Such content is only accessible to logged-in members who have passed age assurance and is never publicly visible.

Age-assurance method: we verify age through third-party providers — OneID and Arissian for facial age estimation and phone-number checks — and through our payment provider, Stripe, for credit-card checks. These checks are designed to meet the “highly effective” age-assurance standard required by the Online Safety Act 2023 for services that allow pornographic content.

13. Profile deletion and account closure

You can delete your profile at any time by request to the online administrator or by email to [email protected]. On closure we delete your personal information in accordance with Section 8.

14. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

15. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Payment card data is handled by PCI-compliant processors and is not stored on our servers.

16. External links and public forums

External links: this site contains links to other sites. Illicit Encounters is not responsible for the privacy practices or content of those websites.

Public forums and profiles: this site makes your profile available to other members. Any information you disclose in these areas becomes available to other users, so please exercise caution when deciding what to share.

17. Changes to this policy

We may update this policy from time to time. The current version and its effective date are shown at the top of this document. Where changes are material, we will notify you by email or through the service.

18. Contacting us

If you have any questions about this policy, our practices, or your dealings with this website, please contact us at [email protected], or write to The Data Controller, Online Tech Support Limited, 86–90 Paul Street, London EC2A 4NE.

We handle all personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025, together with the Privacy and Electronic Communications Regulations 2003 (PECR).

See also the full Terms & Conditions of using Illicit Encounters.