1. Who We Are
Behind Her Door is the data controller for the personal data described in this policy, run by its founding creators as independent sole traders. See our Contact page to reach us.
2. What We Collect
- Account details: email address and a securely hashed password.
- Age and identity verification data: a photo of your ID, uploaded when you verify your account. It's used only to confirm you're 18 or over, seen only by the House team reviewing it, and deleted once your verification is decided — we don't keep a copy afterward, only the fact that you were verified and when.
- Payment data: none. Payments are arranged directly between members and creators after a request has been accepted — Behind Her Door does not receive, process or hold payments on behalf of creators, so we never see your card, bank, or other payment details at all.
- Usage data: pages visited, purchases made, device and browser information.
- Communications: messages sent through the Platform to creators, and any support enquiries you send us.
- Shipping address: collected only if you order a physical item, and shared only with the creator fulfilling that specific order.
3. How We Use It
To provide the service, verify age and identity, deliver digital content, coordinate physical items, respond to support requests and complaints, prevent fraud and abuse, and meet our legal obligations.
4. Legal Basis
We process your data under contract (to provide the service you've signed up for), legal obligation (age verification and record-keeping), and legitimate interest (fraud prevention, keeping the service running properly). Where required, such as for non-essential cookies, we rely on your consent.
5. Who We Share Data With
Nobody outside the House, except where necessary to fulfil a specific request, such as a shipping address shared with the individual creator fulfilling a physical order. We do not sell your data, and we do not share your identity or activity with creators beyond what's needed to fulfil what you've asked for.
6. Data Retention
We keep account and activity data for as long as your account is active, and for a period afterward as required by UK tax and consumer protection law. ID images submitted for age verification are deleted as soon as a decision is made; we retain only the confirmation that verification happened and when.
7. Your Rights
Under UK GDPR, you can ask to access, correct, delete, or receive a copy of your data, object to or restrict certain processing, and withdraw consent where processing relies on it. Contact us to exercise any of these rights. You can also complain to the Information Commissioner's Office at ico.org.uk if you believe we've mishandled your data.
8. Security
We use industry-standard measures to protect your data, including encryption in transit and restricted internal access. No system is completely secure, and we can't guarantee absolute protection.
9. Cookies
See our Cookies Policy for details on what we use and how to manage them.
10. Children
This Platform is strictly for adults aged 18 and over. We don't knowingly collect data from anyone under 18, and any such account will be closed immediately upon discovery.
11. Changes
We may update this policy from time to time. Material changes will be flagged on this page.
12. Contact
See our Contact page.