Privacy Policy

The operator of Club PLUR is the controller of the personal data described in this Policy. Data protection enquiries, requests to exercise your rights and complaints should be addressed to contact@clubplur.com.

We collect and process the following categories of personal data:

• Account data: name, email address, password credentials (stored in hashed form by our authentication provider), date of birth or age confirmation, and your membership tier.
• Profile data: your face photograph, biography, interests, home area and the approximate location derived from it, titles and reputation indicators such as ratings, thumbs and attendance history.
• Activity data: the Plans you publish or join, join requests, meeting points, times, group chat messages, dares started and completed, and proof photographs or video you submit.
• Location data: where you choose to use distance sorting or check-in, the approximate coordinates reported by your device at that moment. This is processed only when you grant permission and can be withheld or withdrawn in your browser or device settings.
• Safety-link data: where you create a safety link, the plan details, expected finish time, check-in and 'home safe' status visible to the person you send the link to.
• Credit and transaction data: credit balances, holds, releases, refunds and the associated ledger entries, and, where applicable, subscription status.
• Technical and security data: IP address, approximate location derived from it, browser and device characteristics, sign-in and authentication events, and records of actions taken in the Service. These are recorded for security, abuse prevention and the investigation of reports.
• Reports and moderation data: reports you make or that are made about you, the categories and details provided, notes recorded by our moderators, and the outcome of any action taken.
• Correspondence: messages you send to us and our replies.

Where you elect to undergo identity or age verification, the underlying identity document and biometric comparison are collected and processed by a specialist third-party verification provider acting as an independent controller in respect of that check. We receive the outcome of the check and the date it was completed; we do not receive or store your identity document. Verification data may constitute special category data, and it is processed on the basis of your explicit consent given at the point of verification and, so far as relevant, for reasons of substantial public interest in preventing unlawful acts and protecting members from harm.

• Performance of a contract: creating and maintaining your account, publishing and matching Plans, group chat, credits and membership.
• Legitimate interests: keeping members safe, preventing and investigating abuse, fraud and misuse, enforcing the Terms of Use, maintaining the security and integrity of the Service, and improving it. Where we rely on legitimate interests we have assessed that these are not overridden by your rights and freedoms.
• Consent: device location, optional photographs and video, identity verification, and any marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
• Legal obligation: responding to lawful requests, complying with tax, accounting and regulatory requirements, and meeting our obligations to protect users from illegal content.

Your first name, photograph, home area, interests, reputation indicators and verification status are visible to other members. Precise meeting points, private notes and contact details attached to a Plan are withheld until a join request has been accepted.

Plans, dares and proof content may be visible to visitors who are not signed in. Where you create a safety link, the recipient of that link can see the plan, the public meeting point, the expected finish time and your check-in and 'home safe' status until you revoke the link. You should not publish information you do not wish to be seen.

We disclose personal data to the following categories of recipient:

• our hosting, database, storage and authentication providers, acting as processors;
• the identity and age verification provider, where you elect to verify;
• mapping and place-search providers, which receive search terms and approximate location in order to return results;
• payment and subscription providers, where paid membership is taken;
• professional advisers, insurers and auditors, where necessary;
• the police, regulators, courts or other authorities where disclosure is required by law or is necessary to prevent or investigate a crime or to protect a person from harm;
• a purchaser or successor in connection with a reorganisation or sale of the business.

We do not sell personal data and we do not share it with advertising networks.

Some of our providers process personal data outside the United Kingdom. Where that happens, transfers are made under adequacy regulations or, where none applies, under the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards required following a transfer risk assessment. Details of the safeguards in place are available on request.

We retain personal data for no longer than is necessary for the purposes for which it was collected. In general: account and profile data are retained while your account is open and for up to twelve months after closure; Plan, chat and proof content is retained while published and for up to twelve months after deletion in backups; credit and transaction records are retained for six years for accounting purposes; technical and security logs are retained for up to twelve months; and reports, moderation notes, suspension and ban records are retained for up to six years, as they may be required to defend legal claims, to prevent a banned member returning, or to assist a law enforcement investigation.

We apply technical and organisational measures appropriate to the risk, including encryption in transit, row-level access controls on our database, restricted administrator access, and logging of administrative actions. No online service can be guaranteed completely secure, and you are responsible for keeping your credentials confidential.

Subject to the conditions and exemptions in data protection law, you have the right to be informed about processing; to access a copy of your personal data; to have inaccurate data rectified; to have data erased; to restrict processing; to data portability; to object to processing carried out on the basis of legitimate interests; to withdraw consent; and not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise any of these rights, contact contact@clubplur.com. We will respond within one month, which may be extended by up to two further months for complex requests. We may ask you to verify your identity before acting on a request. Where a request would prejudice an ongoing safety or law enforcement matter, or would disclose the personal data of another member, we may withhold part of the response and will explain why.

You also have the right to complain to the Information Commissioner's Office (ico.org.uk, telephone 0303 123 1113). We would ask that you raise the matter with us first.

The Service is not directed at, and may not be used by, anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we hold data relating to a person under 18, the account will be closed and the data deleted, save where retention is required to comply with a legal obligation or to report the matter to the appropriate authorities.

We may update this Policy from time to time. The revised version takes effect when published on this page and the 'last updated' date will be amended. Where a change is material we will take reasonable steps to notify you.