How OjoosCo Ltd collects, uses, stores, and protects
your personal data when you use the Xparience
platform — in full compliance with UK GDPR and the
Data Protection Act 2018.
Section 01
OjoosCo Ltd is the data controller for personal data collected through the Xparience platform. This means we determine the purposes and means by which your personal data is processed.
If you have any questions about this policy or how we handle your data, please contact us at the email address above.
Section 02
We collect the following categories of personal data when you use Xparience:
As part of our mandatory onboarding verification process, we collect:
If you subscribe to a paid tier, payment is processed by our third-party payment provider. We do not store your full card details. We retain only transaction records (amount, date, and subscription tier) for accounting and fraud-prevention purposes.
Section 03
Xparience processes certain categories of personal data classified as “special category data” under Article 9 of the UK GDPR. These require a higher level of protection and a specific legal basis.
The special category data we process includes:
Section 04
The table below sets out the purposes for which we process your personal data, together with our legal basis under Article 6 of the UK GDPR and, where applicable, the special category condition under Article 9.
| Data Category | Purpose | Legal Basis (Art. 6) | Special Category (Art. 9) |
|---|---|---|---|
| Account & Identity Data | Creating and managing your account; authentication | Contract (Art. 6(1)(b)) | N/A |
| Identity Verification (Biometric & ID) | Age verification; identity confirmation; fraud prevention; Online Safety Act compliance | Legal obligation + Legitimate interests (Art. 6(1)(c)(f)) | Explicit consent (Art. 9(2)(a)) |
| Profile Data (general) | Displaying your profile to other users; enabling matching | Contract (Art. 6(1)(b)) | N/A |
| Sexual orientation / relationship preferences | Enabling compatibility matching; personalising experience | Explicit consent (Art. 6(1)(a)) | Explicit consent (Art. 9(2)(a)) |
| Matching & Usage Data | Improving match quality; platform analytics; personalisation | Legitimate interests (Art. 6(1)(f)) | N/A |
| Technical Data | Platform security, bug fixing, and performance monitoring | Legitimate interests (Art. 6(1)(f)) | N/A |
| Payment Data | Processing subscriptions; fraud prevention; financial records | Contract + Legal obligation (Art. 6(1)(b)(c)) | N/A |
| Communications Data | Responding to support queries; resolving disputes; ensuring safety | Legitimate interests + Legal obligation (Art. 6(1)(f)(c)) | N/A |
| Messages between users | Enabling communication on the platform; safety moderation | Contract (Art. 6(1)(b)) | N/A |
We will only use your personal data for the purposes set out above. If we need to use your data for a new purpose, we will notify you and seek fresh consent where required.
Section 05
Xparience requires all users to complete a mandatory identity and age verification check before accessing the platform. This is a legal requirement under the UK Online Safety Act 2023 and Ofcom’s age assurance guidance.
We use a hybrid verification model to confirm user identity. Some submissions are processed automatically through a trusted third-party identity verification provider, while others are reviewed manually by our internal team.
As part of the verification process, you may be required to:
We may also carry out additional manual reviews where necessary to verify authenticity or investigate potential issues.
Before submitting your verification documents, you will be asked to provide explicit consent to the processing of your biometric data. This consent is separate from your general account consent and is specific to identity verification.
Section 06
We share your data only in the following limited circumstances:
Your profile information (photos, bio, preferences, and general location) is visible to other verified users. Your full name, contact details, and identity documents are never visible to other users.
We share data with trusted third-party providers who process data on our behalf under written Data Processing Agreements. These include:
All processors are required to handle your data securely, only for the purposes we specify, and in compliance with UK GDPR.
Xparience offers an Elite tier that includes bespoke human-assisted matchmaking and coaching services. If you subscribe to this tier, we may share relevant profile information with our vetted matchmaking and coaching team (with your consent). These team members are bound by confidentiality obligations and data protection policies.
We may disclose your personal data where required by law, including in response to lawful requests from law enforcement or regulatory authorities, or to protect the rights and safety of our users.
In the event of a merger, acquisition, or sale of our business, your personal data may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Section 07
OjoosCo Ltd is incorporated in the United Kingdom. Some of our service providers may process data outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:
You may request details of the safeguards we use for international transfers by contacting us at the email address in Section 15.
Section 08
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of active account, plus 2 years after account closure |
| Identity verification records | Verification outcome: retained while account is active. ID document images: deleted within 30 days of successful verification |
| Biometric data | Deleted by third-party provider immediately after verification is complete. Not retained by OjoosCo Ltd. |
| Profile and matching data | Duration of active account. Deleted within 30 days of account closure |
| Messages between users | Retained for 12 months after the conversation ends, then deleted |
| Payment records | 6 years— required by UK tax and financial regulations |
| Support and communications data | 3 years from the date of the communication |
| Legal hold data | Duration of legal proceedings or regulatory investigation, then deleted |
When your data is no longer required, we will securely delete or anonymise it in accordance with our internal data retention policy.
Section 09
Under UK GDPR, you have the following rights in relation to your personal data. We will respond to all valid requests within one calendar month.
Right 9.1
Request a copy of the personal data we hold about you (a Subject Access Request). This is free of charge.
Right 9.2
If data we hold is inaccurate or incomplete, you have the right to ask us to correct it. Most profile data can be updated directly in the Xparience app.
Right 9.3
Request deletion of your personal data in certain circumstances — where data is no longer necessary, you withdraw consent, or you object to processing.
Right 9.4
Ask us to restrict processing of your personal data in certain circumstances, for example while we verify the accuracy of disputed data.
Right 9.5
Where processing is based on consent or contract and carried out by automated means, receive your data in a structured, machine-readable format.
Right 9.6
Object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will stop immediately.
Right 9.7
Our compatibility matching assists in suggesting profiles but does not make final decisions about who you can connect with. You have the right not to be subject to purely automated decisions with significant effects.
Right 9.8
Where we rely on your consent, you have the right to withdraw it at any time. Contact us or use your account settings.
If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
We would appreciate the opportunity to address your concerns before you approach the ICO. Please contact us first.
Section 10
Xparience uses cookies and similar tracking technologies on our website and in our app. We use:
We do not use advertising or tracking cookies for third-party marketing purposes.
When you first visit our platform, you will be shown a cookie consent banner. You can manage your cookie preferences at any time through your account settings or browser settings. Rejecting non-essential cookies will not prevent you from using the platform.
Section 11
We implement appropriate technical and organisational measures to protect your personal data. Our security measures include:
Section 12
Xparience is strictly an adults-only platform. We do not knowingly collect or process data from anyone under the age of 18. Our mandatory identity and age verification process is specifically designed to prevent minors from accessing the platform.
Section 13
The Xparience platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal data.
Section 14
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by displaying a prominent notice on the platform before the changes take effect.
The effective date at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically.
Section 15
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:
We aim to respond to all privacy-related enquiries within five business days, and to resolve them fully within one calendar month.
