Privacy Policy

Your data is yours. This explains what we collect, why, and the control you have over it — tailored to your region.

Your regionUK GDPR & Data Protection Act 2018

Development template — not legal advice. A structural draft for building the product, pending review by a qualified solicitor for United Kingdom.

Who this applies to

This notice is tailored for members in United Kingdom. Zigazag is the data controller and processes your personal data under UK GDPR & Data Protection Act 2018, alongside ICO Age-Appropriate Design Code (Children’s Code), PECR (cookies & e-marketing), Online Safety Act 2023.

You must be at least 18 to use Zigazag. The digital age of consent that applies to you is 13.

What we collect

Account & profile: name, date of birth, gender, photos, prompts, values and preferences.

Verification: a selfie used to confirm you are a real human; it grants your badge and is not shown on your profile.

Usage: matches, messages, and in-app activity needed to run the service.

Approximate location: for nearby matching, where you allow it. We anonymise precise coordinates.

Why we use it

Our lawful bases are: Contract, Legitimate interests, Legal obligation, Consent.

We use your data to run matching, keep the community safe, prevent fraud, meet legal duties, and — only where required — with your consent. We do not sell your personal data.

Your rights

Under UK GDPR & Data Protection Act 2018 you have the right to: Access, Rectification, Erasure, Restriction, Portability, Object, No solely-automated decisions, Withdraw consent.

We answer verified requests within 30 days. Use in-app Download my data and Delete account, or email privacy@zigazag.com.

Cookies & tracking

We ask for your consent before setting non-essential cookies, and you can change your choice any time.

See our Cookie Policy for the full list.

International transfers

Where your data is transferred outside United Kingdom, we rely on: UK IDTA / Addendum to EU SCCs, or adequacy.

Retention & security

We keep data only as long as needed to run the service and meet legal/safety obligations, then delete or anonymise it.

Data is encrypted in transit and at rest, admin access is authenticated and audit-logged.

Complaints

If you have a concern, contact privacy@zigazag.com. You can also complain to Information Commissioner’s Office (ICO) (https://ico.org.uk).