Who we are
Rouge Rooms is the data controller for the personal data described here. Our data is held in the United Kingdom (London region). For privacy queries, use the contact route in Complaints & takedown.
What we collect and why
Account data (email, sign-in identifiers) to operate your account. Age-assurance result to meet our legal age-verification duty. Provider profile data you choose to publish. Limited usage data to keep the service secure and working.
Some data is special-category data concerning your sex life or sexual orientation. We only process that data with your explicit consent (UK GDPR Article 9(2)(a)), recorded at the point you publish, and you can withdraw consent at any time.
Lawful bases
We rely on: explicit consent (Article 9(2)(a)) for special-category data and for publishing a listing; contract for operating your account; legitimate interests for safety, fraud prevention and security (balanced against your rights); and legal obligation for age assurance and illegal-content reporting.
Retention
We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it on a defined schedule. Safety records and legally-required evidence are retained for the minimum necessary period.
Saved searches and notifications are held on a limited, rolling basis. Favourites and blocks persist until you remove them. All of this convenience data, along with your profile, follows and saved searches, is deleted when you delete your account.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to withdraw consent. Account deletion triggers erasure of your profile, listings, social links, follows, saved searches, blocks and vouches, and withdrawal of your publishing consent. You can also complain to the Information Commissioner's Office (ico.org.uk).