Privacy Policy - How We Protect Your Personal Data

Who We Are - Data Controller Information

Foreign Girl Date ("we," "us," or "our") operates the website foreign-girl-date.com, an international dating platform connecting Western men with verified Asian women for meaningful relationships. We are the data controller responsible for your personal information under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

If you have questions about this policy or how we handle your data, contact our Data Protection Officer at [email protected]. We respond to all privacy-related inquiries within 30 days.

What Data We Collect and Why

We collect only the data necessary to provide a safe, effective dating experience. Each data category serves a specific, documented purpose.

Account Data

• Email address and password - to create and secure your account
• Phone number - for two-factor authentication and account recovery
• Date of birth - to verify you meet the minimum age requirement (18+)

Profile Data

• Name, photos, and biographical information - to build your dating profile visible to other members
• Relationship preferences and interests - to power our AI matching algorithm
• Location (city, country) - to suggest geographically compatible matches

Communication Data

• Messages and chat history - to deliver your conversations and enable our anti-scam monitoring system
• Video chat metadata - duration and connection quality (video content is not stored)

Usage Data

• IP address, browser type, device information - for security, fraud prevention, and platform optimization
• Pages visited and features used - to improve user experience and platform performance

Payment Data

• Transaction history and credit balance - to manage your account billing
• Payment method details - processed and stored exclusively by our PCI-DSS compliant payment processors (Stripe, PayPal); we never store full card numbers on our servers

Legal Basis for Processing Your Data

Under GDPR Article 6, we process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a)) - for marketing emails, non-essential cookies, and optional profile features. You can withdraw consent at any time through your account settings.
• Contract Performance (Art. 6(1)(b)) - to provide the dating services you signed up for, including profile creation, matching, messaging, and credit transactions.
• Legitimate Interests (Art. 6(1)(f)) - for fraud prevention, anti-scam monitoring, platform security, and service improvement. We balance these interests against your rights through regular impact assessments.
• Legal Obligation (Art. 6(1)(c)) - to comply with tax reporting requirements, law enforcement requests, and regulatory obligations.

How We Share Your Information

We do not sell your personal data to third parties. We share information only in these limited circumstances:

• Payment Processors - Stripe and PayPal process transactions under their own privacy policies and PCI-DSS compliance standards
• Cloud Infrastructure - our servers are hosted on AWS (US and EU regions) with data encryption at rest and in transit
• Anti-Fraud Services - specialized tools scan for stolen photos and fraudulent patterns to protect all members
• Legal Requirements - we may disclose data when required by law, court order, or to protect the safety of our members
• Profile Visibility - your profile information is visible to other registered members as part of the dating service; you control what information appears on your profile

All third-party processors are bound by Data Processing Agreements (DPAs) that require them to handle your data with the same level of protection we provide.

Data Retention Policy

We retain your data only as long as necessary for the purposes outlined in this policy:

Your Privacy Rights Under GDPR and CCPA

Depending on your location, you have specific rights over your personal data. We honor all of the following regardless of where you live:

• Right to Access - request a copy of all personal data we hold about you
• Right to Rectification - correct any inaccurate or incomplete data in your profile or account
• Right to Erasure ("Right to Be Forgotten") - request permanent deletion of your data, subject to legal retention requirements
• Right to Data Portability - receive your data in a structured, machine-readable format (CSV or JSON)
• Right to Restrict Processing - limit how we use your data while a concern is being resolved
• Right to Object - opt out of processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent - revoke previously given consent at any time without affecting prior processing

CCPA-specific rights: California residents have the right to know what personal information is collected, request its deletion, opt out of its sale (we do not sell data), and exercise these rights without discrimination in service quality or pricing.

To exercise any of these rights, email [email protected] with "Privacy Rights Request" in the subject line. We verify your identity before processing requests and respond within 30 days (GDPR) or 45 days (CCPA).

Cookie Policy

We use cookies and similar technologies to operate our platform, analyze traffic, and personalize your experience. You can manage cookie preferences through your browser settings or our cookie consent banner.

Essential cookies cannot be disabled as they are required for the platform to function. Analytics and marketing cookies are only activated after you provide explicit consent.

How We Keep Your Data Secure

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers
• AES-256 encryption at rest for stored personal data and communication logs
• Role-based access controls - only authorized personnel access personal data, with activity logging
• Regular penetration testing - third-party security audits conducted quarterly
• Two-factor authentication available for all member accounts

Data Breach Notification Procedure

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

1. Notify the relevant supervisory authority within 72 hours of becoming aware of the breach (GDPR Art. 33)
2. Notify affected users without undue delay if the breach poses a high risk to their rights (GDPR Art. 34)
3. Provide clear information about the nature of the breach, data affected, and steps you should take
4. Document the breach and remedial actions in our internal breach register

Contact Our Data Protection Officer

For EU residents, the lead supervisory authority is the Irish Data Protection Commission (DPC). For UK residents, contact the Information Commissioner's Office (ICO). California residents may contact the California Attorney General's office for CCPA-related concerns.

This privacy policy is reviewed and updated annually or whenever significant changes to our data processing practices occur. We will notify registered members of material changes via email at least 30 days before they take effect.