Privacy Policy – NikkahNight
Last updated: [date] · DRAFT – to be finalised once company details are known
1. Who we are
NikkahNight ("we", "us") is operated by Alpha Rules, a sole proprietorship (eenmanszaak) in the Netherlands trading as NikkahNight, Chamber of Commerce (KvK) 89713834, VAT NL004758576B38. Contact: info@nikkahnight.com. We are the data controller for the processing described here.
2. What data we collect
- Account data: name, email address, password (hashed), country, confirmation that you are 18+ (we check your date of birth once and store only "18+ confirmed").
- Questionnaire answers and reports: your answers about expectations in marriage, including intimacy. These may reveal your religious beliefs and information about your sex life, which are special categories of personal data under Article 9 GDPR.
- Match data: which people you invited or matched with, and the consents you gave.
- Payment data: order, amount, payment status. Payments are handled by Paddle, our reseller (merchant of record); we never see your full card details.
- Waitlist: your email address, if you sign up for our launch waitlist, used only to tell you when we launch and with your consent; you can unsubscribe at any time and the waitlist is deleted in full 3 months after launch.
- Technical data: IP address, device and browser data, and cookies (see section 9).
3. Why and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account and delivering the test and report | Performance of contract (Art. 6(1)(b)) |
| Processing answers about faith and intimacy | Your explicit consent (Art. 9(2)(a)) |
| Sharing your report with a match | Your separate explicit consent, and that of the other person |
| Payments, invoices, tax records | Legal obligation (Art. 6(1)(c)) |
| Security and fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails | Consent, which you can withdraw at any time |
4. Sharing with a match
Your report is only shown to someone else after both of you have explicitly agreed. You can withdraw that consent at any time; the other person then loses access going forward. Individual answers are shown only as described on our "Who sees what" overview.
5. Who else receives your data
Only service providers working for us under a data processing agreement: STRATO GmbH (hosting and encrypted backups, Germany), Paddle.com Market Ltd (reseller and payment processing, United Kingdom; acts as an independent controller for payment and tax data) and Brevo (Sendinblue SAS, transactional email, France). We never sell your data and never share your answers, reports or match data with partners, advertisers or affiliates. Only if you accept marketing cookies, Meta and TikTok receive information about your visit to our public pages and whether you made a purchase, never anything from your test or account.
6. Where your data is stored
Your account, answers and reports are stored within the European Union. Payment data is processed by Paddle in the United Kingdom, which the EU recognises as offering an adequate level of data protection. Your answers and reports never leave the EU.
7. How long we keep it
- Account, answers, reports and match data: deleted 12 months after your last activity, or earlier if you delete your account.
- Invoices and payment records: 7 years, as required by Dutch tax law.
- Date of birth: not stored after the 18+ check.
8. Your rights
You may access, correct, delete or export your data, object to or restrict processing, and withdraw consent at any time (without affecting prior processing). Email info@nikkahnight.com; we reply within one month. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or, if you live in the UK, the Information Commissioner's Office (ICO).
9. Cookies
We use necessary cookies to run the site. Marketing cookies and pixels from Meta (Facebook/Instagram) and TikTok are only placed after you consent via the cookie banner, and never on pages of the test, your report, matches or your account. Meta and TikTok may process this data outside the EU. You can change your choice at any time.
10. Security
Encrypted connections, encryption of reports at rest, restricted staff access, and regular review of our measures.
11. Changes
We will announce material changes on the site and, where relevant, by email.