Privacy Policy

1. Overview

This policy explains what personal data Wanderlust Wonderer (Salt Social Limited) collects, why, and your rights over it. We aim to collect only what we need to run the service.

2. What we collect

Account details (email and sign-in details managed by our authentication provider), your pass and purchase history, messages and content you interact with, your credit balance, and limited technical data such as device and usage information needed to run and secure the site.

3. Age checks

To confirm you're over 18, our age-check provider, Didit, estimates your age from a short face scan and may ask for an ID document. We receive only the result (passed or not), not your scan or ID.

4. Payments

Payments are processed by our payment provider, emerchantpay, on their secure payment page. We never see or store your full card details. emerchantpay shares with us only what we need, such as the amount, what you bought and whether the payment was approved. Their privacy policy is at www.emerchantpay.com/privacy-policy. When you check out, we look up your country from your IP address on our own server (using GeoLite2 data created by MaxMind, available from https://www.maxmind.com), only to check that we can sell to your country and to fill in your billing country. We don't store the result.

5. Profile answers

If you choose to fill in your profile, including likes, dislikes and kinks, we keep it privately and use it only to personalise your messages. We only store it with your consent, and you can change or delete it at any time from your profile.

6. Email

We send service emails (sign-in links, receipts, pass reminders and message alerts) through our email provider, Resend. Message alerts never include the message itself.

7. How we use your data

To run your account and pass, take payments, deliver content and messages, check your age, prevent fraud and abuse, and meet our legal obligations.

8. Sharing

We share data only with the processors that help us run the service, under appropriate agreements: emerchantpay (payments), Didit (age checks), Replit (hosting), Supabase (database), Resend (email), PostHog (site analytics, only if you accept cookies), Gelato (printing and posting prints) and the courier for physical orders. We do not sell your personal data.

If you buy a physical item, we use your name and delivery address only to make and send your order.

9. Cookies

We use a few essential cookies to keep you signed in and the site secure. These don't need consent.

With your consent, we use PostHog analytics cookies (names starting ph_) to understand how the site is used. They're off unless you choose Accept in the cookie banner, and you can change your mind by clearing your browser storage for this site. We also note which link or campaign brought you to the site (cookies ww_utm and ww_utm_last, kept for 90 days).

10. Security and retention

Access to member content is restricted and media is watermarked and traceable. To protect your account and prevent sharing or fraud, we keep a record of sign-ins, including IP address, approximate location and device, for up to 90 days. We keep personal data only as long as needed for the purposes above or as the law requires, then delete or anonymise it. Payment records are kept as the law requires even if you delete your account.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete or export your data, and to object to or restrict certain processing. You can delete your account yourself from Account settings. For anything else, email hello@wanderlustwonderer.com. You can also complain to the Information Commissioner's Office (ico.org.uk).

12. Contact

Wanderlust Wonderer is a trading name of Salt Social Limited, company number 15658640, registered in England and Wales. Salt Social Limited is registered with the UK Information Commissioner's Office under registration number ZC266705. For any privacy request, contact hello@wanderlustwonderer.com.