Privacy policy
Last updated October 2026. This policy explains how Second Course uses your personal data under the UK GDPR and the Data Protection Act 2018.
Who we are
Second Course is the data controller for the personal data described here. Contact us at hello@secondcourse.app. For safety concerns, email safety@secondcourse.app.
What we collect
- Account details: email, first name, city, preferences and photos.
- Verification result: pass/fail and your age, provided by our ID verification partner. We never store images of your ID or selfie.
- Who you'd like to meet: special category data (it can reveal sexual orientation). We only collect it with your explicit consent, never show it publicly and never send it to analytics.
- Bookings, payments (processed by Stripe — we don't see your card), ratings, chats and safety reports.
Why we use it
- To provide the service (contract): matching, booking and chat.
- To keep people safe (legitimate interests and legal obligation): verification, moderation and fraud prevention.
- Matching preferences (explicit consent). You can withdraw consent at any time in your profile.
Who we share it with
Your verification provider, Stripe for payments, our hosting providers, and partner venues (booking name and party size only). Other guests see your first name, age and approved photos only once matched. We never sell your data.
How long we keep it
While your account is open, then up to 30 days after deletion, except safety reports and payment records we must keep longer by law (up to 6 years).
Your rights
You can access, correct, download or delete your data, object to processing, and withdraw consent. You can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).