Good to know

Privacy Policy

Last updated: July 31st, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to DILF PRODUCTIONS LIMITED, 159 West Street, Glasgow, Scotland, G5 8BN.
  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
  • Country refers to: United Kingdom
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the Website.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • Website refers to DIlf.uk, accessible from https://dilf.uk
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Usage Data

If you register as a DILF member, you will also provide your name, contact details, date of birth, and address. Upon registration, you are assigned a unique membership ID which is used to verify your DILF membership.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Cookies

We keep cookies to a strict minimum. We only set cookies that are strictly necessary for the Service to work, and we do not use any advertising or cross-site tracking cookies. Because nothing we set requires consent under UK law, we do not show a cookie consent banner.

The cookies we set are:

  • Authentication cookies - set when you sign in, to keep your session secure. They expire after 48 hours or when you sign out.
  • Age confirmation - set when you confirm you are over 18, so we do not ask on every visit. Expires after 3 months.

The one third-party exception is the embedded Ticket Tailor checkout: when you choose to buy a ticket, the checkout frame is provided by Ticket Tailor and may set its own cookies to process your booking (see Third-Party Service Providers below).

Our analytics do not use cookies at all (see Analytics Services below). For full details, see our Cookies Policy.

Analytics Services

We use multiple analytics tools to understand how our Service is being used:

  1. Vercel Analytics: We use Vercel Analytics, a privacy-focused analytics solution. Vercel Analytics collects anonymous usage data about page views, referring sites, and general user interactions without using traditional cookies. Instead, it creates a temporary hash from the incoming request that cannot identify you personally. All visitor session data is automatically discarded after 24 hours. No personal identifiers are collected that could track or cross-check users across different websites or applications.
  2. Custom Analytics System: We operate our own custom analytics system to track website interaction events and user behavior patterns. This system collects anonymous data about how users interact with our website, including clicks, scrolls, form interactions, and navigation patterns. Our custom analytics system does not collect any personally identifiable information and operates on an anonymous basis. The data collected includes interaction timestamps, page elements engaged with, and general usage patterns. This information is used solely to improve our website functionality, user experience, and service performance. All data collected by our custom analytics system is anonymized and cannot be used to identify individual users. Pending analytics events may be briefly buffered in your browser's local storage before being sent to us; this buffer contains no personal information.
  3. Sentry Error Monitoring: We use Sentry to monitor errors on the Service in production. When an error occurs, we collect the error details and technical context, and — if you are signed in — your account ID, so we can investigate problems affecting specific accounts. We do not use session replay, and Sentry is configured not to collect your IP address automatically. Error data is processed and stored within the European Union and retained for 30 days. https://sentry.io/privacy/
  4. Vercel Web Application Firewall: A Web Application Firewall monitors and blocks malicious traffic. The firewall logs your IP address, request information (path, method, timestamp), browser and device information, and security event data (blocked or challenged requests). These logs help prevent attacks and improve security. For more information, visit vercel.com/legal/privacy-policy.

Fraud and Abuse Prevention

To protect the Service and your account we process limited technical data:

  • Bot detection: Our sign-in page uses Vercel BotID, which analyses device and browser signals to distinguish people from automated bots. These signals are processed by Vercel and are not used to identify you.
  • Rate limiting: We process your IP address to limit repeated requests (for example, sign-in attempts). This check is short-lived and separate from the request logs below.
  • Request logs: Our servers keep technical request logs (IP address, browser user-agent, endpoint, and account ID where signed in) for up to 7 days for security and reliability monitoring.
  • Admin audit logs: Actions taken in our administration system are logged (including the administrator's identity and IP address) and kept for 90 days.

Maps

Some pages display interactive maps. Map imagery is loaded from CARTO, a third-party basemap provider; when a map loads, your browser requests map tiles directly from CARTO, which necessarily discloses your IP address and the area of the map you are viewing to them. https://carto.com/privacy/

Competitions and Promotions

When you enter one of our competitions or promotions, we record your entry against your account, including any answers you submit (for example, a location guess on a map) and whether you won. We use this to run the competition, pick winners, and contact you if you win. Entry records are linked to your membership account.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain our Service, including to monitor the usage of our Service.
  • To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
  • For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
  • To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
  • To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
  • To manage Your requests: To attend and manage Your requests to Us.
  • For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
  • For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.
  • Aggregated insights: We periodically generate internal reports about how the Service is performing (for example, ticket sales trends and email campaign statistics). These reports are built only from aggregated, anonymised statistics, never from information about identifiable individuals, and any statistic covering fewer than five people is excluded. We use Anthropic's Claude AI service to help produce these reports; only the aggregated statistics are shared with it.

We may share Your personal information in the following situations:

  • With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
  • For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
  • With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
  • With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
  • With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside.
  • With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Third-Party Service Providers

Ticket Processing and Sales

We use a third-party ticket processor to handle ticket sales for our events. When you purchase tickets through our website, your personal information (including name, email address, payment information) will be collected and processed by our ticketing partner.

Our ticketing processor operates as a data controller for the transaction data they collect. They have their own privacy policy which governs how they use your personal information. Their privacy policy explains that they:

  • Collect your name, address, email and payment information for ticket processing
  • May use your data for their legitimate interests including customer service and analytics
  • May share your data with their service providers, sub-contractors, and agents that perform functions on their behalf
  • Implement security measures to protect your personal data
  • Retain personal data for at least 6 months following your last contact with them.

You can view their complete privacy policy here, or on our ticket purchase dialog. By purchasing tickets through our service, you acknowledge that your information will be subject to both our privacy policy and our ticketing partner's privacy policy here.

Checkout pre-fill for members. If you are signed in as a DILF member when you open the ticket checkout, we pre-fill the checkout form with details from your membership record: your name, email address, phone number, postal address, and DILF membership number, to save you typing them. This means those details are shared with Ticket Tailor when the checkout opens, even if you do not complete a purchase.

Ticket buyer accounts. When you buy a ticket to a DILF event, we receive your order details from Ticket Tailor and may create a DILF account for you using the name and email address from your order, so we can link your tickets to any current or future membership. You can ask us to delete this account at any time (see Delete Your Personal Data).

Apple Wallet Membership Passes

If you are a member, you can add a digital membership pass to Apple Wallet. The pass contains your name, email address, and DILF membership ID, plus a QR code that links to a page verifying your membership status. Once added, the pass is stored on your device in Apple Wallet and is subject to Apple's terms; we cannot update or remove it remotely, and we receive no information from Apple about your device.

Email Delivery

We use Twilio SendGrid to deliver both transactional emails (such as membership confirmations and event reminders) and marketing emails. SendGrid processes your email address and the message content on our behalf, and reports delivery events back to us (delivered, bounced, spam complaint) so we can maintain a clean mailing list.

Our marketing emails include a tracking pixel that tells us if you opened the email. We use this to measure campaign effectiveness. We do not track link clicks. You can block the tracking pixel by turning off remote images in your email client.

SendGrid (Twilio Inc.) is our email service provider. Our account uses SendGrid's EU data residency, so your email address and message content are stored and processed within the European Union. Their privacy policy: https://www.twilio.com/en-us/legal/privacy.

Email Marketing

We operate mailing lists to send you news, event announcements, and information about products and services we think you'll be interested in.

What we store. For each subscriber we hold an email address, and where provided: first name, last name, and phone number. If you are a DILF member, your name and phone number from your membership record are automatically copied to your marketing profile so we can personalise emails. Your postal address, date of birth, and other membership details are never copied to your marketing profile.

This is the legal bit, please have a read if you want to know more about what we do to protect your privacy.

Our lawful basis:

  • If you are a DILF member or have bought a ticket to one of our events, UK law allows us to email you about similar events and services without a separate signup. You can unsubscribe at any time.
  • If you signed up directly (for example via a newsletter form), we rely on your consent, which you can withdraw at any time.

How to unsubscribe. Every marketing email contains an unsubscribe link. You can either manage individual list subscriptions from the preferences page, use "Maybe Later, Daddy (Marketing opt out)" to remove yourself from every marketing list in one click, or manage your preferences from the "Mailing List Preferences" section of your DILF account when signed in.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Membership records are retained for as long as your account remains active, or as long as we are legally required to keep them for local licensing reasons. Order records (tickets) are retained for as long as needed for accounting and dispute purposes.

Activity and audit logs are automatically deleted after 90 days. Technical request logs are deleted after 7 days. Email delivery events reported by our email provider (including any device information they contain) are deleted after 14 days. Sign-in links expire after 2 hours.

Mailing list profiles are retained while they remain useful for the purposes described above, or until you ask us to remove them. Individual send logs are aggregated into anonymous campaign statistics 14 days after a campaign completes; after that, we keep only your email address and the final delivery status.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

In particular: email sending uses SendGrid's EU data residency, and images and media are served from a content delivery network hosted in the United States (DigitalOcean). Where data leaves the UK, we rely on appropriate safeguards such as the UK's data-bridge/adequacy arrangements or standard contractual clauses.

Delete Your Personal Data

You have the right to ask us to delete the Personal Data we hold about you. You can update or amend your details at any time by signing in to your account and visiting your account settings. To delete your account or any other personal information, contact us at info@dilf.uk and we will action your request within one month.

Please note that we may need to retain certain information where we have a legal obligation or lawful basis to do so (for example, order records we must keep for accounting purposes).

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Children's Privacy

Our Service is intended for use only by persons who are at least 18 years of age. We do not direct any of our content or services specifically at persons under 18 years of age. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that a person under 18 has provided us with personal data, we will take steps to delete such information.

All ticket purchasers and event attendees must be at least 18 years of age, and we may require verification of age before allowing access to Our Service or events.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us by email: info@dilf.uk