Privacy Policy

1. Who we are

WhispSocio provides a social platform with live streaming, messaging, and a peer-to-peer marketplace for physical and digital goods. This policy explains how we collect, use, and protect personal information when you visit or use our services.

2. Data we collect

We collect information in three main ways: data you provide directly, data generated through your use of the platform, and data supplied by trusted third parties. We never sell personal data.

3. How we use personal information

We only process personal information when we have a lawful basis. The main purposes are listed below.

4. When we share information

We share personal information with carefully selected service providers that help us operate WhispSocio. Each provider is bound by contract to safeguard data and may only use it for our documented instructions.

We may also disclose information when required by law, in response to valid legal requests, or to protect the rights, property, or safety of our users, employees, or the public.

5. International data transfers

• Personal data may be transferred outside the UK or European Economic Area when we use providers such as Stripe or email services hosted in the United States.
• Whenever we transfer data internationally, we rely on Standard Contractual Clauses or other legally recognised safeguards and perform risk assessments.
• We monitor developments in international data transfer law and will update our safeguards where required.

6. Data retention

7. Security measures

• Encryption in transit (TLS 1.3) and at rest for sensitive data.
• Role-based access controls and multi-factor authentication for administrative accounts.
• Automated monitoring, logging, and alerting to detect unusual activity.
• Regular patching and infrastructure reviews, including backup and disaster recovery procedures.

8. Your privacy rights

If you are located in the UK or EU you have the following rights under the UK GDPR/EU GDPR:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete information.
• Erasure: Request deletion of your data when it is no longer needed or you withdraw consent.
• Restriction: Ask us to pause processing while a request is investigated.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests (including profiling) or direct marketing.
• Withdraw consent: Withdraw consent for optional processing at any time.

To exercise your rights, email legal@whispsocio.com or use the self-service tools above. We may ask for proof of identity before responding. We aim to reply within one month and will let you know if we need longer for complex requests.

9. Marketing and cookies

• We only send promotional emails with your explicit consent. You can withdraw consent via account settings or the unsubscribe link in any message.
• Service announcements, security alerts, and transaction emails are essential and cannot usually be opted out of.
• Our cookie practices are explained in the Cookie Policy. Non-essential cookies are only used after you provide consent through the cookie banner or settings.

10. Automated decision-making

We do not carry out automated decision-making that produces legal or similarly significant effects. Automated systems assist with spam and content detection, but human review is available and you can appeal moderation outcomes.

11. Children

WhispSocio is not directed at children under 13. We remove accounts where we learn that the user is under the minimum age or has provided false information. Parents or guardians can contact us at legal@whispsocio.com to request removal of unauthorised accounts.

12. Complaints and supervisory authority

If you have concerns about how we handle your data, contact us first at legal@whispsocio.com so we can resolve the issue. You also have the right to complain to the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk/make-a-complaint/
• Telephone: +44 303 123 1113

13. Changes to this policy

• We review this policy whenever we launch new features, update our processing, or to reflect legal requirements.
• Material changes will be notified at least 30 days in advance via email or on-site notice. Minor updates take effect immediately upon publication.
• The "Effective date" at the top shows when the latest version came into force.

14. Contact us

15. Regional notices

We operate globally and apply additional privacy provisions where local law requires them. These regional notices supplement the rest of this policy:

Version history

• Version 2.1 (10 November 2025) – Added regional privacy notices, clarified processors, and expanded international transfer detail.
• Version 2.0 (15 September 2025) – Added GDPR alignment and self-service tools.
• Version 1.0 (1 May 2024) – Initial policy.