Privacy policy

Last updated: July 2026

This Privacy Policy explains how CSM Limited (trading as DivaGirl & DivaStreet) ("we", "us", "our"), the operator of divastreet.co.uk and divagirl.co.uk (together, the "Platform"), collects, uses, shares, and protects your personal data. It applies to everyone who visits, registers with, or uses either site.

We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully. If you do not agree with it, you should not use the Platform.

1. Who We Are

CSM Limited (trading as DivaGirl & DivaStreet)
Company number: 01629301
Registered office: 8 Princes Parade, Liverpool, Merseyside, L3 1QH
Data protection contact: privacy@divastreet.co.uk

We are the data controller for personal data processed through the Platform.

2. Information We Collect

We collect the following categories of information:

Account information: username, email address, password (stored encrypted), date of birth, gender, and any other details you provide when registering.
Profile & listing content: anything you choose to add to your profile or a listing, including photos, descriptions, location, and contact preferences.
Verification information: where age or identity verification is required (see Section 6), we may collect and process documents or data needed to confirm this.
Communications: messages sent through our messaging system, reviews, comments, and support enquiries.
Payment information: if you buy credits, a subscription, or a premium feature, payment is handled by our third-party payment processors (for example Stripe, PayPal, or Razorpay). We do not store full card details ourselves.
Usage & device data: IP address, browser type, device identifiers, pages viewed, and general usage patterns, collected automatically as you use the Platform.
Location data: approximate location (from your IP address, or precise location if you choose to share it) used to show you relevant local listings.
Cookies & similar technologies: see our Cookies Policy for full detail.

3. Special Category Data

Because the Platform includes dating and adult services features, some information you choose to share — such as sexual orientation, gender identity, or relationship preferences — may be classed as "special category data" under UK GDPR. We only process this data on the basis of your explicit consent, given when you voluntarily add it to your profile. You are never required to share this information, and you can remove it from your profile at any time.

4. How We Use Your Information

We use your data to:

Create and manage your account;
Display your profile and listings to other users, as intended by the Platform's core function;
Verify your age and, where applicable, your identity;
Process payments for credits, subscriptions, and premium features;
Operate messaging, notifications, and other platform features;
Detect, investigate, and prevent fraud, abuse, and illegal activity;
Respond to support requests and enforce our Terms of Use;
Improve and secure the Platform; and
Comply with our legal obligations, including requests from law enforcement.

5. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

Contract — processing necessary to provide the account and services you've signed up for.
Consent — for special category data, optional marketing communications, and certain non-essential cookies.
Legitimate interests — for fraud prevention, platform security, and service improvement, balanced against your rights.
Legal obligation — where we're required to retain or disclose data by law.

6. Age Restrictions & Verification

The Platform is strictly for users aged 18 and over. We require all users to confirm their age at registration, and we operate additional age-verification checks on adult content and listings. Any account found to belong to a person under 18, or any content depicting or soliciting involvement of a minor, will be removed immediately and reported to the appropriate authorities. See our Terms of Use for our full policy on this.

7. How We Share Your Information

We do not sell your personal data. We may share it with:

Other users — information you choose to make public on your profile or listing is visible to other users by design.
Service providers — hosting providers, payment processors, email/SMS providers, push-notification services, age/identity verification providers, and analytics tools, all bound by contractual confidentiality obligations.
Law enforcement & regulators — where required by law, court order, or to protect the safety of any person, including in connection with suspected exploitation, trafficking, or other criminal activity.
Professional advisers — such as our lawyers, auditors, and insurers, where necessary.
A buyer or successor — if the business is sold, merged, or restructured, subject to the same protections described in this policy.

8. International Data Transfers

Where we use service providers based outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Addendum or adequacy regulations, before any data is transferred.

9. Data Retention

We retain personal data for as long as your account is active, and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. Verification records and moderation logs relating to safety or legal compliance may be retained for longer where required by law. You can request deletion of your account at any time — see Section 10.

10. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you;
Correct inaccurate or incomplete data;
Request erasure of your data ("right to be forgotten");
Restrict or object to certain processing;
Receive your data in a portable format;
Withdraw consent at any time, where processing is based on consent; and
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at privacy@divastreet.co.uk. We will respond within one month, as required by law.

11. Cookies

We use cookies and similar technologies to operate the Platform, remember your preferences, and understand how it's used. Full details, including how to manage your preferences, are in our Cookies Policy.

12. Security

We use industry-standard technical and organisational measures — including encryption, access controls, and regular security review — to protect your data. No system is completely secure, but we work to minimise risk and respond quickly to any incident. In the event of a data breach likely to affect your rights, we will notify you and the ICO as required by law.

13. Children's Privacy

The Platform is not intended for, and must not be used by, anyone under 18. We do not knowingly collect data from minors. If we become aware that we have done so, we will delete that data promptly and take appropriate action, including reporting to the relevant authorities where necessary.

14. Third-Party Links

Listings, profiles, or messages may contain links to third-party websites. We are not responsible for the privacy practices of those sites, and we encourage you to review their own privacy policies.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version here with a revised "Last updated" date, and where changes are significant, we will notify you directly.