Privacy Policy

DateSafe – UK Public Safety Initiative

Last updated: 29/12/2025

​

1. Introduction

DateSafe (“we”, “us”, “our”) is a UK-focused public safety initiative designed to observe patterns related to suspected drink spiking through anonymous, voluntary participation.

We are committed to handling personal data responsibly, transparently, and in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains:

• what information we collect

• the legal basis for processing it

• how it is used and stored

• your rights under UK law

​

2. Data Controller

 

For the purposes of UK data protection law, DateSafe is the data controller for information collected through this website.

Contact: adi@getdatesafe.com

 

3. Scope of this policy

​

This Privacy Policy applies to:

• use of the DateSafe website

• anonymous participation in the public dataset

• optional sign-up for updates

It does not apply to third-party websites linked from this site.

4. What data we collect

4.1 Anonymous participation data

When you participate anonymously, we may collect non-identifying information, including:

• UK region

• City or town (optional)

• Postcode sector (partial only, optional)

• Type of setting (e.g. bar, nightclub)

• Broad timeframe

• Contextual, non-free-text responses

We do not collect:

• names

• full postcodes

• exact addresses

• GPS location data

• dates of birth

• identification numbers

Participation data is anonymous by design.

​

4.2 Optional contact information

 

You may optionally provide an email address to receive updates about the initiative or future developments.

Providing an email address is entirely optional and is not required to participate.

​

4.3 Technical data

 

Like most websites, we may collect limited technical data such as:

• device type

• browser type

• general location (country-level only)

This data is aggregated and not used to identify individuals.

​

5. Legal basis for processing (UK GDPR)

 

Under UK GDPR, we must have a lawful basis for processing personal data.

​

5.1 Anonymous participation data

 

Legal basis:
Article 6(1)(e) – Task carried out in the public interest, and
Article 6(1)(f) – Legitimate interests

The collection of anonymous participation data serves a public interest in understanding public safety patterns and risks. The processing is proportionate, minimal, and does not override individual rights or freedoms.

Because the data is anonymous, it does not constitute personal data once collected.

​

5.2 Optional email addresses

 

Legal basis:
Article 6(1)(a) – Consent

Email addresses are collected only where you explicitly choose to provide them. You may withdraw consent at any time.

​

5.3 Cookies and analytics

 

Legal basis:
Article 6(1)(f) – Legitimate interests, where strictly necessary for site functionality or understanding aggregated usage.

We do not use cookies for behavioural profiling or advertising related to participation.

​

6. Special category data

 

DateSafe does not intentionally collect special category personal data under Article 9 UK GDPR.

Participants are not asked to disclose medical details, diagnoses, or identifying sensitive information.

​

7. How data is stored and separated

 

Participation data and email addresses are stored in separate systems with no shared identifiers or linking logic.

• Anonymous participation data is stored solely for analysis and aggregation

• Email addresses are stored separately for communications only

We do not combine these datasets.

Form submissions are processed through a third-party form provider acting as a data processor, with storage structured according to purpose.

​

8. How we use the data

Participation data is used to:

• observe patterns at an aggregated level

• inform research, journalism, and policy discussion

• support public understanding of safety issues

​

Email addresses are used only to:

• send updates about the initiative

• notify subscribers of future developments

​

We do not sell personal data or use it for targeted advertising.

​

9. What the data is not used for

 

Data is not used to:

• identify individuals

• verify incidents

• accuse venues or people

• confirm substances or intent

• make medical, legal, or enforcement decisions

​

DateSafe is not a reporting or diagnostic service.

​

10. Data sharing

 

We may share aggregated, anonymised data with:

​

• researchers

• journalists

• policymakers

​

We do not share personal data with third parties except where required to operate the website (e.g. hosting, form processing).

​

11. International transfers

 

Where third-party services involve data processing outside the UK, appropriate safeguards are used, such as:

​

• UK adequacy regulations

• standard contractual clauses

​

12. Data retention

​​

• Anonymous participation data is retained only as long as necessary for research and analysis

• Email addresses are retained until you unsubscribe or request removal

• Temporary processing data is periodically purged

​

13. Your rights under UK GDPR

 

Where applicable, you have the right to:

​

• access personal data we hold about you

• request correction or deletion of your email address

• withdraw consent for communications

• lodge a complaint with the Information Commissioner’s Office (ICO)

​

Because participation data is anonymous, it cannot be linked back to individuals.

​

14. Security

 

We take reasonable technical and organisational measures to protect data, including:

​

• access controls

• separation of datasets

• minimisation of collected information

​

No system is completely secure, but safeguards are applied proportionately.

​

15. Changes to this policy

 

This Privacy Policy may be updated as the initiative evolves.

The latest version will always be available on this page.

​

16. Contact

 

For privacy-related enquiries, contact: contact@getdatesafe.com

 

This policy exists to be clear, not to obscure.

​