Your Data Rights

1. Access

Under Article 15 of the UK GDPR you can ask whether we process personal data about you and receive a copy, together with the purposes, recipients, retention periods and source set out in our Privacy Policy. For a member this covers account data, profile, content, contacts, Premium transaction records, connection logs, moderation records and correspondence. Where a copy would reveal information about another person, such as the other side of a private message or the identity of someone who reported you, we redact that information.

2. Rectification

Under Article 16 you can have inaccurate data corrected and incomplete data completed. Members can change their gender, bio, photos and password in account settings at any time. For anything else, including a moderation record you believe is factually wrong, email us. While we check a disputed record you may ask us to restrict its use (section 4).

3. Erasure and deleting your account

Under Article 17 you can ask us to delete your data. Members can delete their account themselves: use the account deletion option in your account settings. Your profile disappears immediately and your account data and content are deleted or anonymised within 30 days. Guest data is deleted automatically 24 hours after you leave, so a guest normally has nothing left to erase.

Some data is kept after deletion because the law requires it or because we need it to enforce a ban or defend a claim: Premium transaction records (6 years, HMRC), connection logs (12 months), ban records (12 months, or 3 years for a permanent ban), and content and data included in a report of child sexual exploitation and abuse to the National Crime Agency (report reference 5 years, content and associated data 12 months, under the Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2026). We tell you which exception applies when we answer.

4. Restriction

Under Article 18 you can ask us to stop using your data, while still storing it, when you contest its accuracy, when you have objected and we are considering the objection, when the processing is unlawful but you prefer restriction to erasure, or when you need the data for a legal claim. We tell you before we lift a restriction.

5. Portability

Under Article 20 members can receive the data they gave us and that we process by automated means on the basis of contract or consent, in a structured, commonly used, machine-readable format: account fields, profile, bio, photos, voice notes and message history. Where technically feasible we transmit it directly to another controller you name.

6. Objection

Under Article 21 you can object at any time to processing based on our legitimate interests, which at ChatNow means security and spam prevention, ban enforcement, enforcement of the Terms and aggregate service statistics (section 4 of the Privacy Policy). Tell us what your particular situation is; we then stop unless we can show compelling legitimate grounds that override your interests, or the processing is needed for legal claims. You can also object to direct marketing at any time, with no conditions: use the unsubscribe link in any marketing email or write to us, and marketing stops immediately. Processing we carry out under a legal obligation, such as age assurance and CSEA reporting, is not open to objection.

7. Automated decisions, including moderation

Our automated tools can remove a flagged message or apply a short mute or rate limit without a human looking first; no permanent ban is ever applied on a purely automated basis without human review. Under Articles 22A to 22D of the UK GDPR you have the right, for any automated outcome that affects you, to be told that automation was involved, to obtain human review, to put your point of view and to contest the decision. Every moderation notice tells you whether automation was involved and how to appeal. Appeals go through the Complaints & Appeals procedure and are decided within 14 days by a different human reviewer; you can also raise a data protection point about the same decision with privacy@chatnow.fr.

8. Withdrawing consent

Where we rely on your consent you can withdraw it at any time, as easily as you gave it, without affecting processing that has already taken place. Cookies: use the "Cookie settings" link in the footer of every page. Special category data (the "Trans" or "CD" gender option and adult-themed rooms): change the field, leave the room or delete the field in settings. Marketing emails: use the unsubscribe link.

9. How to make a request

Email privacy@chatnow.fr, write to Skyline Online LLC, 1209 Mountain Road Place NE, Ste N, Albuquerque, NM 87110, USA, or contact our UK representative, DataRep, 107-111 Fleet Street, London EC4A 2AB, United Kingdom. You do not need to use any particular form. Tell us which right you are exercising, what data or period it concerns, and the username or account email involved.

9.1 Confirming it is you

We verify identity in a way that is proportionate to the data at stake, and we never ask for an identity document. For a member, writing from the email address registered on the account is normally enough; if you write from another address we send a one-time confirmation link to the registered address. For a guest, you must contact us while your session data still exists (within 24 hours of leaving) and from the same device and session, so that we can match the username to the session ID and device identifier we hold. If we cannot match a request to a person we tell you why rather than release data to the wrong person.

9.2 Timing and cost

Requests are free. We respond within one month of receiving the request and, where we need it, of confirming your identity. For complex or numerous requests we may extend by up to two further months, and we tell you within the first month if so. As permitted by the Data (Use and Access) Act 2025, we carry out searches that are reasonable and proportionate, and if we need you to clarify what you are looking for, the clock stops until you reply. We may refuse or charge a reasonable fee for a request that is manifestly unfounded or excessive, for example one that repeats an identical request already answered; we explain our reasons and your right to complain if we do.

10. What we cannot do

• Identify a guest after 24 hours. Guest content is deleted 24 hours after the session ends; after that we hold nothing that links a guest username to a person, other than connection logs and any moderation record about the session, which are kept for 12 months, and we cannot retrieve messages, images or voice notes.
• Provide webcam or voice streams. They are relayed and never recorded, so there is nothing to give you or to delete.
• Recover content you have deleted, or remove copies that other users have captured on their own devices.
• Hand over another person's data, including the identity of someone who reported you, the other side of a private message beyond what you already hold, or a moderator's identity.
• Delete data under statutory retention or needed for a live legal claim, as listed in section 3; nor can we tell you whether a report has been made to a law-enforcement body where the law prevents it.
• Reach data held by independent controllers: AgeVerif processes your age-check data under its own privacy notice, Google your Google account data, and the payment processor your card data. Requests about that data go to the organisation concerned.

11. Complaining to us

Section 103 of the Data (Use and Access) Act 2025, in force since 19 June 2026, gives you a statutory right to complain to us about our handling of your personal data, including how we dealt with a request under this page. Email privacy@chatnow.fr with the subject line "Data protection complaint" or write to the registered office. We acknowledge within 30 days, investigate, keep you informed and give you a written outcome without undue delay. Our outcome letter tells you about your right to go to the ICO.

12. Complaining to the ICO

You can complain to the Information Commissioner's Office at any time, although the ICO normally expects you to have raised the matter with us first.

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
https://ico.org.uk/make-a-complaint/

You also have the right to apply to the courts for a remedy, including compensation.