Loafalong

Privacy Notice

Last updated: 7 November 2026

1. Who we are

The data controller is Loafalong, operated by Kai Xian Lim, Limerick, Ireland. Contact: hello@loafalong.com.

2. What the waitlist stores

When you join the waitlist we store: 1. Your email address (required). 2. Your first name (optional). 3. Your county or city (optional). 4. Whether you want to book a companion or be one. 5. The date and time you signed up and the wording of the consent you gave.

We do not use tracking cookies or third-party analytics on this site.

3. Why and on what legal basis

We use this data only to tell you when Loafalong launches in your area and to ask whether you'd like to join as a client or companion. Our legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time by emailing us or using the unsubscribe link in any email; this does not affect processing already done.

4. Where it is stored

Waitlist, application and booking-request data is stored with Cloudflare, Inc. (our hosting provider and processor), on Cloudflare's D1 database service. Cloudflare may process data outside the EEA under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

5. How long we keep it

We keep waitlist data until launch and for no longer than 24 months from signup, or until you withdraw consent, whichever comes first. Then it is deleted.

6. Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent. Email hello@loafalong.com; we will reply within one month.

7. Complaints

You may complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland — www.dataprotection.ie. We'd appreciate the chance to resolve it first.

8. Changes

We will post updates here with a new date.

9. Companion checks and safety information (planned service)

Strictly platonic: no romance, no sexual services, no dating. We may use reports of prohibited requests to enforce our safety rules.

Companions complete three checks: identity verification using government photo ID by our payment provider before their first payout; a short video call with our team before approval, showing government photo ID so we can match it to their face; and two references that we check. Payment-provider ID verification is handled by the provider. The video call is not recorded, and we do not store copies of the ID shown or other ID documents ourselves; we keep only a note that the checks were passed. The payment provider handles its own identity-verification records under its privacy notice.

We minimise the personal data collected for checks and references. These checks are not part of the waitlist signup. Applying does not itself complete or pass these checks.

10. Companion applications and booking requests

  1. Applications collect your first and last name, email, optional phone, county and optional town/area, confirmation you are 18+, availability, activities and optional other activity, a short bio, two non-family references (name, relationship and email or phone), your acknowledgements of the checks, platonic rules and privacy notice, the notice version, submission time and application status. Do not send ID documents or sensitive personal details through the form.
  2. Requests collect your first name, email, optional phone, activities and a description, preferred date and time (Ireland local time), duration, county and optional town/area, proposed public meeting place, 18+ confirmation, agreement to the platonic rules, public-place rule and privacy notice, the notice version, submission time and request status.
  3. We use this information to assess applications, check references, respond to requests, and arrange a possible match and price. No payment is taken and no booking is confirmed by submitting. Our legal basis for your application or request is taking steps at your request before entering a contract (Article 6(1)(b) GDPR). Safety screening, reference verification and essential abuse prevention rely on our legitimate interests in operating a safe service (Article 6(1)(f)); you may object. A privacy acknowledgement is not marketing consent.
  4. Please obtain each reference’s permission before supplying their details and share this notice. We receive those details from the applicant and use them only to verify the reference. We will explain this when first contacting them. References may contact hello@loafalong.com to access, correct or delete their details or object. We do not publish reference contact details.
  5. Only the operator and authorised service providers access these submissions. A plain-text notification summary is emailed to the operator’s Gmail inbox for each saved waitlist signup, application or booking request. These notification copies are subject to the same retention and deletion periods as the underlying records. We do not publicly publish applications or automatically share contact details with potential matches. We will agree necessary sharing with you before a match is arranged. Cloudflare hosts these records as described above.
  6. We delete unsuccessful or withdrawn applications and associated reference details within 12 months of the decision or withdrawal. Pending applications are reviewed and deleted within 12 months of submission unless you agree to continue. Unfulfilled booking requests are deleted within 12 months of submission. Before retaining approved applications or confirmed-booking data longer, we will explain the applicable service and legal retention periods. Deletion requests go to hello@loafalong.com; limited records may be retained where necessary for a legal obligation or claim.
  7. These retention periods require operator review and deletion; they are not an automated deletion feature. We do not record video checks or store copies of photo ID ourselves. Your GDPR rights and complaint options above apply to these forms too.