Data Processing Agreement
Our commitment to lawful, fair, and transparent processing of your personal data under applicable privacy laws.
Effective Date: December 15, 2024 | Last Updated: December 15, 2024
Overview
This Data Processing Agreement ("DPA") describes how FlameLink processes personal data in compliance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other regional privacy regulations.
Lawful Basis
Legal grounds for processing
Cross-Border
International data transfers
Compliance
Multi-jurisdiction adherence
1. Definitions
Data Controller
FlameLink, Inc. determines the purposes and means of processing personal data for the dating service.
Data Subject
Individual users of FlameLink whose personal data is processed by our service.
Personal Data
Any information relating to identified or identifiable individuals using FlameLink.
Processing
Any operation performed on personal data, including collection, storage, use, and deletion.
2. Lawful Basis for Processing
2.1 Contract Performance (Art. 6(1)(b) GDPR)
Processing necessary to provide FlameLink dating services as agreed in our Terms of Service:
- • Profile creation and matching services
- • Communication between matched users
- • Account management and authentication
- • Premium subscription features
- • Tipping system functionality
2.2 Legitimate Interest (Art. 6(1)(f) GDPR)
Processing necessary for legitimate business interests, balanced against user rights:
- • Platform security and fraud prevention
- • Service improvement and analytics
- • Customer support and issue resolution
- • Business operations and administration
- • Marketing to existing customers (with opt-out)
2.3 Consent (Art. 6(1)(a) GDPR)
Processing based on freely given, specific consent for:
- • Location tracking for nearby matches
- • Marketing communications and newsletters
- • Optional data collection (social media integration)
- • Cookies for analytics and advertising
- • Promotional content and special offers
2.4 Legal Obligation (Art. 6(1)(c) GDPR)
Processing required to comply with legal obligations:
- • Age verification (18+ requirement)
- • Financial record keeping for tax purposes
- • Law enforcement cooperation when legally required
- • Regulatory reporting and compliance
- • Data breach notifications
3. Categories of Personal Data Processed
3.1 Identity Data
- • Name, username, age
- • Email address, phone number
- • Profile photos and videos
- • Government ID (for verification)
- • Biometric identifiers (photo verification)
3.2 Profile Data
- • Bio, interests, preferences
- • Education, profession
- • Relationship history and goals
- • Lifestyle and personality traits
- • Compatibility preferences
3.3 Behavioral Data
- • Swipe patterns and preferences
- • App usage and engagement metrics
- • Communication patterns
- • Feature usage statistics
- • Search and filter activity
3.4 Technical Data
- • Device information, IP address
- • Location data (with consent)
- • App performance and crash logs
- • Cookie and tracking data
- • Network and connection info
3.5 Financial Data
- • Payment card information
- • Subscription and billing history
- • Tip offer amounts and history
- • Transaction records
- • Refund and dispute information
3.6 Communication Data
- • Messages between users
- • Customer support conversations
- • Push notification preferences
- • Email communication history
- • Feedback and survey responses
4. Purposes of Processing
4.1 Primary Service Purposes
- • User authentication and account management
- • Profile creation and matching services
- • Communication facilitation between users
- • Compatibility scoring and recommendations
- • Tipping feature administration
- • Premium feature provision
4.2 Business Purposes
- • Service improvement and optimization
- • Analytics and usage statistics
- • Customer support and assistance
- • Marketing and promotional activities
- • Business administration and operations
- • Financial management and billing
4.3 Security Purposes
- • Fraud prevention and detection
- • Platform security and monitoring
- • Age and identity verification
- • Abuse and harassment prevention
- • Terms of Service enforcement
- • Risk assessment and mitigation
4.4 Legal Purposes
- • Legal compliance and regulatory requirements
- • Law enforcement cooperation
- • Dispute resolution and litigation
- • Tax and financial reporting
- • Audit and compliance monitoring
- • Data protection impact assessments
5. Data Retention Periods
5.1 Retention Schedule
5.2 Retention Criteria
We determine retention periods based on:
- • Purpose for which data was collected
- • Legal and regulatory requirements
- • Contractual obligations to users
- • Legitimate business interests
- • User expectations and rights
- • Risk of harm from continued processing
6. International Data Transfers
6.1 Transfer Mechanisms
FlameLink may transfer personal data internationally using these safeguards:
Adequacy Decisions
Transfers to countries deemed adequate by relevant data protection authorities
Standard Contractual Clauses
EU-approved contracts ensuring adequate protection levels
Binding Corporate Rules
Internal policies ensuring consistent global protection
Certification Schemes
Approved certification programs and codes of conduct
6.2 Primary Processing Locations
- • United States: Primary data processing and storage
- • European Union: EU user data processing within EEA
- • Canada: Backup and disaster recovery services
- • Australia: Asia-Pacific user data processing
7. Data Subject Rights
Under applicable data protection laws, individuals have the following rights:
Individual Rights
- • Access: Obtain copy of personal data
- • Rectification: Correct inaccurate data
- • Erasure: Delete personal data ("right to be forgotten")
- • Portability: Receive data in machine-readable format
- • Restriction: Limit processing under certain conditions
- • Objection: Object to processing for marketing/legitimate interest
Exercise Process
- • Request Methods: Email, in-app settings, support form
- • Response Time: 30 days (extendable by 60 days if complex)
- • Identity Verification: May require proof of identity
- • Free of Charge: No fee for reasonable requests
- • Appeal Process: Contact supervisory authority if dissatisfied
- • Automated Decisions: Right to human review of automated decisions
8. Contact Information
Data Protection Officer
- Email: dpo@flamelink.com
- Phone: +1 (555) 123-DATA
- Response Time: 48 hours
Privacy Team
- Email: privacy@flamelink.com
- Address: 123 Love Street, San Francisco, CA 94102
- Available: 24/7 for urgent matters
Questions About Data Processing?
Contact our Data Protection Officer for any questions about how we process your personal data