Privacy Policy

XDATE operates an online advertising directory at xdate.co.nz (the “Platform”). This Privacy Policy explains how we collect, use, store, disclose and dispose of personal information when you visit the Platform, register an account, publish or view a listing, purchase a paid feature, or contact us.

We handle personal information in accordance with the Privacy Act 2020 (New Zealand) and its 13 Information Privacy Principles (“IPPs”). Where we refer to an IPP below, the reference is to the corresponding principle in that Act.

Effective date: 14 October 2026

1. Who we are and how to contact us

For the purposes of the Privacy Act 2020, XDATE is the agency that holds the personal information described in this Policy.

Privacy enquiries and requests: [email protected]
General support: [email protected]
Website: https://xdate.co.nz/

We ask that privacy requests be sent to the privacy address above so they can be logged and actioned within the timeframes set by the Privacy Act 2020.

2. Our role: we are an advertising directory, not an agency

The Platform publishes advertising and information supplied by third parties. We are not an escort agency, brothel operator, booking service, manager or representative of any person advertised on the Platform. We do not provide, arrange, negotiate, broker or take any commission from the services advertised, and we do not act as an intermediary between advertisers and visitors.

This matters for privacy: the person or business named in a listing is responsible for the personal information they choose to publish and for how they handle information they receive from you. When you contact an advertiser, that advertiser handles your information under its own privacy obligations. We only hold the information described in this Policy.

3. What personal information we collect

3.1 Information you give us

• Account information: username, email address, password (stored in hashed form), language and display preferences, account type and status.
• Listing and profile information (advertisers): the text, photographs, categories, service descriptions, rates or indications, working hours, and location details (such as city or suburb) that you choose to publish. This information is intended to be public.
• Verification information (where you choose to verify): information and images submitted to confirm that you are 18 or over and that the person depicted is you. Verification material is used only for that purpose.
• Communications: messages you send to us, including support requests, reports of misuse, and complaints, together with associated metadata such as date and time.
• Billing information: records of purchases of paid features, including amounts, currency, timestamps, transaction identifiers and any invoice details you provide. Card and bank details are entered directly with our payment providers and are not stored by us.

3.2 Information we collect automatically

• Technical information: IP address, approximate location derived from IP address, device and browser type, operating system, language settings, screen characteristics and connection data.
• Usage information: pages and listings viewed, search terms and filters used, referring page, and the dates and times of your visits.
• Cookies and similar technologies: session and preference data described in section 13.
• Security and integrity records: system events, error logs, and signals used to detect spam, fraud, scraping, abuse and attempts to circumvent our safeguards.

3.3 Information we receive from others

We may receive information about you from other people, for example where a visitor or another advertiser reports a listing or an account to us, or where a payment provider or service provider passes on information relating to a transaction, a chargeback, or suspected fraud.

4. How we collect personal information

We collect personal information directly from you wherever it is reasonable and practicable to do so, in line with IPP 2. Where we collect information indirectly — for example, technical information generated by your browser, or a report made about a listing by another person — we do so because collecting it directly is not practicable, or because the information is necessary to investigate a complaint.

We collect information by lawful and fair means and do not collect it in a manner that is unreasonably intrusive (IPP 4). We do not purchase personal information from data brokers.

5. Why we collect and use personal information

We collect personal information for the following purposes:

• Operating the Platform: publishing, hosting and displaying listings and enabling the directory to function.
• Accounts and access: creating and authenticating accounts and managing your settings.
• Safety and age assurance: confirming that users and advertisers are 18 or over, and preventing the publication of content that involves minors.
• Moderation and enforcement: reviewing content, investigating reports, removing or restricting listings that breach our Terms of Use, and protecting the integrity of the Platform.
• Security and fraud prevention: detecting and preventing spam, scams, fraudulent payments, scraping, malware, and unauthorised access.
• Paid features: processing purchases, maintaining billing records, and handling refunds, disputes and chargebacks.
• Communication: responding to support requests, complaints and legal requests, and sending service and security notices.
• Improvement: understanding how the Platform is used so we can fix problems and improve features, using aggregated or de-identified information where practicable.
• Legal compliance and rights: meeting our legal obligations, enforcing our agreements, and establishing, exercising or defending legal claims.

We do not use personal information for purposes unrelated to those above without first taking reasonable steps to notify you.

6. How we store and protect personal information

We apply reasonable technical and organisational safeguards to protect personal information against loss, unauthorised access, use, modification or disclosure, as required by IPP 5. Depending on the information and the risk, these safeguards include:

• encryption of data in transit using TLS/HTTPS, and encryption of stored data where appropriate;
• hashed storage of account passwords;
• role-based access controls, so that access to personal information is limited to those who need it for their role;
• logging and monitoring of administrative and system activity;
• patching and vulnerability management for the software we run;
• regular backups and controlled retention, so that information does not persist indefinitely.

No online service can be guaranteed to be completely secure. Please choose a strong, unique password, keep your account credentials confidential, and contact us immediately at [email protected] if you believe your account has been compromised.

We do not store payment card numbers. Payments are processed by third-party payment providers, and card details are submitted directly to those providers.

7. Who we share personal information with

We do not sell personal information, and we do not rent or trade it. We disclose personal information only where it is necessary for the purposes described in this Policy, and consistent with IPPs 10 and 11. The categories of recipients are:

• Infrastructure and hosting providers that operate the servers, storage, content delivery and monitoring used to run the Platform.
• Payment providers that process payments, verify transactions and assist with fraud prevention and chargebacks.
• Email and communication providers used to deliver service messages and support correspondence.
• Analytics providers, where analytics are enabled, to help us understand aggregate usage of the Platform.
• Security and anti-abuse providers, including services used to filter spam, block malicious traffic and protect against automated scraping.
• Professional advisers, such as legal advisers and accountants, where necessary.
• Law enforcement, regulators and courts, where we are required or permitted by law to disclose information, as described in section 12.
• A successor entity, in connection with a merger, acquisition, restructure or sale of assets, subject to this Policy continuing to apply to the information transferred.

Where we engage a service provider to handle personal information on our behalf, we do so under arrangements that require them to protect the information consistently with the Privacy Act 2020, and we remain responsible for that information.

8. Disclosure overseas

Some of the service providers listed in section 7 are located outside New Zealand. Accordingly, personal information may be transferred to, stored in, or accessed from other countries.

Before disclosing personal information overseas, we take reasonable steps to ensure that the receiving party is subject to safeguards that are comparable to the protections available under the Privacy Act 2020. Consistent with IPP 12, we do this by relying on one or more of the following: the destination country having comparable privacy protections, contractual data protection terms with the recipient, the information being subject to an equivalent privacy scheme, or your informed consent. You may contact us at [email protected] if you would like to know more about how personal information is protected when it is disclosed overseas.

9. Unique identifiers

Where we assign a unique identifier to you, such as an internal account reference, we do so only for the purposes of operating the Platform. In line with IPP 13, we do not use or disclose that identifier in a way that would enable it to be used to identify you across other agencies, and we do not require you to disclose a unique identifier assigned by another agency (such as a government identifier) unless it is necessary for a purpose connected with our functions.

10. How long we keep personal information

We keep personal information only for as long as it is necessary for the purposes for which it was collected, or as required or permitted by law, consistent with IPP 9. Indicative retention periods are:

• Account and listing information: retained while the account is active. If an account is closed, listing content is removed from public view and the associated personal information is deleted or anonymised, unless there is a lawful reason to retain it.
• Verification material: retained only for as long as needed to complete and support verification, and for a limited period afterwards sufficient to prevent re-verification abuse, after which it is deleted.
• Billing and transaction records: retained for the period required by New Zealand tax, accounting and consumer law, and to resolve disputes.
• Security, moderation and abuse records: retained for as long as necessary to protect the Platform and other users, and to enforce suspensions or bans.
• Support correspondence: retained for a reasonable period to resolve and keep a record of the matter.

When personal information is no longer needed, we securely delete it or anonymise it so that it can no longer be linked to an identifiable individual.

Note on usernames: if an account is deleted, we may reserve the username so that it cannot be reused to impersonate you. This is limited to what is necessary to prevent impersonation and abuse.

11. Your rights of access and correction

You have the right to request access to the personal information we hold about you (IPP 6), and to request correction of information that is inaccurate, misleading, incomplete or out of date (IPP 7). You may also ask us to attach a statement of correction where we do not agree to change the information.

To make a request, email [email protected] with enough detail for us to identify you and the information concerned. We will respond within the timeframe required by the Privacy Act 2020. We may ask you to verify your identity before we act on a request, so that we do not disclose personal information to the wrong person.

If information you have published in a listing is displayed publicly, you can generally edit or remove it yourself through your account. If you are unable to do so, contact us and we will assist.

In limited circumstances the Privacy Act 2020 allows us to withhold information, for example where disclosure would prejudice the maintenance of the law, or would infringe the privacy of another person. If we withhold information, we will tell you the reason.

12. Requests from law enforcement and others

We may disclose personal information to the New Zealand Police, other law enforcement agencies, regulators, courts and tribunals where we are required to do so by law, or where disclosure is permitted and necessary, for example to:

• respond to a valid subpoena, court order, or statutory information request;
• assist in the investigation or prevention of a serious offence, including offending involving minors;
• protect the safety of any person, or prevent serious harm;
• establish, exercise or defend a legal claim.

We assess each request on its merits, seek to ensure it has a proper legal basis, and disclose only the information that is actually required. Where we are permitted to do so, we may notify the person concerned.

13. Cookies and similar technologies

We use cookies and similar technologies to operate the Platform, keep you signed in, remember your preferences, and protect against abuse.

• Strictly necessary cookies: required for core functions such as session management, authentication, security and load balancing. The Platform cannot operate properly without them.
• Preference cookies: remember choices such as your language, display settings and favourites.
• Analytics cookies (optional): where enabled, help us understand aggregate usage so we can improve the Platform.

You can block or delete cookies through your browser settings. If you disable strictly necessary cookies, some parts of the Platform will not work. Where required, we will present a cookie notice allowing you to manage optional cookies.

14. Age requirement: adults only (18+)

The Platform is intended for adults only. You must be at least 18 years old to access or use the Platform, to create an account, or to publish a listing. Commercial sexual services involving a person under 18 are unlawful in New Zealand, and we have a zero-tolerance approach to any content that involves, depicts, or sexualises minors.

We do not knowingly collect personal information from anyone under 18. If you believe that a person under 18 has provided personal information to us or appears in a listing, please contact us immediately at [email protected] so that we can investigate and remove the content.

15. Third-party links and embedded content

The Platform may contain links to websites operated by third parties, and listings may link to third-party content. We do not control those websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of any third-party site before providing personal information to it.

16. Privacy breaches

We maintain procedures to detect, investigate and respond to privacy breaches, and we have appointed a privacy officer to oversee compliance with the Privacy Act 2020.

Where a privacy breach has caused, or is likely to cause, serious harm to any person, the breach is notifiable. In that case we will notify the Office of the Privacy Commissioner as soon as practicable, as required by sections 112 to 117 of the Privacy Act 2020, providing the information required by section 117. We will also notify the affected individuals as soon as practicable, unless an exception applies, and will tell them what has happened and what steps we and they can take in response.

If you become aware of a possible privacy breach involving the Platform, please contact us at [email protected] without delay.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or the law. The current version is always published on this page with its effective date. If we make a material change, we will take reasonable steps to bring it to your attention, for example by notice on the Platform. Your continued use of the Platform after an updated Policy takes effect indicates that you accept it.

18. How to make a complaint

If you have a concern about how we have handled your personal information, please contact us first at [email protected]. We will acknowledge your complaint and work with you to resolve it.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (New Zealand):

• Website: www.privacy.org.nz
• Phone: 0800 803 909 (within New Zealand)

The Privacy Commissioner can investigate complaints about interferences with privacy and may refer matters to the Director of Human Rights Proceedings or the Human Rights Review Tribunal.

This Privacy Policy is provided for transparency and does not limit or exclude your rights under the Privacy Act 2020 or any other New Zealand law.