Privacy Policy

Delphi (www.joindelphi.co)

Last updated: 11 August 2026

1. Who We Are

This Privacy Policy explains how Delphi Community Ltd, a company registered in England and Wales under company number 17228041, whose registered office is at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ ("Delphi", "we", "us", "our"), collects, uses, and protects your personal data when you use www.joindelphi.co (the "Site").

We are the "data controller" of your personal data for the purposes of UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

If you have any questions about this Policy or how we handle your data, contact us at marilyn@joindelphi.co.

We are registered with the Information Commissioner's Office (ICO) as a data controller, registration reference ZC179195. You can view our entry on the ICO register.

2. Personal Data We Collect

We collect the following categories of personal data:

Account and registration data: your name, email address, password, and date of birth (used to confirm you are 18 or over).

Eligibility data: your declaration that you are a woman, made when you register, which allows you to access the Site as set out in our Terms and Conditions.

Profile and listing data: information you choose to add to your profile or a flatshare listing, such as a bio, photos, budget, preferred area or postcode, and move-in dates.

Communications data: messages you send to other users through the Site, and any correspondence you send to us directly (e.g. support emails).

Payment data: when you purchase Premium access, our payment processor Stripe, Inc. collects and processes your card and billing details. We do not receive or store your full card details ourselves - see Clause 6 below.

Technical and usage data: your IP address, browser type, device information, pages visited, and general usage of the Site, collected automatically through cookies and similar technologies - see Clause 5 below.

Marketing preferences: your email address and preferences if you sign up to receive marketing or newsletter emails from us.

We do not knowingly collect any special category data (such as health information, sexual orientation, or racial or ethnic origin) unless you choose to share it with us, for example in a message to another user or in free-text profile fields, in which case you do so at your own discretion.

3. How We Use Your Data and Our Legal Basis

We use your personal data for the following purposes, relying on the legal bases shown:

We will never use your data in ways that are incompatible with these purposes without notifying you.

4. Who We Share Your Data With

We share personal data with:

• Other users - your profile information and any messages you send are visible to other users of the Site as part of the normal operation of a flatsharing service. You control what you include in your profile and listings.
• Stripe, Inc., our payment processor, to process payments for Premium access.
• Cloud hosting and infrastructure providers, who store Site data on our behalf under contractual data protection terms.
• Analytics providers (Google Analytics), to help us understand how the Site is used.
• Email/marketing platform providers, to send service and marketing communications, where you have opted in.
• Professional advisers, regulators, and law enforcement, where necessary to comply with a legal obligation, protect our rights, or protect the safety of our users.
• A buyer or successor, if we sell, merge, or reorganise our business, subject to the same protections described in this Policy.

We do not sell your personal data to third parties.

5. Cookies and Similar Technologies

We use cookies and similar technologies on the Site for the following purposes:

• Essential cookies, needed for the Site to function (e.g. keeping you logged in, remembering your session).
• Analytics cookies (Google Analytics), which help us understand how visitors use the Site. These are only set with your consent where required by law.
• Marketing cookies/tools, used to manage and measure marketing emails and communications sent to users who have opted in.

You can manage or withdraw your cookie consent at any time through our cookie banner/settings, and through your browser settings. Disabling non-essential cookies will not affect your ability to use the core features of the Site.

6. International Data Transfers

Some of our service providers, including Stripe and our hosting and analytics providers, may store or process personal data outside the UK, including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), an EU Commission adequacy decision extended to the UK, or the UK-US Data Bridge, so that your data continues to receive a level of protection equivalent to that under UK law.

7. Data Retention

We keep your personal data for as long as your account remains active, and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. Generally:

• Account and profile data is retained until you delete your account, plus a limited period afterwards for backup and legal purposes.
• Payment records are retained for as long as required by tax and accounting law (typically up to 6 years).
• Messages between users may be retained for a limited period after account deletion for safety, moderation, and dispute-resolution purposes.

If you close your account, we will delete or anonymise your personal data in line with the periods above, unless we are required or permitted by law to keep it for longer.

8. Your Rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data in certain circumstances ("right to be forgotten");
• restrict or object to our processing of your data in certain circumstances;
• data portability, to receive your data in a structured, commonly used format;
• withdraw consent at any time, where we rely on consent (e.g. marketing emails), without affecting the lawfulness of processing before withdrawal;
• complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.

To exercise any of these rights, contact us at marilyn@joindelphi.co. We may need to verify your identity before responding, and we will respond within the timeframes required by law (generally one month).

9. Children

The Site is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from someone under 18, we will take steps to delete it.

10. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration, including encryption of data in transit, access controls, and working only with reputable third-party providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated Policy on the Site with a revised "Last updated" date, and where changes are material, we will use reasonable efforts to notify registered users, for example by email.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.