UPDATED 23 OCTOBER 2026

Privacy Notice

Who looks after your information

Peaches Nights LTD is responsible for personal information submitted through this website. Contact info@peaches-nights.co.uk about your information, access, corrections or deletion.

Applications and accounts

We collect your name, email, date of birth (or age for earlier applications), gender, social network handles, optional NSFW handle, age-eligibility declaration, application answers, private verification photo, membership route and declarations. Preferred name and broad location are optional at application stage. Before entering Members’ House, members must confirm their name, PEACHES name or alias, date of birth, gender and city or broad area. You can choose “prefer not to say” for gender; contact the team for help with gender-specific ticket allocations. We use the saved answer to check eligibility for those ticket categories. This also applies to existing members. We reuse details already provided where available. Date of birth keeps the age in the private team record up to date. Your profile is visible only to you and the PEACHES team, not to other members. A short introduction and marketing permission remain optional. We use these to assess your application, verify eligibility, manage your account and uphold community standards. Our legal basis for application and account administration is taking steps at your request before a contract and performing our membership agreement. We rely on legitimate interests for proportionate security, fraud prevention and protecting our community.

We do not request identity documents, medical information, ethnicity, sexual orientation or details of intimate experiences in this form. Please do not include these in free-text answers. Where membership information reveals sensitive aspects of your personal life, we request explicit consent separately for using that information to assess and administer your membership. You may withdraw this consent by contacting us; we will explain any effect on continuing the service and consider any lawful information we must retain separately.

Returning membership requests

If you ask us to link a previous membership, we collect your confirmed website email, name, optional previous membership email and the brief details you provide. We store the request privately and send it to the PEACHES team inbox to verify your previous membership and respond. Please do not include passwords, payment details, identity documents or sensitive personal information in this request.

Your photo and private content

Your verification photo is held in private storage and is available to you and authorised PEACHES reviewers. It is not published or used for publicity. It is not used for automated face recognition. Signing up or applying does not give you access to member galleries. Gallery access requires an approved, unexpired membership and permission for the album. We cannot prevent screenshots or copying of images displayed on a device.

Passwords and suppliers

Supabase provides account authentication, database and private storage; the database is hosted in Ireland. Passwords are handled by Supabase Auth and are never stored in PEACHES profile or application tables as readable passwords. Vercel hosts the website. Resend delivers account confirmation, password recovery, application and membership updates, returning member receipts and team notifications, processing the recipient email address and message content for delivery. These suppliers process information needed to deliver and secure the service. Where a supplier processes information outside the UK, applicable transfer protections are required.

Ticket and shop purchases

Stripe processes website payments. We store your account, purchased item, quantity, price, payment and order references, order status and the booking or fulfilment information accepted at checkout. For goods delivered in the UK, Stripe collects the recipient name and delivery address; we keep these privately with your order so the team can dispatch it. We do not store complete card details or card security codes. Payment confirmation, fraud prevention, order support, refunds and required financial records form part of providing the purchase and meeting our legal obligations. Orders are visible to the buyer and authorised team. Stripe may process payment and fraud signals under its own privacy notice. Ticket Tailor purchases made separately remain with that provider and are not automatically imported into your website account.

Administrator permissions

Only authorised administrators can grant or remove team access. We retain a private record of who made a permission change, the affected account, time and internal reason for security and accountability.

Messages and cookies

Account and application messages are service communications. Promotional emails require your separate optional permission, which you can change in your profile or withdraw by contacting us. We do not sell your personal information. Read the Cookie Notice for account cookies and optional external media.

Optional website statistics

With your optional analytics permission, Vercel Web Analytics supplies aggregate counts of brochure-page visits, popular pages, referral sources, devices and broad visitor locations. We do not connect these statistics to member names or account records. Account, application, admin and payment pages are excluded. You can withdraw permission through Cookie preferences. See the Cookie Notice for more detail.

Optional Google Analytics

With your separate Google Analytics consent, Google processes approved public page views, fixed campaign labels, shortened referral sources, device/browser and network information and approximate location. Its pseudonymous visitor cookies help report sessions and returning browsers; these statistics are not anonymous. We do not connect them to member names, accounts, applications, profile answers or payments. Account, application, admin and checkout pages are excluded. Automatic interaction collection and advertising features are disabled. You can withdraw consent through Cookie preferences; we then stop measurement, remove this integration’s first-party Google cookies and reload to stop the loaded tag. Our legal basis is consent. Google may process information outside the UK under its applicable data-protection and transfer terms. See the Google Privacy Policy and our Cookie Notice for cookie details. We retain Google Analytics data according to the property’s configured retention and reporting rules.

Member service activity

To administer membership and help with account queries, we keep a private record of completed profile saves, application submissions, membership-link requests and decisions, joining-payment confirmations and changes to House access. Each entry contains the account identifier, action and time. The PEACHES team can connect it to your account name and email. This record does not contain profile answers, payment details or a history of the pages you browse. It is separate from optional anonymous website statistics and is used for account and membership administration, not advertising. The same account administration and retention criteria described in this notice apply.

Members online

While an active member has Members’ House visible, the website updates one private last-seen timestamp for their account. We use it to estimate how many members are currently using the House. The team dashboard shows an aggregate count for the last two minutes, not a list of who is browsing. This does not record page addresses, profile answers or browsing history, and it is separate from optional public website statistics. The timestamp is replaced as you use the House and ceases to count when it becomes stale. Team previews and temporary test access are excluded.

Retention and access

We keep application information while reviewing your application and for necessary follow-up, dispute handling or eligibility checks. For approved members, we retain account and verification information while needed to administer and safeguard membership. After membership ends or an application is declined, retention is limited to what is reasonably needed for unresolved queries, disputes, safeguarding or legal obligations; information should be deleted or anonymised when those purposes end. Contact us for the retention criteria applying to your record or to request deletion. Access is limited to the people who need the information for their role.

Your rights

You can ask to access or correct your information, request deletion or restriction, object to processing based on legitimate interests, and request portability where applicable. Some rights have legal exceptions. You can withdraw consent without affecting processing already lawfully carried out. You may complain to the Information Commissioner’s Office.