Legal
Privacy Policy
Last updated: October 13, 2026
The Whitaker Group ("we", "us", or "our") is committed to protecting the privacy of our members and users of The Whitaker Group mobile application (the "App") and related services (collectively, the "Services"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and your rights over your data.
By creating an account or using the Services, you agree to the collection and use of information in accordance with this Policy.
1. Information We Collect
We collect the following categories of personal data when you register and use the App:
- Identity & Contact: Full name, email address, phone number, and date of birth.
- Profile & Preferences: Profile photograph, preferred city, selected brands, and interest preferences.
- Membership Data: Membership tier, membership start/end dates, and subscription history.
- Booking & Transaction Records: Reservations, bookings, orders, booking history, and wallet balance.
- Payment Information: Tokenised payment method details stored securely via Stripe or Adyen. We do not store raw card numbers.
- Device & Technical Data: Device identifiers, FCM push-notification tokens, IP address, and operating system version.
- Usage Data: Pages viewed, features used, and session activity logs.
- Communications: Support messages, feedback, and AI-chat conversations with our assistant.
2. How We Use Your Information
We use your personal data to:
- Create and manage your member account.
- Process bookings, payments, and orders on your behalf.
- Personalise your experience based on your city, brands, and preferences.
- Send booking confirmations, reminders, and transactional notifications.
- Send promotional communications where you have consented.
- Provide in-app customer support and AI-assisted assistance.
- Maintain security of the Services and prevent fraud.
- Comply with legal obligations, including financial and regulatory requirements.
- Analyse aggregate usage patterns to improve the Services (using anonymised data).
3. Who We Share Your Data With
We share personal data only with trusted third parties required to deliver the Services:
- Stripe — Payment processing and card tokenisation. Stripe Privacy Policy.
- Adyen — Alternative payment processing. Adyen Privacy Policy.
- Google Firebase — Push notifications (FCM), real-time data, and authentication. Firebase Privacy Policy.
- Shopify — Retail orders placed through the App's shop feature.
- Google Sign-In / Apple Sign-In — Optional social authentication providers.
- Analytics providers — Aggregated, anonymised usage analytics only.
- Legal authorities — Where required by applicable law or court order.
We do not sell your personal data to third parties.
4. Data Retention
We retain your personal data for as long as your account is active. When you delete your account:
- Your name, email address, phone number, and profile photograph are permanently anonymised immediately.
- Your API tokens and FCM push-notification tokens are deleted immediately.
- Transaction and booking records may be retained for up to 7 years in anonymised form to meet financial and legal obligations, after which they are permanently deleted.
Inactive accounts with no activity for 3 years may be anonymised and closed with prior notice.
5. How to Delete Your Account
You can permanently delete your account at any time from within the App:
- Open the App → Profile → Account Settings → Delete Account.
- Confirm your intent and, if applicable, enter your password.
- Your account and personal data will be anonymised immediately.
Alternatively, you may request account deletion by emailing
privacy@thewhitakergroup.com
with the subject line "Account Deletion Request". We will process your request within 30 days.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data (see Section 5 above).
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Restriction: Request that we restrict processing in certain circumstances.
- Withdraw Consent: Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at privacy@thewhitakergroup.com.
7. Security
We implement appropriate technical and organisational measures to protect your personal data, including TLS encryption for data in transit, hashed passwords, tokenised payment credentials, and role-based access controls. Firebase Security Rules ensure that only authenticated users can access their own data.
No method of transmission over the Internet is 100% secure. If you become aware of any security vulnerability, please contact privacy@thewhitakergroup.com immediately.
8. Children's Privacy
The Services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. International Transfers
Your data may be processed in countries outside your own where our third-party partners operate (including the United States and the European Union). We ensure such transfers are subject to appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email. The date at the top of this page reflects the most recent revision. Continued use of the Services after changes are posted constitutes acceptance of the updated Policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or your personal data, please contact our Privacy team:
This policy applies to the TWG Platform mobile application for iOS and Android, and any web interfaces operated by The Whitaker Group.