Privacy. Transparency. Trust.

THE 9IGHT LIST operates this platform and decides how the personal information described here is used. We have not appointed a Data Protection Officer, so privacy requests are handled by our team: send them through our Contact page using the Privacy & data request subject and we will route them to the people responsible. Signed-in members can also export their own data and deactivate their account from settings.

• Request and booking details — name, email, phone or WhatsApp, city, date, group size, budget range, service category and the preferences, notes and files you add to a request form.
• Account data — email, username, profile details, preferences and notification settings.
• Community content — posts, stories, 9IGHT VIDEO clips, comments, likes, follows and the media you upload.
• Messages — direct and group conversations, their attachments and delivery/read state.
• Reports and moderation records — what was reported, by whom, the reported content and the decision taken.
• Business account data — business details, claim or application information and supporting documents you upload.
• Referral attribution — the referral code a link carried and, after server validation, the member-to-member connection it created.
• Operational and security records — request status, staff actions on a case, audit entries, and technical records needed to keep accounts and the platform secure.
• Device storage — the sign-in session, interface and destination preferences and unsent form drafts held in your own browser, as described in our Cookies Policy.

• To handle your request — contacting you, researching options and coordinating with independent operators. Basis: steps taken at your request and performance of our service to you.
• To run your account and the community — profiles, posts, messages, notifications and social features. Basis: performance of the member terms you accept when you join.
• To keep the platform safe — moderation, reports, abuse and fraud prevention, rate limiting and audit records. Basis: our legitimate interest in a safe, authentic platform, and our legal obligations where they apply.
• To meet legal and accounting obligations — records we are required to keep. Basis: legal obligation.
• Where we ask for consent — any optional message you opt into. Basis: consent, which you can withdraw at any time without affecting what was done before.

• Independent operators — only the details an operator needs to answer or fulfil your specific request.
• Service providers — hosting, database, storage, authentication and email providers that process data on our instructions.
• Authorised staff — role-limited access to the cases, reports and business applications they handle.
• Authorities — where we are legally required to disclose information, or to establish, exercise or defend legal claims.

We operate worldwide. Our infrastructure providers and the independent operators handling a request may process information outside your country. Where the law of your country requires a transfer safeguard, we rely on the safeguards our providers make available, such as standard contractual clauses or an adequacy decision.

• Account, profile and community content — while your account exists; removed or anonymised after closure, except where a longer period is required below.
• Requests and case records — while the case is live and afterwards for the period needed to answer questions, resolve disputes and meet accounting or tax record-keeping duties.
• Messages and uploaded media — until deleted through the product or removed with the account, subject to any moderation hold.
• Reports, moderation decisions and audit records — kept for as long as needed to enforce our rules consistently and to defend a decision.
• Browser storage — cleared when you sign out, when the browser session ends or when you clear site data.

Subject to the law that applies to you, you may ask us to give you access to your personal information, correct it, delete it, restrict how we use it, object to uses based on our legitimate interests, or provide it in a portable format. Where a use relies on consent, you may withdraw that consent at any time.

Signed-in members can exercise most of this directly: download a copy of their data and deactivate their account from settings, edit their profile, and delete their own posts and messages. For anything else, contact us through our Contact page. We may need to keep some records where a legal obligation applies, and we will tell you when that is the case.

If you believe we have handled your information incorrectly, you may also lodge a complaint with the data protection authority of your country of residence, work or of the alleged infringement.

Access to data is enforced in the database with row-level rules, so members reach their own records and authorised staff reach only what their role allows. Uploaded media is held in private storage and served through short-lived signed links rather than public URLs. Staff actions on cases and moderation decisions are recorded. No service can promise perfect security, and we describe controls here rather than implementation detail.

THE 9IGHT LIST is for adults. Venues apply their own age and admission rules, and we do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

We may update this policy as the service or our legal obligations change. The last-updated date, effective date and version shown on this page always identify the version currently published.