NBN Naughty By Nature Privacy and data handling
Privacy

Privacy Policy

This Privacy Policy explains how Naughty By Nature may collect, use, share, secure, and retain personal data in connection with the website, app, support flows, verification steps, and related platform services.

Last updated: 09.04.2026 Public policy page Canonical URL: /privacy

Overview

This page describes how personal data may be handled across Naughty By Nature website and platform services.

Policy updates are published directly on this canonical route so members and visitors can always reference the latest version.

Minimal data

We aim to use only data reasonably needed for access, verification, support, safety, and service operations.

Verification-aware

Identity, age, and account-security checks may be part of how the platform protects access and reduces abuse.

Privacy by design

Visibility, support, and sensitive workflows are intended to prioritize control, consent, and operational restraint.

Safety first

Moderation, fraud prevention, and security logging may affect how data is reviewed and retained.

On this page

Section index

1. Controller

Who is responsible for the service

Legal entity: IT Friendly

Business address: Østerbrogade 226 st 1 Copenhagen, 2100

Legal contact: contact@naughtybynature.dk

This public privacy policy describes the operator of the website and platform at a high level. Additional formal company details can be added if required.

2. Data we may collect

What the service may need to process

  • account identifiers, profile details, preferences, communications, and content you provide;
  • authentication, session, device, browser, and access metadata used to maintain account security and reliability;
  • event, venue, participation, support, moderation, and abuse-prevention records related to platform operations; and
  • technical logs and diagnostics used to detect incidents, prevent fraud, and maintain the service.
3. Verification boundary

What we do not expect to receive

  • The service is not intended to receive CPR numbers, banking credentials, or private MitID credentials as ordinary platform data.
  • The intended model is that the platform receives only the minimum information needed to confirm age, identity status, account validity, or fraud-prevention signals.
  • If a verification provider changes its payload or response model, this Privacy Policy should be updated to reflect that accurately.
4. Why data is used

Operational purposes

  • to create, maintain, and secure accounts;
  • to verify adults and reduce fake, unsafe, or abusive use of the platform;
  • to operate events, venue-linked features, attendance-related workflows, support, and moderation;
  • to investigate misuse, enforce terms and policies, and respond to lawful requests; and
  • to improve reliability, monitor incidents, and protect users, venues, and the service.
6. Sharing and disclosures

Who data may be shared with

  • identity, hosting, infrastructure, messaging, support, and security providers acting on our behalf;
  • venue operators or platform administrators where their workflow legitimately requires event or operational context;
  • advisers, auditors, insurers, or professional service providers where reasonably necessary; and
  • public authorities or counterparties where disclosure is legally required or reasonably necessary to protect users, venues, or the service.
7. Retention

How long data may remain

  • active account and profile data may remain while the account is active and for a reasonable period needed to complete legitimate operational workflows;
  • support, moderation, fraud-prevention, and security records may be retained longer where needed for safety, compliance, or dispute handling; and
  • deleted or restricted accounts may still leave behind limited records where necessary for legal, operational, or abuse-prevention reasons.
8. Security and moderation

How data may be protected and reviewed

We may use account security controls, access restrictions, session protections, verification checks, logging, and moderation systems to protect the platform. We do not promise that any security measure is perfect or that incidents will never occur.

Safety and moderation systems may involve automated signals and human review where needed to investigate abuse, content violations, fraud, or threats to users or the service.

9. International handling

Cross-border processing

Service providers or infrastructure may process data in multiple jurisdictions. Where cross-border transfers occur, the final legal version of this policy can be expanded with the specific transfer mechanism or safeguarding language used for the relevant region.

10. Your rights

Access, correction, deletion, and questions

Subject to applicable law, you may have rights to request access to personal data, correction, deletion, restriction, objection, or portability. You may also have the right to complain to a relevant data protection authority.

You can use the public contact routes for privacy questions, and you can use the delete-account page for account closure guidance.

11. Privacy contact

How to reach us about privacy

Legal contact email: contact@naughtybynature.dk

Business address: Østerbrogade 226 st 1 Copenhagen, 2100

For broader support issues, use the support page. For legal terms, see the Terms page.