Privacy Policy

1. Introduction

Red Hot Xtra ("we", "us", "our") is operated by Red Hot 100 Limited. We are committed to protecting the privacy and security of your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.

By using our website and services, you agree to the collection and use of information as described in this policy.

2. Data We Collect

We collect the following categories of personal data:

• Account information: email address and password when you register.
• Age verification data: a government-issued photo ID and a selfie or liveness check, submitted through our third-party verification provider to confirm you are at least 18 years old.
• Payment information: payment details are collected and processed directly by our payment processor, SegPay. We do not store your credit card number or payment credentials.
• Usage data: pages visited, content accessed, and technical data such as browser type, device type, and IP address.
• Complaint and support data: information you provide when submitting a complaint or contacting support, including your name, email address, and message content.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and maintain your account and subscription
• To verify your age and identity as required by law and card-network rules
• To process payments through our payment processor
• To respond to complaints, support requests, and content removal requests
• To enforce our Terms & Conditions, including content protection measures
• To comply with legal obligations and regulatory requirements
• To detect and prevent fraud or unauthorised access

4. Data Sharing

We share personal data only where necessary and with the following parties:

• SegPay – our payment processor, which handles all payment transactions and stores payment credentials securely.
• Age verification provider – a trusted third-party provider that processes identity documents to confirm user age. They operate under their own privacy policy and applicable data protection laws.
• Law enforcement and regulators – where required by law or to respond to lawful requests, including reports of illegal content.

We do not sell your personal data to third parties. We do not share your data for marketing purposes with any external organisation.

5. Data Storage and Security

Your data is stored securely using industry-standard encryption and access controls.

• Identity documents: Red Hot Xtra does not store raw identity documents. Only the verification result (pass or fail) and associated metadata are retained.
• Payment data: handled and stored entirely by SegPay under PCI DSS compliance. We do not have access to your full card details.
• Account data: stored on secured servers with encrypted connections. Passwords are cryptographically hashed and never stored in plain text.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account and subscription data is retained for the duration of your membership and for a reasonable period afterwards to handle disputes or legal requirements.
• Age verification records are retained as required by 18 U.S.C. § 2257 and applicable regulations.
• Complaint records are retained for regulatory compliance and reporting purposes.
• Payment transaction records are retained by SegPay in accordance with their own retention policies.

7. Cookies and Tracking

We use essential cookies to maintain your login session and ensure the website functions correctly. We do not use third-party advertising trackers or sell data to advertisers.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate data be corrected.
• Deletion: request deletion of your personal data, subject to legal retention requirements.
• Restriction: request that we limit how we use your data.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to certain processing of your data.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at the email address below. We will respond within 30 days of receiving your request.

9. Opt-Out

You may opt out of non-essential data collection at any time by contacting us. You may also delete your account through your account settings or by contacting support, which will remove your personal data subject to any legal retention obligations.

10. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.