Operated by EVE MEMBERSHIP FOR ONLINE SELLING (Commercial Sole Establishment), Dubai E-Trader Licence No. 1632117, Commercial Register No. 2880465, Dubai, United Arab Emirates. Website: theeveclub.com. Effective 25 June 2026. Version 1.0. The version string is recorded against every consent you give, so we can always prove which version of this notice you agreed to.
This Privacy Policy explains, in plain language, what personal data The Eve Club ("we," "us," "our," or "the club") collects about you, why we collect it, the legal basis we rely on, who we share it with, how long we keep it, how we protect it, and the rights you have. It applies to everyone who applies for membership, becomes a member, attends our events, or interacts with our concierge.
We are the data controller for your personal data: we decide why and how it is processed. Our operating entity and registration details are set out above.
Your concierge, "Eve," is an artificial-intelligence system, and we tell you so at your first interaction. Eve assists with onboarding, conversation, scheduling, reminders, and communication.
We collect the following categories. We collect only what we need for the purposes in Section 5.
3.1 Identity and contact data. Your name, WhatsApp number, email address, the city or area you are in, and the result of your identity verification.
3.2 Verification and biometric data (sensitive). To keep the membership genuine and safe, our verification partner runs an identity check that includes a liveness check and a face-match of your selfie to your identity document, plus a check that your profile photos are the same person. The face-match template, the liveness result, your selfie/portrait, and your identity-document images are biometric and identity data, which is sensitive personal data under the PDPL and equivalent laws and is processed only with your explicit consent. We retain the verification result, your verified date of birth, and the verification media (your identity-document images, portrait, and selfie), all encrypted at rest, so that we can confirm your identity, match it against the photos you give us, and meet our anti-fraud, safety, dispute-handling, and legal obligations. We keep these for the period set out in Section 11 and then delete them.
3.3 Profile and preference data. Photos you provide; descriptive traits (such as hair colour, eye colour, build, and height); your values, lifestyle, and general location; and the preferences you tell us about what you are looking for from your membership.
3.4 Special-category preference data (sensitive), only if you choose to provide it. Some members want us to take account of religion or religiosity, sect, or ethnicity / origin (and any appearance preferences that would reveal these). We collect and use these only where you give a separate, explicit consent, and only to inform who we introduce you to. You can decline, and you can withdraw this consent later.
3.5 Interaction data. Your conversations with Eve (text, and, if you consent, the voice-call recording or its written summary), your acceptances and declines, scheduling and attendance, and any feedback you give after an event or introduction.
3.6 Payment data. When you purchase a membership, payment is handled by our licensed payment provider. We receive a confirmation and a tokenised reference; we do not store your full card number.
3.7 Behavioural and trust signals. Conduct and reliability signals (for example, repeated no-shows or reports) that we use to keep members safe and to maintain the integrity of the club.
3.8 Technical data. Limited logs from our website and systems (such as device, approximate location from IP, and security events) used for security, fraud prevention, and service reliability.
We do not use AI to infer your religion, ethnicity, race, or sexual orientation from your photos. That kind of inference is prohibited (EU AI Act Article 5) and we do not do it. If you opt in, our photo analysis only labels descriptive traits (hair, eye colour, build, height).
| Purpose | Legal basis |
|---|---|
| Operate the concierge; store your profile and conversations; run events; arrange any introductions; keep members safe | Performance of our contract with you; and our legitimate interest in safety, fraud prevention, and service integrity |
| Identity and age verification (biometric KYC) | Your explicit consent (sensitive data), together with our need to verify identity and that you are 18 or over |
| Using religion / ethnicity / appearance to inform who we introduce you to | Your explicit, specific consent (you choose whether to provide these) |
| Recording the voice interview | Your consent (you may decline, in which case we keep only a written summary) |
| AI labelling of descriptive traits from photos | Your consent |
| Enriching from a LinkedIn link you send us | Your consent |
| Sending you marketing or event invitations outside an active conversation | Your prior, separate opt-in consent |
| Meeting legal, tax, anti-fraud, and safety obligations | Compliance with a legal obligation; our legitimate interest in safety |
We never make a legally or similarly significant decision about you by automated means alone; a human curator approves every introduction.
Biometric data, and any religion / sect / ethnicity preferences you volunteer, are sensitive. For these we: (a) rely on your separate, explicit consent; (b) collect the minimum necessary; (c) keep them encrypted and access-controlled; (d) use them only for the stated purpose; and (e) let you withdraw consent at any time, after which we stop using them and delete the data derived from them.
You give separate, specific consents, never a single blanket tick:
You can withdraw any consent at any time, in the app, by telling Eve, or via the unsubscribe link in any marketing message. Withdrawal does not affect processing already carried out lawfully. When you withdraw a consent we also delete the data derived under it (for example, withdrawing photo-analysis deletes the AI-labelled traits; withdrawing recording deletes the audio). Withdrawing your biometric / KYC consent means we can no longer keep you as a verified, active member, and we will tell you so.
Eve is an AI and is disclosed as such. It assists you; it does not decide who you meet. Every introduction is approved by a human curator who can change or override any suggestion. Where our systems flag something (for example, a possible discrepancy between your stated details and your photos), that is surfaced to a human for review and is never acted on automatically. You may request human contact at any time, and you may object to profiling (Section 12).
We do not sell your data. We share it only as follows:
We host and process your data primarily in the United States and the European Union (our hosting and AI providers), not in the UAE. Because the United States is not on a UAE adequacy list, we rely on a lawful transfer mechanism for these transfers: standard contractual clauses imposing UAE-level protection (PDPL Articles 22-23) together with your explicit consent, and we keep a record of it. UAE law does not impose general data localisation, but we minimise what crosses borders and keep sensitive computation server-side rather than in chat text.
The simple rule: we keep your data while you are a member and for 6 months after you leave, then we delete it. You can ask us to delete you sooner at any time, and we will, except for the few records the law requires us to keep.
| Data | How long we keep it |
|---|---|
| Everything about your membership, your profile, photos, conversations, the verification result and media (your ID images, portrait, and selfie), your preferences, and who you have already been shown | While you are a member, plus 6 months after you leave, then deleted (held encrypted throughout) |
| Special-category preferences (religion / ethnicity), if you provided them | Deleted as soon as you withdraw that consent, otherwise with everything else above |
| Identity-verification (KYC) records | The same 6-month rule, unless we are legally required to keep them longer as a regulated business (a KYC/AML minimum of 5 years), see the note below |
| Payment records | 5 years (required by UAE financial-record law), then deleted. We cannot delete these earlier, even on request |
| Proof-of-consent log (a simple record that you said yes or no on a date, no personal detail in it) | Kept a little longer than the rest so we can demonstrate you agreed; then deleted |
When you ask us to erase your data, we destroy it. Most of it is held encrypted under a key unique to you, and erasure destroys that key and deletes the underlying files, except where the law requires us to keep specific records longer (payment records, any KYC/AML minimum, or a live dispute), in which case we keep only those and tell you what and why.
Subject to applicable law, you have the right to:
To exercise any right, contact privacy@theeveclub.com or dpo@theeveclub.com. We may need to confirm your identity first, so that we never disclose your data to someone pretending to be you. We aim to respond within a reasonable time, usually around 30 days. Where your request is complex, or you have made several, we may need longer, in which case we will let you know and explain why. If you are unhappy with our response, you may complain to the UAE Data Office.
We use technical and organisational safeguards, including encryption of your personal data at rest, access controls with an audit trail, data minimisation, and staff confidentiality. If a breach occurs that is likely to put your rights at risk, we will notify the UAE Data Office as the law requires, without undue delay, and we will tell affected members where there is a likely risk of serious harm, with what happened and what to do.
Our website uses privacy-friendly, cookieless analytics (Cloudflare) to understand aggregate traffic. We do not use advertising trackers, and we do not build advertising profiles of you. Any cookies we do use are limited to what is necessary to operate the site securely.
The club is for adults aged 18 and over (the UAE age of majority is 18 as of 1 June 2026). We do not knowingly process the data of anyone under 18, and a verified under-18 result is a hard block on membership.
We may update this notice. We will tell you about material changes and, where a change affects a consent you gave, we will seek your renewed consent. The version string at the top changes with each update, and the change takes effect on the new effective date.
Questions or requests: privacy@theeveclub.com (general) or dpo@theeveclub.com (data-protection officer). Postal and registration details are at the top of this notice.