Privacy policy

Last updated: 25 May 2026

This policy explains how personal data is processed on https://themistressinfinity.com and related channels linked from it, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Controller: the professional operating under the brand Mistress Infinity.
Privacy contact: official channels published on the Site (mainly Telegram or other means listed on the homepage).
Site purpose: commercial information, in-person session requests, dungeon hire information, VIP Telegram channel access, and social links.

2. Why we process your data

In-person session request form (Barcelona)	Review and manage your request; contact you; arrange a possible appointment; screening and safety.
Communications via Telegram or other links you initiate	Handle enquiries, rates, dungeon hire, or online content access.
Technical operation of the Site	Security, spam prevention (e.g. honeypot, minimum submission time), hosting, and form email delivery.
Cookie preference	Remember your cookie notice choice (browser local storage).

3. Legal basis

Consent: when you submit the in-person form, tick the acceptance box, and provide contact details.
Pre-contractual measures / contract: when your request progresses toward a booking or specific service.
Legitimate interests: Site security, request handling, legal defence, and service improvement, balanced against your rights.
Legal obligation: where tax, safety, or other law requires it.

4. Data we may collect

Depending on how you use the Site:

In-person form: name or scene name, email, phone (with international prefix), availability, message and limits/fetishes, filmed-session preference, form start timestamp, acceptance of conditions.
Technical data: IP address, user agent, hosting server logs (Vercel) when the form is submitted.
Telegram / social: user ID, profile name, and message content you voluntarily send via external links.
Cookies / local storage: see the Cookie Policy.

We do not knowingly collect data from anyone under 18. If we become aware of such data, we will delete it.

5. Recipients and processors

Data may be shared only when necessary with:

Vercel Inc. (Site hosting and serverless form handler) — processing may occur in the USA under the provider’s contractual safeguards.
Resend, Inc. (email delivery of your request to Mistress Infinity’s inbox, with reply-to set to your email).
Telegram and other linked platforms (Instagram, X, Amazon wishlist, Linktree, etc.) when you interact with them; their own policies apply.
Google (Google Fonts): loading fonts may connect your browser to Google servers; see Google’s privacy policy.
Public authorities when legally required.

We do not sell personal data to third parties.

6. International transfers

Some providers (Vercel, Resend, Google) may process data outside the European Economic Area. Where applicable, GDPR safeguards apply (standard contractual clauses, adequacy decisions, or other measures offered by the provider).

7. Retention

Requests not leading to a booking: kept as long as needed to assess the request and, as a general guideline, up to a reasonable archive period (e.g. 12 months) unless you ask for earlier deletion.
Clients with a session or contract: for the relationship and applicable legal limitation or accounting/tax periods.
Hosting technical logs: according to the provider’s configuration (often short retention or rotation).
Cookie consent: until you clear site data or change browser/device.

8. Your rights

You may exercise access, rectification, erasure, objection, restriction, portability, and rights regarding automated decisions where applicable, by contacting us through official channels and proving your identity when reasonably required.

You may withdraw consent at any time without affecting the lawfulness of prior processing.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

9. Security

We apply reasonable technical and organisational measures: HTTPS, controls on automated submissions (honeypot, timing checks), restricted access to request emails, and security-minded providers. No system is completely secure; please use strong practices on your own communication channels.

10. Sensitive information

Your form message or communications may include sexual or health-related information. Only provide what you consider necessary. Processing is based on your explicit consent when submitting the form and on pre-contractual handling of an adult service. Access is limited to what is strictly needed to assess your request.

11. Changes

We may update this policy for legal or service changes. The “last updated” date shows the current version. Please review it periodically.

This document is tailored to the current Site. It does not replace personalised legal advice. Filmed sessions or specific contracts may involve additional terms communicated during screening.