Legal

Privacy Policy

Last updated: 29 May 2026 · Wonderland Platform

Your privacy matters to us. This Policy explains what data we collect, how we use it, and your rights over it. Wonderland does not sell your personal data to third parties.

1. Data We Collect

When you register or use Wonderland we may collect:

Account data: name, username, email address, date of birth, profile picture;
Verification data: government-issued ID documents and selfies, collected during Baddie KYC (stored securely and used solely for age/identity verification);
Payment data: billing information processed by our third-party payment provider — Wonderland does not store full card details;
Content data: files, images, videos, and text you upload to your baddie page;
Usage data: IP address, browser type, device information, pages visited, time on site, clickstream data;
Communications: messages sent through the platform's messaging features.

2. How We Use Your Data

To create and manage your account;
To verify your age and identity as required by law;
To process payments and pay out earnings to baddies;
To deliver content to fans who have purchased it;
To investigate violations of our Terms and policies;
To send platform notifications, security alerts, and (where you have opted in) promotional messages;
To improve and develop the platform using aggregated, anonymised analytics.

3. Legal Basis for Processing (POPIA / GDPR)

We process personal data on the following legal bases:

Contract performance: to provide the services you have signed up for;
Legal obligation: to comply with age-verification, record-keeping, and anti-money-laundering laws;
Legitimate interests: to prevent fraud, enforce our policies, and protect platform security;
Consent: for optional communications and cookies beyond strictly necessary ones.

4. Who We Share Data With

We do not sell your personal data. We may share data with:

Payment processors (to handle transactions);
Identity verification providers (to complete Baddie KYC);
Cloud hosting and infrastructure providers;
Law enforcement or regulatory authorities, where required by law or court order;
A successor entity in the event of a merger or acquisition, subject to equivalent privacy protections.

5. Data Retention

We retain your account data for as long as your account is active. Identity verification records are retained for the period required by applicable law (typically 5–7 years). You may request deletion of your account and data at any time, subject to any legal retention obligations.

6. Your Rights

Under POPIA and, where applicable, GDPR, you have the right to:

Access the personal data we hold about you;
Request correction of inaccurate data;
Request deletion of your data (subject to legal obligations);
Object to or restrict certain processing;
Lodge a complaint with the Information Regulator (South Africa) or your local data protection authority.

7. Cookies

Wonderland uses strictly necessary cookies for session management and security. We may also use analytics cookies to understand how the platform is used. You can manage cookie preferences through your browser settings.

8. Security

We implement industry-standard technical and organisational measures to protect your data, including encrypted storage, HTTPS transmission, and access controls. No system is completely secure — if you become aware of any security issue please contact us immediately.

9. Children

Wonderland is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we become aware that a minor has created an account, we will immediately terminate it and delete associated data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users. Continued use of the platform after changes constitutes acceptance.

11. Contact

For privacy-related requests or questions, contact us through the Help section in your dashboard or email our privacy team at the address listed there.