Privacy Policy

Privacy Policy – Justlust.nl

Last updated: 28 August 2026

1. Introduction

Justlust.nl ("JustLust", "we", "us", or "our") operates an online advertising and contact platform that allows advertisers to create profiles and advertisements and allows users to discover and contact advertisers.

We respect the privacy of our users and take the protection of personal data seriously.

This Privacy Policy explains:

what personal data we collect and process;
why we process it;
the legal bases for processing;
how we use and protect personal data;
which third parties may process personal data on our behalf;
how long we retain personal data;
how identity and age verification through Didit works; and
which rights you have under applicable data-protection law.

By using Justlust.nl, your personal data may be processed as described in this Privacy Policy.

2. Data Controller

The controller responsible for the processing of personal data described in this Privacy Policy is:

Justlust.nl

Paxtonstraat 3N
8013 RP Zwolle
The Netherlands

Chamber of Commerce (KVK): 42050230

Privacy contact: privacy@justlust.nl

JustLust determines the purposes and means of the processing activities described in this Privacy Policy unless otherwise stated.

3. Personal Data We Process

The personal data we process depends on how you use Justlust.nl.

3.1 Account Information

When you create or use an account, we may process:

Username or display name
Email address
Telephone number
Password information
Date of birth or age information
Account type and account status
Registration date
Login information
Account preferences
Other information necessary to operate your account

Passwords are not stored in plain text.

3.2 Profile and Advertisement Information

Advertisers may voluntarily provide information for their profile or advertisement, including:

Display name
Photographs
Videos
Profile description
Location
Nationality
Background information
Gender
Services offered
Preferences
Availability
Languages
Rates or other advertisement information
Other information voluntarily included in the profile or advertisement

Information deliberately published as part of a public profile or advertisement may be visible to website visitors.

3.3 Background Information

Advertisers may be able to select background or ethnicity categories as part of their profile.

Depending on the category selected, this information may reveal information relating to racial or ethnic origin and may therefore constitute a special category of personal data under the GDPR.

Where applicable, such information is processed only where there is an appropriate legal basis under applicable data-protection law.

Providing this information is voluntary unless explicitly stated otherwise.

Users should carefully consider whether they wish to publish sensitive information in a public profile.

3.4 Communication Data

When users communicate through Justlust.nl, we may process:

Messages
Communication metadata
Dates and times of communications
Reports relating to communications
Customer-support communications
Information necessary to investigate abuse, fraud, disputes or violations of our policies

3.5 Reviews and Reports

Users may submit:

Reviews
Ratings
Complaints
Abuse reports
Safety reports
Other feedback

We may process this information to operate the review and reporting systems, investigate complaints, enforce our policies and protect users.

3.6 Payment Information

Where users purchase paid services or subscriptions, we may process:

Transaction information
Subscription information
Payment status
Invoice information
Refund information
Chargeback information
Payment references
Information relating to payment disputes

Payment card details may be processed directly by our payment service provider rather than being stored by Justlust.nl.

3.7 Technical Information

When you access Justlust.nl, we may automatically process technical information such as:

IP address
Browser type
Operating system
Device type
Device information
Language settings
Timestamps
Login information
Session information
Referring pages
Pages visited
Interactions with the website
Error information
Security and log information

3.8 Verification Information

Advertisers may be required to complete identity and age verification.

For this purpose, Justlust.nl uses Didit as an external verification provider.

The processing of verification information is described in Sections 7 through 11 of this Privacy Policy.

4. Special Categories of Personal Data

Because Justlust.nl is an adult advertising and contact platform, users may voluntarily provide information that may constitute special categories of personal data under Article 9 of the GDPR.

This may include information that reveals:

Racial or ethnic origin
Sexual orientation
Information concerning a person's sex life or sexual behaviour
Biometric data where it is processed for the purpose of uniquely identifying a person

We do not require users to publish unnecessary sensitive information.

Where special-category data is processed, we will rely on an applicable legal basis under Article 9 GDPR, including explicit consent where required.

Users should carefully consider whether they wish to publish sensitive information in a public profile.

5. Purposes of Processing

We process personal data for the following purposes:

Creating and managing user accounts
Operating Justlust.nl
Publishing and managing advertisements
Providing profile functionality
Facilitating contact between users and advertisers
Providing communication functionality
Processing subscriptions and payments
Providing customer support
Verifying identity and age
Preventing fraud and identity theft
Preventing abuse and misuse
Maintaining platform security
Detecting suspicious activity
Investigating reports
Enforcing our Terms and Conditions
Protecting users and advertisers
Improving website functionality and security
Complying with legal obligations
Establishing, exercising or defending legal claims
Other purposes explained at the time personal data is collected

6. Legal Bases for Processing

Depending on the specific processing activity, Justlust.nl relies on one or more of the following legal bases under the GDPR.

6.1 Performance of a Contract

Processing may be necessary to provide services requested by a user, including:

Account creation
Account management
Advertisement publication
Platform functionality
Communication functionality
Subscriptions
Other services requested by the user

6.2 Legitimate Interests

We may process personal data where this is necessary for our legitimate interests and those interests are not overridden by the rights and freedoms of the individual.

Our legitimate interests may include:

Protecting the platform
Preventing fraud
Preventing abuse
Maintaining platform security
Detecting fake or duplicate accounts
Investigating suspicious activity
Enforcing our policies
Protecting users
Improving the reliability of the platform
Defending legal claims
Maintaining the integrity of our services

6.3 Legal Obligations

We may process personal data where necessary to comply with legal obligations, including:

Accounting and tax obligations
Lawful requests from authorities
Court orders
Regulatory requirements
Other applicable legal requirements

6.4 Consent

Where consent is required by law, we will request consent before processing the relevant information.

Consent may be withdrawn at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

7. Identity and Age Verification

Justlust.nl uses Didit as an external identity and age verification provider.

Advertisers may be required to complete verification before they can use certain advertiser functionality.

Justlust.nl's internal minimum age requirement for advertisers is 21 years.

Users visiting the website must be at least 18 years old.

7.1 Roles of JustLust and Didit

For identity and age verification performed for Justlust.nl, JustLust determines the purpose of the verification and the verification requirements.

Didit provides the technical verification service and processes verification information on behalf of JustLust in accordance with the applicable contractual arrangements.

Depending on the specific processing activity and applicable contractual terms, Didit may also act as an independent controller for limited purposes such as security, abuse prevention, fraud prevention, legal compliance, audit logging, establishing, exercising or defending legal claims, and the use of appropriately anonymised or pseudonymised data for the development and improvement of verification, biometric and fraud-detection models, where permitted by applicable law and the applicable Didit terms.

7.2 Information Didit May Process

Depending on the verification workflow and services enabled by JustLust, Didit may process the following categories of information.

Identity Information

Full name
Date of birth
Nationality
Address
Telephone number
Email address
Other identifying information

Identity Document Information

Depending on the document submitted:

Passport information
Identity-card information
Residence-permit information
Driver's licence information
Proof-of-address information
Document images
Document number
Document expiry date
Document issue information
Machine-readable zone (MRZ) information
Extracted document fields
Document authenticity information
NFC information where supported and enabled

Facial and Biometric Information

Depending on the verification workflow:

Selfie images
Facial images
Video
Liveness information
Anti-spoofing information
Facial characteristics
Biometric templates
Face-match information
Verification or confidence results

Where biometric information is processed for the purpose of uniquely identifying or verifying an individual, it may constitute biometric data under Article 9 GDPR.

Technical Information

Didit may also process information relating to the verification session, such as:

IP address
Device information
Browser information
Operating system
Device fingerprint information
Network information
Timestamps
Session identifiers
Geolocation information
VPN indicators
Tor indicators
Other technical or security information

Fraud and Risk Information

Depending on the enabled verification services, Didit may process:

Fraud signals
Risk signals
Document-fraud indicators
Liveness results
Face-match results
Anti-spoofing results
Deepfake or manipulation indicators
Injection-attack indicators
Verification status
Confidence information
Review results
Other security-related signals

Screening Information

Where specifically enabled and applicable, Didit may also process information relating to:

Sanctions screening
Politically Exposed Person (PEP) screening
Adverse-media screening
Other compliance or risk-screening checks

Such checks are only performed where the relevant service has been enabled and is necessary for the applicable purpose.

8. How Didit Verification Works

The verification process may involve several automated checks, depending on the workflow configured by Justlust.nl.

These may include:

Identity-document verification
Document authenticity checks
Facial matching
Liveness detection
Anti-spoofing checks
Fraud detection
Device and network risk analysis
Other security checks

A verification session may be automatically approved, rejected or referred for additional review depending on the configured workflow.

Where appropriate, Didit or JustLust may perform or request additional human review.

The exact checks performed depend on the verification workflow configured by Justlust.nl.

9. Information Received by JustLust From Didit

Depending on the configuration of the JustLust integration, Didit may make certain verification and technical information available to JustLust through API responses, webhooks or the Didit Business Console.

This may include verification status and session identifiers, extracted identity or document information, verification results, fraud or risk indicators, and certain technical information such as IP address or device information.

Access to identity document images, selfie images and certain biometric or verification information may also be available through secure, short-lived links where enabled by the integration.

The specific information processed and made available to JustLust depends on the configuration of the Didit integration.

JustLust uses the information made available by Didit only where necessary for identity and age verification, account security, fraud prevention, compliance with applicable legal obligations, and the operation and protection of the platform.

JustLust does not publicly display identity verification information, identity documents, selfie images or biometric information.

10. Biometric Data and Explicit Consent

Where the verification process uses biometric information for identity verification, such processing may fall within Article 9 GDPR.

Where explicit consent is required, the verification process will request the applicable consent before the biometric processing takes place.

Biometric information is used for the purposes of identity verification, age verification, fraud prevention and security within the applicable verification workflow.

Justlust.nl does not use biometric information for unrelated advertising purposes.

11. Automated Processing and Human Review

The verification process may involve automated decision-making and automated risk analysis.

Automated systems may analyse:

Identity documents
Facial similarity
Liveness
Device information
Fraud indicators
Security signals
Other verification characteristics

A verification result may be affected by these automated checks.

Where a decision is subject to legal requirements concerning solely automated decision-making that produces legal or similarly significant effects, Justlust.nl will provide the safeguards required by applicable law, including appropriate human intervention and the opportunity to contest the decision where applicable.

12. Public Profiles and Advertisements

Advertisers understand that information they voluntarily publish in a public profile or advertisement may be visible to website visitors.

This may include:

Photographs
Videos
Profile descriptions
Display names
Locations
Services
Preferences
Languages
Background information
Other information included in the advertisement

Advertisers are responsible for ensuring that they have the necessary rights to publish photographs, videos and other content.

Users should not publish unnecessary personal information about third parties.

13. Communication and Messages

Justlust.nl provides communication functionality that allows users and advertisers to contact one another.

Messages may be processed to:

Deliver communications
Maintain the communication service
Prevent spam
Detect abuse
Investigate reports
Prevent fraud
Protect users
Enforce our policies
Comply with legal obligations

We do not use private communications for unrelated purposes.

Where necessary for security, abuse prevention or legal purposes, relevant communications may be reviewed or retained in accordance with this Privacy Policy.

14. Reviews, Reports and Trust & Safety

Justlust.nl may process information submitted through:

Reviews
Ratings
Abuse reports
Fraud reports
Safety reports
Customer-support tickets
Other Trust & Safety functions

This information may be used to:

Investigate complaints
Identify suspicious behaviour
Remove prohibited content
Suspend or terminate accounts
Protect users
Prevent fraud and abuse
Enforce our Terms and policies

15. Fraud Prevention and Platform Security

We may use automated and manual security measures to detect and prevent:

Fake accounts
Identity fraud
Payment fraud
Account takeovers
Spam
Abuse
Manipulation
Suspicious activity
Prohibited content
Other threats to the platform

Security information may include:

IP addresses
Device information
Login information
Account activity
Verification results
Fraud signals
Reports
Payment-risk information
Other information reasonably necessary for security

16. Third-Party Service Providers

Justlust.nl may use third-party service providers to operate the website and provide specific services.

These may include:

Hosting and infrastructure providers
Payment providers
Identity and age verification providers
Email providers
Customer-support providers
Security providers
Analytics providers
Database and cloud service providers
Professional advisers

Where a third party processes personal data on our behalf, we take appropriate contractual and organisational measures required by applicable data-protection law.

17. Payment Providers

When a user purchases a subscription or other paid service, payment information may be processed by our payment service provider.

Justlust.nl may receive information necessary to:

Confirm a payment
Activate a subscription
Process refunds
Manage chargebacks
Issue invoices
Provide customer support

Payment card details may be processed directly by the payment provider.

18. Cookies and Similar Technologies

Justlust.nl uses cookies and similar technologies.

These may include:

Essential Cookies

Required for basic website functionality, security and account functionality.

Functional Cookies

Used to remember preferences and settings.

Analytics Cookies

Used, where applicable, to understand website usage and improve performance.

Marketing Cookies

Where used, these may be used for marketing or advertising purposes and will be subject to applicable consent requirements.

Further information is provided in our Cookie Policy.

19. Marketing

Where permitted by law, Justlust.nl may send information about services, features or other relevant communications.

Where consent is required, we will obtain the required consent before sending marketing communications.

Users may unsubscribe from marketing communications at any time.

20. International Data Transfers

Some service providers used by Justlust.nl may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we use an appropriate legal transfer mechanism where required by applicable law.

This may include:

An adequacy decision
Standard Contractual Clauses
Appropriate supplementary safeguards
Another legally recognised transfer mechanism

Didit states that verification data is processed and stored in the European Union by default, subject to the applicable service configuration and contractual arrangements.

21. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

21.1 Account Information

Account information is generally retained while the account is active and for a reasonable period after account closure where necessary for security, fraud prevention, legal obligations or disputes.

21.2 Messages

Messages may be retained for up to 12 months, unless a longer period is necessary for security, fraud prevention, legal obligations or dispute resolution.

21.3 IP Addresses and Technical Logs

Relevant IP addresses and technical logs may be retained for up to 6 months, unless a longer period is necessary for security, fraud prevention, investigations or legal obligations.

21.4 Verification Information

Verification information retained by Justlust.nl is retained only for as long as necessary for identity verification, age verification, security, fraud prevention, legal obligations and other legitimate purposes described in this Privacy Policy.

Verification data processed by Didit is subject to the applicable Didit configuration and contractual arrangements.

21.5 Financial and Accounting Information

Financial and accounting records may be retained for 7 years where required by applicable Dutch tax or accounting law.

21.6 Fraud and Security Information

Information relating to fraud, abuse or security incidents may be retained for longer where reasonably necessary to protect the platform, investigate incidents, prevent repeated abuse or establish, exercise or defend legal claims.

When personal data is no longer required, it will be deleted, anonymised or securely disposed of where appropriate.

22. Data Security

We use appropriate technical and organisational measures designed to protect personal data against:

Unauthorised access
Accidental loss
Destruction
Alteration
Unauthorised disclosure
Unlawful processing

Depending on the information and system, security measures may include:

Encryption in transit
Encryption at rest where appropriate
Access controls
Authentication
Authorisation controls
Logging
Monitoring
Secure hosting
Backups
Security updates
Fraud-prevention measures

No online system can be guaranteed to be completely secure.

23. Your Data Protection Rights

Subject to applicable law, you may have the right to:

Request access to your personal data
Request correction of inaccurate data
Request deletion of personal data
Request restriction of processing
Object to certain processing
Request data portability
Withdraw consent
Object to certain automated decision-making
Lodge a complaint with a supervisory authority

Requests can be sent to:

privacy@justlust.nl

We may request information necessary to verify your identity before processing a request.

We will respond within the period required by applicable data-protection law.

24. Rights Relating to Verification Data

If you have completed identity or age verification through Didit, you may exercise your applicable data-protection rights by contacting Justlust.nl.

Where the relevant information is processed by Didit on behalf of JustLust, we may coordinate with Didit to fulfil the request.

Where Didit processes information as an independent controller, your rights in relation to that processing may also apply directly to Didit in accordance with its applicable privacy documentation.

25. Children's Privacy

Justlust.nl is not intended for persons under 18.

Persons under 18 are not permitted to use the platform.

Advertisers must meet Justlust.nl's minimum age requirement of 21 years.

If we become aware that personal data relating to a person under 18 has been collected in violation of our policies or applicable law, we will take appropriate steps to investigate and remove the information where required.

26. Data Breaches and Security Incidents

Justlust.nl maintains procedures for identifying, investigating and responding to personal-data security incidents.

Where a personal-data breach occurs, we will assess the incident and take appropriate measures in accordance with applicable law.

Where required, we will notify the competent supervisory authority and affected individuals.

27. Complaints

If you have concerns about how your personal data is processed, please contact us first:

privacy@justlust.nl

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes to Justlust.nl
Changes to our processing activities
Changes to third-party service providers
Changes in applicable legislation
Changes to security measures
Other operational changes

The most recent version will be published on Justlust.nl.

Where required by law, we will provide additional notice or obtain consent before implementing material changes.

29. Contact

For privacy-related questions, requests or complaints, please contact:

Justlust.nl

Paxtonstraat 3N
8013 RP Zwolle
The Netherlands

Chamber of Commerce (KVK): 42050230

Email: privacy@justlust.nl

Last updated: 28 August 2026