Privacy Policy

Last updated: 27 April 2026

Three Doors Experience Limited ("we", "us") operates the WhatsApp service available via +44 7598 966243 and the website at threedoors.co.uk. This notice explains what we collect, why, how long we keep it, and your rights.

What we collect

When you message our WhatsApp number, we receive and store:

• Your WhatsApp ID (your phone number in international format)
• Your WhatsApp profile name (the display name you've set)
• The content and timestamp of messages you send and receive
• Aggregate counts of messages exchanged
• Optional details you choose to tell us during the conversation (for example, the first half of your postcode, or who you'd bring along)

We do not collect your contact list, location, photos, or any data outside the messages you choose to send us.

Why we collect it, and our lawful basis

To operate our pre-launch waitlist for the Three Doors live experience: to respond to your messages, remember our previous conversation, and notify you when bookings open.

Our lawful basis under UK GDPR Article 6 is your consent — given when you message our WhatsApp number to join the waitlist. You can withdraw it any time by sending STOP on WhatsApp or emailing us.

We also rely on legitimate interests for a small amount of operational logging — a compliance audit trail of opt-out and deletion requests, so we can prove we honoured your choices if asked.

Where it's stored

In Google Firebase / Firestore, in the EU multi-region (Belgium / Netherlands). We never sell or share your data with third parties for marketing.

Who processes it on our behalf

We use a small number of trusted processors to run the service:

• Meta Platforms Ireland Ltd — provides the WhatsApp Business platform that delivers messages to and from you.
• Google Cloud (Firebase / Firestore) — stores message and user data in the EU multi-region; data does not leave the EEA in normal operation.
• Anthropic, PBC — provides the AI model that generates replies. Anthropic is US-based; transfers are covered by the EU-US Data Privacy Framework (and its UK extension) and Anthropic's Data Processing Addendum. Conversation content is not used to train Anthropic's models.
• Cloudflare, Inc. — provides DNS and hosts this notice page; only network metadata passes through.

How long we keep it

We hold your data until you ask us to delete it, or until 5 years after your last interaction with us — whichever comes first. After that we delete it automatically.

If you send DELETE on WhatsApp or email us asking for erasure, we'll action it within 30 days.

Your rights under UK GDPR

You have eight rights over your personal data:

• Right to be informed — this notice.
• Right of access — ask for a copy of the data we hold on you. Email us.
• Right to rectification — ask us to correct anything inaccurate. Email us.
• Right to erasure — send DELETE on WhatsApp, or email us.
• Right to restrict processing — pause use of your data while a query is resolved. Email us.
• Right to data portability — ask for your data in a portable format. Email us.
• Right to object (including to direct marketing) — send STOP on WhatsApp, or email us.
• Right not to be subject to automated decision-making — we don't make automated decisions about you. If that ever changes, we'll update this notice first.

For anything other than STOP or DELETE, email privacy@threedoors.co.uk. We'll act within 30 days.

Complaints

If you think we've mishandled your data, you can raise it with us at privacy@threedoors.co.uk, or complain to the Information Commissioner's Office at ico.org.uk.

Contact