Privacy Policy

THEDROP APP

Last updated: 6 September 2026

1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how THE DROP HQ LTD collects, uses, stores and protects personal information when you use the thedrop mobile application, website and related services.

We are committed to protecting your privacy and being transparent about how your information is used.

The Platform is operated by:

THE DROP HQ LTDAlbert House1 Albert StreetLoughboroughLE11 2DWUnited Kingdom

References to “thedrop”, “we”, “us” or “our” mean THE DROP HQ LTD.

References to “you” or “your” mean the person using the Platform.

This Privacy Policy applies to information collected through:

• the thedrop mobile application;

• thedrop.co.uk;

• thedrop events and experiences;

• communications with us;

• offers and rewards;

• competitions;

• purchases;

• partner activities; and

• other services operated by thedrop.

This Privacy Policy should be read together with our Terms & Conditions and Cookie Policy.

2. WHO IS RESPONSIBLE FOR YOUR INFORMATION?

THE DROP HQ LTD is the organisation responsible for deciding how and why your personal information is processed.

Our contact details are:

THE DROP HQ LTDAlbert House1 Albert StreetLoughboroughLE11 2DWUnited Kingdom

Email: hello@thedrop.co.ukWebsite: thedrop.co.uk

If you have any questions about this Privacy Policy or how we use your information, please contact us at hello@thedrop.co.uk.

3. WHAT PERSONAL INFORMATION DO WE COLLECT?

The information we collect depends on how you use thedrop.

We may collect the following categories of information.

3.1 Account information

When you create an account, we may collect:

• name;

• email address;

• date of birth or age;

• password or authentication information;

• university or student status;

• location information;

• profile information; and

• preferences you choose to provide.

3.2 Student information

Where an offer or service is available specifically to students, we may collect information necessary to verify eligibility.

This may include:

• university or college;

• student status;

• student email address;

• course information where relevant; or

• other information reasonably necessary to confirm eligibility.

We will only collect information necessary for the relevant verification purpose.

3.3 Location information

With your permission, we may collect information about your location.

This may be used to help you:

• discover nearby events;

• find relevant offers;

• discover special locations;

• find participating businesses;

• receive location-relevant content; and

• improve your experience of the Platform.

You can control location permissions through your device settings.

You do not have to provide location information unless a particular feature requires it.

3.4 Device and technical information

When you use the app or website, we may automatically collect technical information such as:

• device type;

• operating system;

• app version;

• IP address;

• browser type;

• device identifiers;

• language settings;

• general geographic information;

• crash reports;

• performance information; and

• information about how you interact with the Platform.

We use this information to operate, secure, maintain and improve the Platform.

3.5 Usage information

We may collect information about how you use thedrop, including:

• pages or screens viewed;

• features used;

• events viewed;

• offers viewed;

• rewards accessed;

• searches;

• interactions;

• preferences;

• links clicked;

• time spent using particular features; and

• other interactions with the Platform.

This helps us understand how thedrop is being used and improve the experience.

3.6 Purchase information

If you purchase products, tickets, experiences or other services through thedrop, we may collect information relating to the transaction.

This may include:

• products or services purchased;

• transaction amount;

• purchase date;

• delivery information;

• billing information;

• booking information; and

• transaction or order references.

Payment card details may be processed directly by our payment provider rather than being stored by us.

3.7 Offers, rewards and promotional activity

We may collect information about:

• offers you view;

• offers you redeem;

• promotional codes you use;

• rewards you receive;

• rewards you redeem;

• competitions you enter; and

• other promotional activity.

This helps us operate the relevant service and prevent fraud or misuse.

3.8 User-generated content

If you submit content to the Platform, we may collect:

• photographs;

• videos;

• reviews;

• comments;

• feedback;

• messages;

• profile content; and

• other information you choose to submit.

You should think carefully before posting personal information publicly.

4. HOW DO WE USE YOUR INFORMATION?

We use personal information for a number of purposes.

Providing thedrop

We use your information to:

• create and manage your account;

• provide access to the Platform;

• provide features and services;

• process purchases;

• provide offers and rewards;

• facilitate bookings;

• provide event information;

• verify eligibility;

• provide customer support; and

• communicate with you about services you use.

Improving thedrop

We may use information to:

• understand how users interact with the Platform;

• improve app functionality;

• develop new features;

• improve events and experiences;

• understand which offers are useful;

• improve search and discovery;

• identify technical problems; and

• improve the overall user experience.

Personalising your experience

Where permitted by law and your settings, we may use information such as your preferences, interactions and general location to help show you content that is more relevant to you.

For example, this may help us show you:

• events near you;

• relevant offers;

• nearby businesses;

• experiences you may be interested in; or

• information relating to your interests.

5. CURRENCY AND TIME

A central part of thedrop is helping users make better use of their currency and time.

We may therefore use information about your interactions with the Platform to help you discover:

• relevant offers;

• nearby opportunities;

• events;

• experiences;

• rewards;

• time-sensitive opportunities; and

• other content that may help you make better use of your time or money.

We will only use personal information for these purposes where we have an appropriate lawful basis for doing so.

6. MARKETING

If you give us permission to send marketing communications, we may contact you about:

• new events;

• experiences;

• offers;

• rewards;

• clothing;

• competitions;

• partner opportunities;

• app features;

• thedrop news; and

• other promotional activity.

You can unsubscribe from marketing communications at any time.

Where appropriate, we may provide unsubscribe links in marketing communications.

You may still receive essential service communications relating to your account, purchases or use of the Platform.

7. PERSONALISATION AND PROFILING

We may analyse information about your use of the Platform to understand your interests and preferences.

This may allow us to provide more relevant:

• events;

• offers;

• experiences;

• locations;

• rewards;

• content; and

• communications.

Where this involves profiling or automated processing that has legal or similarly significant effects on you, we will provide additional information and safeguards as required by law.

We do not intend to make significant decisions about you solely through automated processing unless permitted by law and appropriate safeguards are in place.

8. OUR LAWFUL BASES FOR PROCESSING

Under UK data protection law, we need a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to provide a service you have requested, such as:

• creating your account;

• providing the app;

• processing a purchase;

• providing an event ticket; or

• providing a reward.

Consent

Where you have actively given permission for us to use your information for a particular purpose.

For example:

• certain marketing communications;

• optional location services;

• certain analytics technologies; or

• other optional features.

You can withdraw consent at any time.

Legitimate interests

We may process information where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

This may include:

• operating the Platform;

• improving our services;

• preventing fraud;

• securing the Platform;

• analysing usage;

• communicating with existing users about relevant services; and

• managing our business.

Legal obligation

We may process information where necessary to comply with a legal or regulatory requirement.

Vital interests

In limited circumstances, we may process information where necessary to protect someone’s vital interests.

9. WHO DO WE SHARE INFORMATION WITH?

We may share personal information where necessary to provide the Platform and operate our business.

This may include sharing information with:

Service providers

Companies that help us operate the Platform, including providers of:

• hosting;

• cloud storage;

• analytics;

• customer support;

• communications;

• payment processing;

• identity or student verification;

• security;

• software development; and

• technical infrastructure.

These providers should only process information in accordance with our instructions and applicable law.

Event organisers and experience providers

Where necessary to provide an event or experience, we may share relevant information with:

• event organisers;

• venues;

• experience providers;

• ticketing providers; or

• other organisations responsible for delivering the service.

Partner brands and businesses

Where necessary to provide a specific offer, reward, competition or experience, we may share relevant information with the relevant partner.

We will not provide partners with more personal information than is reasonably necessary for the relevant purpose.

Professional advisers

We may share information with:

• lawyers;

• accountants;

• auditors;

• insurers;

• financial advisers; and

• other professional advisers.

Legal and regulatory authorities

We may disclose information where required to:

• comply with the law;

• comply with a legal process;

• protect our rights;

• prevent fraud;

• protect users; or

• respond to lawful requests from authorities.

10. SELLING YOUR PERSONAL INFORMATION

We do not sell your personal information.

Where we work with brands and partners, information is shared only where there is a lawful and appropriate reason to do so, such as providing an offer, experience or service, or where you have given permission.

11. INTERNATIONAL DATA TRANSFERS

Some of our technology and service providers may operate outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that it receives protection required by applicable data protection law.

This may include using:

• UK adequacy regulations;

• approved contractual safeguards;

• appropriate transfer mechanisms; or

• other lawful safeguards.

12. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods depend on the type of information.

For example:

• account information may be retained while your account remains active;

• transaction information may be retained for accounting and legal requirements;

• marketing preferences may be retained so that we can respect your choices;

• customer support information may be retained for an appropriate period to manage the enquiry; and

• technical information may be retained for shorter periods where appropriate.

When information is no longer required, we will securely delete it or anonymise it.

13. ACCOUNT DELETION

You can request deletion of your thedrop account.

You can contact:

hello@thedrop.co.uk

or use the account deletion functionality made available within the app, where applicable.

When an account is deleted, we will delete or anonymise personal information where we no longer have a lawful reason to retain it.

Some information may need to be retained where required by law or where necessary to establish, exercise or defend legal claims.

14. YOUR DATA PROTECTION RIGHTS

Depending on the circumstances, you have rights under UK data protection law.

These may include the right to:

Access

Request a copy of the personal information we hold about you.

Correction

Ask us to correct inaccurate or incomplete information.

Erasure

Ask us to delete your personal information in certain circumstances.

Restriction

Ask us to restrict how we use your information in certain circumstances.

Data portability

Ask us to provide certain information in a structured, commonly used and machine-readable format.

Object

Object to certain types of processing, including processing based on legitimate interests and certain direct marketing.

Withdraw consent

Where we rely on consent, you can withdraw it at any time.

Withdrawing consent does not affect processing carried out before the withdrawal.

15. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights, contact:

Email: hello@thedrop.co.uk

We may need to verify your identity before responding to a request.

We will normally respond within the time period required by applicable data protection law.

16. MARKETING PREFERENCES

You can change your marketing preferences at any time.

You can:

• unsubscribe using the link included in marketing emails;

• change your preferences within the app where available; or

• contact us at hello@thedrop.co.uk.

17. LOCATION PERMISSIONS

Location information is optional unless a particular feature requires it.

You can enable or disable location access through your device settings.

If you disable location access, some features may not work as intended, including certain:

• nearby offers;

• local events;

• location-based experiences; and

• discovery features.

We will not access precise location information through your device without the relevant permission where such permission is required.

18. COOKIES AND SIMILAR TECHNOLOGIES

Our website and app may use cookies, software development kits, pixels, identifiers and similar technologies.

These technologies may help us:

• keep the Platform secure;

• remember preferences;

• understand usage;

• measure performance;

• improve functionality;

• provide relevant content; and

• understand marketing effectiveness.

Further information is provided in our Cookie Policy.

Where consent is required, we will request it before using non-essential technologies.

19. APP ANALYTICS

We may use analytics tools to understand how the app is used.

This may include information about:

• app launches;

• screens viewed;

• features used;

• errors;

• device type;

• general usage patterns; and

• performance.

Analytics helps us understand what works, identify problems and improve thedrop.

Where required, we will obtain consent or provide appropriate controls for analytics technologies.

20. PUSH NOTIFICATIONS

If you allow push notifications, we may send notifications relating to:

• events;

• offers;

• rewards;

• experiences;

• purchases;

• account activity;

• important service updates; and

• marketing, where you have consented where required.

You can manage notification permissions through your device settings.

21. SECURITY

We take reasonable technical and organisational measures to protect personal information.

These may include:

• access controls;

• authentication;

• encryption where appropriate;

• secure hosting;

• monitoring;

• backups;

• staff controls; and

• security procedures.

However, no internet-based service can be guaranteed to be completely secure.

You should keep your account credentials confidential and notify us if you suspect unauthorisedaccess.

22. CHILDREN AND YOUNG PEOPLE

Thedrop is intended primarily for users aged 16 and over.

We do not knowingly design the Platform to encourage children to provide unnecessary personal information.

If we become aware that we have collected personal information from someone below our permitted minimum age without the appropriate lawful basis, we will take reasonable steps to address the situation.

Because thedrop is an online service that may be accessible to people under 18, we will consider applicable requirements of the ICO’s Children’s Code and age-appropriate design requirements where relevant. The ICO’s guidance applies to apps and other online services likely to be accessed by children and emphasises age-appropriate transparency, data minimisation, privacy by default and appropriate age assurance.

We will aim to present privacy information in clear and accessible language.

23. USER-GENERATED CONTENT

If you choose to upload content to thedrop, remember that content may be visible to other users depending on the relevant feature.

You should not upload:

• personal information you do not want others to see;

• another person’s personal information without permission;

• confidential information;

• financial information;

• passwords; or

• other sensitive information unless specifically required for a legitimate feature.

You remain responsible for content you submit.

24. THIRD-PARTY WEBSITES AND SERVICES

The Platform may contain links or integrations with third-party services.

Those services have their own privacy policies.

We are not responsible for the privacy practices of third-party services that operate independently from thedrop.

You should review their privacy policies before providing them with personal information.

25. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

We will update the “Last updated” date when changes are made.

Where a change is material, we will take reasonable steps to notify you where appropriate.

We will not introduce a new use of personal information that requires additional privacy information without providing the relevant information before that processing begins.

The ICO states that privacy information should be reviewed and updated when necessary and that new uses of personal data should be brought to users’ attention before processing starts.

26. CONTACT US

If you have any questions, concerns or requests relating to this Privacy Policy or your personal information, please contact:

THE DROP HQ LTDAlbert House1 Albert StreetLoughboroughLE11 2DWUnited Kingdom

Email: hello@thedrop.co.ukWebsite: thedrop.co.uk

27. MAKING A COMPLAINT

We hope that we can resolve any concerns you may have.

Please contact us first at:

hello@thedrop.co.uk

If you remain dissatisfied, you have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office (ICO)

The ICO provides information about data protection rights and how to make a complaint through its website.

You can find the ICO’s current guidance and complaints information at

https://ico.org.uk/for-organisations/how-to-deal-with-data-protection-complaints/

28. GOVERNING LAW

This Privacy Policy is governed by the laws of England and Wales.

Any dispute relating to this Privacy Policy will be subject to the jurisdiction of the courts of England and Wales, subject to any mandatory rights that apply to you as a consumer.

29. SUMMARY

At thedrop, we want to make privacy straightforward.

We collect information to:

• provide thedrop;

• improve your experience;

• connect you with relevant events, offers and experiences;

• provide rewards and benefits;

• process purchases;

• keep the Platform secure;

• communicate with you; and

• improve our products and services.

We don’t sell your personal information.

You have rights over your personal information and can contact us at any time at:

hello@thedrop.co.uk

THE DROP HQ LTDAlbert House1 Albert StreetLoughboroughLE11 2DWUnited Kingdom

Website: thedrop.co.uk

THEDROP

Discover. Connect. Experience. Benefit.

Student life. Thedrop differently.