Privacy Policy.
1. Introduction
2. Data we collect
- Account data: name, email address, password (encrypted), profile photo.
- Transaction data: billing address, ticket purchase history, payment confirmation (card details are processed by our payment provider and not stored on our servers).
- Vendor/organiser data: business name, contact details, bank/payout details, verification documents.
- Usage data: pages visited, device/browser type, IP address, cookies (see Cookie Policy).
- Communications: messages sent through the Platform, support enquiries, newsletter subscriptions.
3. How we use your data
- To create and manage your account.
- To process ticket purchases and vendor payouts.
- To communicate with you about events, orders, and Platform updates.
- To send marketing communications where you have opted in (you can unsubscribe at any time).
- To detect and prevent fraud and to keep the Platform secure.
- To comply with legal and regulatory obligations.
4. Legal basis for processing
5. Sharing your data
- With event organisers/vendors, where necessary to fulfil your ticket purchase (e.g. name and ticket type for entry management).
- With payment processors to complete transactions.
- With service providers who support our hosting, email, analytics and customer support functions, under data processing agreements.
- With regulators or law enforcement where required by law.
- We do not sell your personal data to third parties.
6. International transfers
Where any of our service providers process data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision.
7. Data retention
We retain personal data for as long as necessary to provide our services and to comply with legal obligations (e.g. tax records are typically retained for 6 years). Account data is deleted or anonymised within [insert period] of account closure, unless we are legally required to retain it longer.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (“right to be forgotten”).
- Object to or restrict certain processing.
- Request a copy of your data in a portable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at [insert privacy email]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Cookies
The Platform uses cookies and similar technologies for essential site functionality, analytics, and (where consented to) marketing. See our Cookie Policy for full details and how to manage your preferences.
10. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security review. No system is completely secure, and we encourage you to use a strong, unique password.
11. Children's data
The Platform is not directed at children under 18, and we do not knowingly collect data from them.
12. Changes to this policy
We may update this Privacy Policy periodically. Material changes will be notified via email or a Platform notice.
13. Contact us
For any privacy questions or to exercise your rights, contact [insert privacy email] or write to [insert registered address].
