Privacy notice

Template — not yet reviewed. This covers what the system actually does with data, but the highlighted details must be filled in and the whole thing checked before anyone sells a ticket. A privacy notice has to be accurate about your specific business, not generic.

Who we are

[Trading name] is the data controller for ticket sales made through this site. You can reach us at [contact email], or by post at [address].

We are registered with the Information Commissioner's Office, reference [ICO number].

What we collect

When you buy a ticket: your name, email address, what you bought and what you paid.
At the door: the time your ticket was scanned, and which entrance.
If you join our mailing list: your email address, and when and how you gave consent.

Card details are handled entirely by our payment provider and never reach our systems. We cannot see your card number.

Why we hold it, and on what basis

To sell you a ticket and let you in — necessary to perform our contract with you.
To keep accounts — a legal obligation.
To email you about future events — only with your consent, which you can withdraw at any time.

Buying a ticket does not put you on our mailing list. That is a separate choice, and we record when and how you made it.

How long we keep it

Order and payment records: [six years], as required for tax.
Door scan records: [period] after the event.
Mailing list: until you unsubscribe.

Who else sees it

Our payment provider, to take the payment.
Our email provider, to send your ticket and any emails you have asked for.
Our hosting provider, which stores the data.
Door staff working the event you bought a ticket for — they see your name on the guest list, nothing else.

We do not sell your data, and we do not share it for anyone else's marketing.

Your rights

You can ask us to:

tell you what we hold about you, and give you a copy;
correct anything that is wrong;
delete your details;
stop emailing you.

Email [contact email] and we will respond within one month.

One thing to be aware of on deletion: we have to keep records of what was bought and paid for our accounts. When you ask us to delete your details we remove your name and email from those records, but the transaction itself stays on the books without anything identifying you.

Complaints

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Last updated [date].