Privacy Policy

1. Information We Collect

1.1 Information you provide

• Account & organiser details: name, email, credentials, organisation info, and billing details (processed by Stripe Payments UK Ltd or equivalent).
• Reviews & surveys: ratings (1–5), comments, feedback and timestamps submitted via our forms or QR codes (with an option to publish your review).
• Newsletter subscriptions: email address and basic engagement (opens/clicks) via our providers (Resend / Postmark).
• Support communications: messages you send us.

1.2 Information we collect automatically

• Log and device data (IP address, browser, pages viewed, timestamps).
• Aggregated usage statistics via privacy-friendly analytics (Plausible / PostHog).
• Essential cookies for authentication and preferences.

We do not use advertising or tracking cookies.

1.3 Publicly available information

We collect and republish public event metadata (titles, dates, venues, organiser names, public descriptions and URLs) from sources such as Eventbrite, Luma and Meetup. We do not collect private attendee data from those sites.

2. How We Use Personal Information

1. Provide, maintain and improve the Services;
2. Display event listings and aggregated ratings;
3. Deliver newsletters and marketing communications (with consent);
4. Provide organiser dashboards and analytics;
5. Process payments and manage accounts;
6. Ensure security, prevent fraud and enforce our Terms; and
7. Comply with legal or regulatory obligations.

We do not sell personal data to third parties.

3. Legal Bases for Processing

• Consent – for newsletters and optional reviews;
• Contract – to provide subscribed or paid Services;
• Legitimate interests – to operate, improve and promote the Services in ways that do not override your rights; and
• Legal obligation – for record-keeping and compliance purposes.

4. Sharing & International Transfers

We share limited data with service providers acting as data processors, including:

• Vercel Inc (hosting);
• Supabase / Neon / Cloudflare R2 (database & storage);
• Resend / Postmark (email delivery);
• Plausible Analytics / PostHog (analytics);
• Stripe Payments UK Ltd (payment processing).

Processors act only on our instructions under written agreements. Where data is transferred outside the UK or EEA, we use appropriate safeguards (e.g., UK IDTA / SCCs).

5. Data Retention

• Public event data: kept indefinitely as part of the directory.
• Reviews & survey content: retained up to 24 months, then anonymised.
• Account & billing: kept for six years after closure, to satisfy legal/tax requirements.
• Newsletter data: retained until you unsubscribe.

Back-ups and logs are deleted or anonymised on a rolling schedule.

6. Security

We use HTTPS, encryption at rest by our providers, and role-based access controls. No online system is completely secure; transmission is at your own risk.

7. Your Rights

Under the UK GDPR you may request access, correction, deletion, or restriction of your personal data, object to certain processing, withdraw consent (where applicable), and request data portability. Contact us using the details below. We will respond within one month. You may also complain to the Information Commissioner’s Office (ICO).

8. Children

Our Services are not directed to individuals under 16, and we do not knowingly collect personal data from them.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted here with a new “last updated” date. Continued use of the Services after changes constitutes acceptance.

10. Contact