Privacy Policy

1. What personal data we collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity and Contact Data: Includes your full name, date of birth, email address, telephone number, and town/city provided during the ticket purchasing process. We collect date of birth to verify you meet the minimum age requirement for our 18+ events.
• Transaction Data: Includes details about payments to and from you and other details of tickets you have purchased from us.
• Marketing and Communications Data: Includes your marketing consent preference and your communication preferences.

Note on Financial Data: We do not collect or store your payment card details. All payment transactions are processed securely through our third-party payment gateway, Stripe.

2. Lawful basis for processing

UK data protection law requires us to have a valid legal reason ("lawful basis") to process your personal data. We rely on the following:

• Consent: Where you have opted in to receive marketing communications from us, we process your data on the basis of your consent. You may withdraw this consent at any time.
• Performance of a contract: Where you purchase a ticket, we process your data because it is necessary to fulfil our contract with you: issuing your ticket, admitting you to the event, and handling any refund or transfer you are entitled to.
• Legitimate interests: We process certain data (such as verifying your age or maintaining an entry list) because it is necessary for our legitimate interests in running events safely and lawfully, and these interests are not overridden by your rights.

3. How we use your personal data

We use your personal data for the following purposes:

• To register you for an event and process your ticket purchase.
• To issue your ticket and admit you at the door, including checking your name against our entry list.
• To verify that you meet the minimum age requirement (18+) for entry, alongside the physical photo ID check on the door.
• To send you essential service communications relating to an event you have registered for or purchased a ticket to (for example, event changes, entry information, or order confirmations). These are not marketing and are sent regardless of your marketing preference.
• To send you marketing communications about future events, where you have given us your consent to do so.
• To help prevent and detect fraud, and to protect the safety of our events and attendees.

4. Sharing your data

We do not sell your personal data. We share it only with the following categories of recipient, and only as far as necessary for the purposes above:

• Payment processing: Stripe processes all ticket payments on our behalf. We do not see or store your card details.
• Email and SMS delivery providers: We use third-party providers to send order confirmations, entry information, and (where consented) marketing messages.
• Door and security staff: Names and ticket details are shared with our venue's door and security team to manage entry lists and admission on the night.
• Law enforcement and regulators: We may disclose data where we are required to do so by law, or to protect the safety of our attendees, staff, or venue.

Any third party who processes data on our behalf is required to keep it secure and to use it only for the purposes we specify.

5. Data retention

We keep your personal data only for as long as necessary for the purposes we collected it for, including to satisfy legal, accounting, or reporting requirements. As a general guide:

• Marketing and registration data is kept until you unsubscribe or withdraw consent, or for up to 24 months after your last interaction unless you unsubscribe sooner, whichever comes first.
• Transaction and ticketing records are kept for six years to meet UK tax and accounting requirements.

6. Data security

We take the security of your personal data seriously. We use encryption in transit (HTTPS/TLS) across our website, restrict access to personal data to those who need it to do their job, and only work with reputable third-party processors, such as Stripe, who maintain their own security standards. While we take reasonable steps to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Access: to ask us for a copy of the personal data we hold about you.
• Rectification: to ask us to correct any inaccurate or incomplete data.
• Erasure: to ask us to delete your data where there is no good reason for us to keep it.
• Restriction: to ask us to limit how we use your data in certain circumstances.
• Objection: to object to us processing your data, including for direct marketing.
• Portability: to ask us to transfer your data to you or a third party in a structured, commonly used format.
• Withdrawing consent: where we rely on your consent (for example, marketing), to withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk, though we would welcome the chance to resolve any concern directly first.

8. Contact us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

[email protected]

The data controller is G10 Events Ltd, a company registered in England & Wales (company number 17314243). Registered office: 51 Brookfield, Bayston Hill, Shrewsbury, SY3 0LR, United Kingdom.