privacy

We collect only what we need to sell you a ticket and get you through the door. We don’t sell your data, we don’t send marketing, and this site uses no cookies or trackers.

Last updated October 2026.

1. Who we are

(a)social london (“we”, “us”) runs this site and the events it sells tickets for, and is the controller of the personal data described here. To ask anything about your data, or to use any of your rights below, message us on Instagram.

2. What we collect

• When you buy tickets: your name, email address and phone number, and the full name of each person you’re buying a ticket for.
• Payment: your card or other payment details are entered on Stripe’s secure checkout page and go straight to Stripe. We never see or store your full card number.
• Purchase details: which tickets you bought, how many, the price paid and any discount code used.
• If you message us: whatever you send us on Instagram.
• Technical data: our hosting provider keeps short-lived server logs (such as IP address and browser type) to run the site securely and stop abuse.

3. Why we use it, and our legal basis

• To sell you tickets and run the guest list, including sharing guest names with the venue so they can check people in on the door. This is necessary to perform our contract with you.
• To contact you about your booking, for example if the event is moved, cancelled or something changes on the night. Contract.
• To keep financial records required by tax and accounting law. Legal obligation.
• To prevent fraud, misuse and payment disputes, and keep the site secure. Our legitimate interests.
• Photos and filming at the event (see our ticket terms). Our legitimate interests in promoting our events. Tell our team on the night if you’d rather not appear, and message us to have a photo of you taken down.

We don’t use your data for marketing and we don’t make automated decisions about you.

4. Buying for other people

If you give us your friends’ names for the guest list, please let them know and point them to this page. We use their names only to put them on the list for the event.

5. Who we share it with

• The venue receives the guest list (names and ticket type only) for door entry.
• Stripe processes payments and sends your receipt. Stripe also uses payment data for its own fraud prevention and legal obligations, as described in Stripe’s privacy policy.
• Netlify hosts this site and stores booking records on our behalf.
• Instagram (Meta), if you choose to message us there.
• Authorities or professional advisers, where the law requires it or to deal with a legal claim.

Stripe and Netlify may process data outside the UK, including in the United States. Where they do, they rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.

6. How long we keep it

• Guest list names, email and phone numbers: deleted within 30 days after the event.
• Payment and transaction records: kept by us and Stripe for up to 6 years, as required for tax and accounting.
• Instagram messages: kept on Instagram until either of us deletes the conversation.

7. How we protect it

The site is served only over an encrypted connection (HTTPS). Payments are handled entirely by Stripe, which is certified to the highest level of the card industry’s security standard (PCI DSS Level 1). Booking records are stored with our hosting provider and can be reached only through a private, password-protected admin page. Access to our accounts is limited to our own team.

8. Cookies and similar technologies

This site doesn’t use cookies, analytics or advertising trackers, so there’s no cookie banner. When you enter the access code, your browser remembers it in its session storage until you close the tab, so you don’t have to type it again on every page. This is strictly necessary for the service you asked for, it isn’t shared with anyone, and it is cleared automatically.

When you click through to pay, you’re on Stripe’s checkout page, which uses its own cookies to process the payment securely and prevent fraud. Those are covered by Stripe’s cookie policy.

9. Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that’s wrong, for example a misspelled name on the guest list;
• delete your data, or restrict how we use it;
• stop using your data where we rely on our legitimate interests;
• send your data to you or another organisation in a portable format.

Message us on Instagram and we’ll reply within one month. Some requests may affect your booking: if we delete your name from the guest list before the event, you won’t be able to get in. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

10. Age

Our events and this site are for adults aged 18 and over only. We don’t knowingly collect data from anyone under 18.

11. Changes

If we change this policy, we’ll update it here and change the date at the top.