Privacy Policy

1. Who Controls Your Personal Data

MyChurch.Events Ltd (company number: 09188368, registered office: 24 EN3 5ND) is the data controller for personal data collected through the Platform. Our data protection contact can be reached at privacy@mychurch.events.

2. What Personal Data We Collect

Account Data

When you create an account, we collect your name, email address, password (stored in hashed form) and any profile information you provide.

Ticket Buyer Data

When you purchase a ticket, we collect your name, email address, billing information and details of tickets purchased. We may also collect your phone number where required for event check-in.

Organiser Data

Event organisers provide additional information including organisation name, contact details, bank account or Stripe Connect details, and event content.

Payment-Related Data

Payment processing is handled by [PAYMENT PROCESSOR NAME]. We do not store full card details. We receive transaction identifiers and payment status information.

Event Attendance Data

We may record event check-in data where QR code scanning is used at events.

Communications Data

Messages sent through the Platform, support requests and email correspondence are stored to enable us to respond and maintain records.

Device, Analytics and Cookie Data

We collect information about your device, browser, IP address and how you use the Platform. This is collected via cookies and analytics tools provided by [ANALYTICS PROVIDER NAME]. See our Cookie Statement for more detail.

3. How We Use Personal Data

We use personal data to:

• Operate, maintain and improve the Platform;
• Process ticket purchases and manage orders;
• Enable event organisers to manage their events and communicate with attendees;
• Send transactional emails such as booking confirmations and event reminders;
• Prevent fraud, abuse and unauthorised access;
• Comply with legal obligations;
• Send marketing communications where you have consented.

4. Legal Bases for Processing

We process personal data on the following legal bases under UK GDPR:

• Contract: Processing necessary to perform the contract with you (e.g. processing ticket purchases);
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security and service improvement;
• Legal obligation: Processing required to comply with applicable law;
• Consent: Processing based on your freely given and informed consent, such as for marketing emails.

5. When Personal Data Is Shared

Sharing with Organisers

When you purchase a ticket, we share your name, email address and booking reference with the event organiser so that they can manage attendance and communicate with you about the event. Organisers are required to use this data only for event-related purposes.

Sharing with Payment Processors

We share payment-related data with [PAYMENT PROCESSOR NAME] to process transactions. Their privacy policy governs the use of your data by them.

Sharing with Service Providers

We may share data with trusted service providers including our hosting provider ([HOSTING PROVIDER NAME]), email provider ([EMAIL PROVIDER NAME]) and analytics provider ([ANALYTICS PROVIDER NAME]). These providers are engaged under data processing agreements and may only process data on our instructions.

We do not sell personal data to third parties.

6. International Data Transfers

Where personal data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as the use of UK International Data Transfer Agreements or Standard Contractual Clauses approved by the relevant supervisory authority.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy and to comply with legal, regulatory and accounting obligations. Account data is retained while your account is active. Transaction records are typically retained for [INSERT PERIOD] years in accordance with financial regulations. You may request deletion of your data subject to legal retention requirements.

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: You may request a copy of the personal data we hold about you;
• Rectification: You may ask us to correct inaccurate personal data;
• Erasure: You may ask us to delete your personal data in certain circumstances;
• Restriction: You may ask us to restrict processing of your data;
• Portability: You may request your data in a portable format;
• Objection: You may object to processing based on legitimate interests;
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact privacy@mychurch.events.

9. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. These include encryption in transit, access controls, regular security reviews and data minimisation practices.

No transmission over the internet is completely secure. If you believe your data has been compromised, please contact us immediately.

10. Children and Young People

The Platform is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have done so, we will delete that data promptly. Events aimed at young people may require additional safeguarding disclosures from organisers.

11. Marketing Communications

We will only send you marketing emails if you have given us consent to do so. You may withdraw your consent at any time by clicking "unsubscribe" in any marketing email or by contacting privacy@mychurch.events.

Transactional emails (such as booking confirmations) are sent as part of our contract with you and are not subject to marketing consent requirements.

12. Contact the Data Protection Contact

For any privacy or data protection queries, contact our data protection contact at privacy@mychurch.events or by post to [INSERT REGISTERED OFFICE].

13. Complaints to the Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by telephone on 0303 123 1113.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Platform. The current version is always available at mychurch.events/legal/privacy-policy.