Privacy Policy

1. What data we collect

• Account details: name, email address, password (encrypted), business name and contact details for vendors/venues
• Booking and enquiry information: event dates, guest counts, messages between customers and vendors, notes
• Payment information: processed directly by Stripe — we never see or store full card details ourselves
• Ticket purchase data: name, email, ticket QR token, check-in status
• Listing content vendors upload: photos, descriptions, pricing, videos
• Technical data: IP address, browser type, and basic usage analytics, used to keep the platform secure and working properly

2. How we use your data

We use personal data to:

• Create and manage your account, and let you log in (including via Google, Facebook, or a one-click email sign-in link)
• Connect customers with venues and vendors, and process bookings, enquiries, and messages between you
• Process payments and payouts via Stripe, including deposits, instalments, and refunds
• Generate and verify event tickets, including QR-code check-in at the door
• Send transactional emails: booking confirmations, enquiry receipts, payment reminders, ticket confirmations, and account-related emails (sign-up confirmation, password resets)
• Operate our referral programme, including tracking which account referred a new sign-up
• Investigate disputes between customers and vendors
• Improve and secure the platform, and prevent fraud or misuse

3. Who we share data with

We share personal data only where necessary to run the service:

• Stripe — to process payments, payouts, and refunds
• Supabase — our database and authentication provider, which stores your account and booking data securely
• Resend — our email delivery provider, used to send the transactional emails listed above
• The other party in a booking — a customer's name and event details are shared with the vendor they enquire with, and vice versa

We do not sell personal data to third parties, and we do not share it for advertising purposes.

4. How long we keep your data

We keep account and booking data for as long as your account is active. If you ask us to delete your account (see our Data Deletion page), we'll delete your personal data within 30 days, except where we're required to retain certain records (such as transaction records) for legal, tax, or accounting purposes under UK law.

5. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (see Data Deletion above)
• Object to or restrict certain processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at support@venunique.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

6. Cookies

We use essential cookies to keep you logged in and to remember your preferences (such as light/dark mode or event type filters). We do not use third-party advertising cookies.

7. Children's data

Venunique is not intended for use by children under 16, and we do not knowingly collect personal data from children.

8. Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll let you know by email or via a notice on the platform.

9. Contact us

Questions about this policy or how we handle your data? Email support@venunique.co.uk.