This Privacy Policy describes how MyNightOut Limited ("MyNightOut," "we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website, applications, and services (collectively, the "Platform").

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and, where applicable, the EU GDPR.

1. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data, such as collection, storage, use, disclosure, or deletion.
• "User" means any person accessing or using the Platform, including Buyers and Sellers.
• "Data Controller" means MyNightOut Limited, registered in England and Wales, which determines the purposes and means of Processing Personal Data.
• "Third Parties" refers to service providers and partners such as Stripe, Google, and Clerk.

2. Information We Collect

We may collect and process the following categories of Personal Data:

2.1. Information You Provide

• Identity Data: name, email address, date of birth, postal address, phone number.
• Account Data: authentication details provided through Clerk.
• Financial Data: payment account details (for Sellers and Reps), partial transaction data.
• Content Data: information you submit, upload, or post on the Platform (including event details, tickets, passes, or user-generated content).

2.2. Information Collected Automatically

• Usage Data: IP address, device type, browser type, operating system, and access times.
• Analytics Data: behaviour on our Platform, collected via Google Analytics.
• Transaction Data: purchases, sales, and booking history.

2.3. Payment Data

We do not store credit or debit card information on our servers. Payments are processed by Stripe, a PCI-DSS Level 1 certified provider. Stripe securely stores and processes your card details.

3. How We Use Your Information

We may use your Personal Data for the following purposes:

• To provide and operate the Platform, including processing transactions, delivering Tickets and Passes, and providing customer support.
• To verify your identity and authenticate access using Clerk.
• To process payments through Stripe, including payouts to Sellers and Reps via Stripe Connect.
• To analyse Platform usage, improve functionality, and perform marketing and business development using Google Analytics and other tools.
• To comply with legal and regulatory obligations.
• To communicate with you about services, updates, promotions, or important notices.
• For fraud detection, prevention, and security monitoring.
• For any purpose described in our Terms of Service, which form part of this Policy.

4. Legal Basis for Processing

We process your Personal Data on the following legal grounds under UK GDPR:

• Performance of a contract (to deliver services you purchase).
• Consent (for marketing communications, cookies, or analytics).
• Legal obligation (to comply with tax, fraud, and accounting requirements).
• Legitimate interests (to improve our Platform, prevent abuse, and operate a secure service).

5. Sharing of Information

We may share your Personal Data with:

• Stripe: to process and settle payments (including Stripe Connect for Sellers and Reps).
• Google Analytics: to analyse website and app usage.
• Clerk: to authenticate and manage user accounts.
• Other Users: as necessary for Sellers, Reps, and Buyers to fulfil transactions (e.g., delivery of event information).
• Service providers, contractors, and advisors who perform services for us.
• Regulators, law enforcement, or authorities when required by law.

We also reserve the right to share Personal Data for any purposes permitted by our Terms of Service.

6. International Data Transfers

Our servers are located in the UK and EEA, with backups across the UK and EEA. If we transfer your data outside the UK or EEA, we ensure adequate protection using legal safeguards such as Standard Contractual Clauses (SCCs) or equivalent frameworks.

7. Data Security

We take appropriate technical and organisational measures to protect your Personal Data, including:

• Encryption via HTTPS and Transport Layer Security (TLS).
• Secure data hosting within the UK/EEA.
• Limited access controls and monitoring of internal systems.

When transferring your Personal Data, we protect it with multiple layers of security, including leading encryption technology.

8. Data Retention

We retain Personal Data for as long as we consider it necessary for the purposes set out in this Privacy Policy, including to comply with our legal obligations, resolve disputes, and enforce agreements.

When retention is no longer necessary, we will securely delete or anonymise your Personal Data.

9. Your Rights

Under UK GDPR, you have the following rights:

• Access: to request a copy of your Personal Data.
• Rectification: to correct inaccurate or incomplete information.
• Erasure: to request deletion of your Personal Data where legally permissible.
• Restriction: to limit how we process your data.
• Data Portability: to receive your Personal Data in a structured, machine-readable format.
• Objection: to object to processing based on legitimate interests or direct marketing.
• Withdrawal of consent: where we rely on your consent for processing.

To exercise these rights, contact us at: [email protected].

10. Cookies

We use cookies and similar technologies to enhance user experience, analyse traffic, and deliver personalised content.

11. Children’s Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect Personal Data from minors.

12. Amendments to this Policy

We may update this Privacy Policy from time to time. Changes will be posted on the Platform with a revised “Last Updated” date. Continued use of the Platform after changes take effect constitutes acceptance.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Company: MyNightOut Limited
Jurisdiction: England and Wales

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Last updated: 14 October 2025