Privacy policy
Last updated: [DATE]
This policy explains what personal data Casa Motivo ("we") collects when you book a ticket, why we collect it and your rights under UK GDPR. The data controller is [LEGAL ENTITY NAME, ADDRESS].
What we collect
- Booking details: your full name, email address and phone number.
- Ticket data: booking reference, ticket IDs and check-in time.
- Marketing preference: whether you opted in to hear about future events.
- Technical data: your IP address is used briefly, in hashed form, to prevent spam and abuse.
Why we use it
- To issue and send your ticket and verify it at the door (performance of a contract).
- To contact you about changes to the event you booked (legitimate interests).
- To keep the event safe and prevent duplicate or fraudulent bookings (legitimate interests).
- To tell you about future Casa Motivo events, only if you opted in (consent). You can withdraw consent any time.
What we don't do
We never sell your data. Your QR code contains no personal information, only a random ticket ID and a security signature.
Who we share it with
Our service providers, only to run the booking: our hosting provider [e.g. Vercel], database provider [e.g. Neon/Supabase] and email provider [e.g. Resend]. [List any partners if data is shared.]
How long we keep it
Booking data is kept for [e.g. 12 months] after the event, then deleted. Marketing contacts are kept until you unsubscribe.
Your rights
You can ask to access, correct or delete your data, or object to how we use it. Email hello@casamotivo.com. You can also complain to the Information Commissioner's Office (ico.org.uk).