Privacy policy

01Who we are

Packed Out is run by [Company name] (company number [number]), registered at [registered address]. In this policy, “we” and “us” mean that company.

We decide how your personal data is used, which makes us the controller under UK data protection law. Our registration number with the Information Commissioner’s Office is [ICO registration number].

Questions about your data go to support@packedout.co.uk.

02What we collect

When you join on this website. Your name, your act, business or venue name, your email, your town or postcode and what you do. Some forms ask for a little more, like your Instagram handle, the kit you bring, whether your material is clean or 18+ or your role at a hotel.

When you set up your account in the app. Your name, email and password. Acts and creators also give their date of birth, so we can check they’re 18 or over. For collabs that show alcohol, creators must be 25 or over. Venues confirm they’re 18 or over. Venues and acts give a postcode, which we turn into a map point to work out rough distances. We never show anyone an exact distance or an act’s home address.

When you use Packed Out. The nights you post, offer on or accept, prices, booking details, booking notes, reviews and ratings, the nights you’re free and any documents you upload, like insurance certificates, PAT test records, food hygiene ratings, gas safety certificates, follower screenshots and portfolio links. If you link an outside calendar, we read which dates are busy, not what’s in them. If you turn on phone notifications, we keep the details your browser gives us to send them.

Payments. Card and bank payments are handled by Stripe. We never see or store full card numbers or bank logins. Acts set up payouts with Stripe, who check their identity and bank details. We give Stripe the date of birth from sign-up so it can check it against their ID. Stripe tells us if it doesn’t match.

Creators. You send us screenshots of your follower count and audience. Later you send the results of your posts. We show venues a rounded follower number and the platform, never your handle.

Pubs a host invites. If a host adds a pub they already work at, we get that pub’s name and the contact details the host gives us, so we can send the invite.

03People we contact about joining

Before someone joins, we may contact them to invite them to Packed Out. We hold their name, type of act or business, town, contact details, links to their public social profiles and our notes about our contact with them.

These details come from public social media, from meeting people in person, from events or from someone recommending them. We hold them because we have a legitimate interest in inviting performers and venues to join a booking marketplace. The first message we send says where we found the details and links to this policy.

Only the Packed Out team can see these details. We delete them 12 months after our last contact, or sooner if you ask. If you ask us not to contact you again, we delete your details and keep only a scrambled code made from your email, phone and handles, so we don’t add you again by mistake. We never sell or share these details.

04Why we use it

We only use your data when the law allows it. For most of what we do, that’s one of these:

• To run your account and your bookings. Setting up your page, showing it to venues or acts, taking and releasing payments, sending booking updates and receipts. This is needed to provide the service you signed up for.
• Our legitimate interests. Checking acts before they go live, keeping a record of no-shows, late cancellations and problems, preventing fraud, keeping Packed Out safe, improving it and contacting people about joining. We weigh these against your rights and stop if they don’t hold up.
• The law. Keeping financial records for HMRC, checking ages and answering lawful requests from the authorities.
• Your consent. Marketing emails, only if you’ve said yes. You can say no at any time from the link in every marketing email. Emails about your own account and bookings aren’t marketing, so they always go.

05Who sees it

Other people on Packed Out. Your public page is meant to be seen. Venues see an act’s name, videos, prices, reviews, badges and a rounded follower count. Acts see the venue’s name, the night and its details. They see the venue’s address once they’re booked. Emails are never shown. Phone numbers for the night show to both sides from 48 hours before, once the act has confirmed. They hide again when the night ends.

Ratings of venues. Acts can rate a venue after a night. Only the Packed Out team sees those.

Companies that help us run the service. Stripe (payments and payouts), Supabase (our database and file storage, in London), Vercel (hosting the app), our website host (Hostinger), Resend (sending emails, in Ireland), Cloudflare (checking sign-ups are from real people), Sentry (telling us when something breaks) and our accountants. They only use your data to do work for us.

When the law requires it. For example, to the police or HMRC with a valid request.

We don’t sell your data and we don’t share it with advertisers.

06Data outside the UK

Our database is in London and our emails are sent from Ireland. Some suppliers, including Stripe, Vercel, Cloudflare and Sentry, may handle data in the US. When that happens we rely on the UK’s approved safeguards, like the International Data Transfer Agreement or the UK extension to the EU–US Data Privacy Framework.

Our website loads the Inter font from Google Fonts, which means Google sees your IP address when a page loads.

07How long we keep it

• Website sign-ups that go no further. If you join on the website but never set up your account, we delete your details after [12 months].
• Accounts. For as long as your account is open. When you close it, we delete your page straight away and the rest within [30 days], apart from what we must keep below.
• Bookings, payments, receipts and payouts. Six years after the booking, because HMRC requires it.
• Closed for breaking our terms. If we close an account for good, we keep a scrambled code made from its email so it can’t sign up again.
• People we contacted about joining. 12 months after our last contact.
• Invites to pubs. If a pub doesn’t join, we delete its details after [90 days].
• Backups. Deleted data stays in our daily backups for up to 7 days, then it’s gone.

08Your rights

You can ask us for a copy of the data we hold about you, ask us to correct it or delete it, object to how we use it, ask us to limit it or ask for it in a format you can take elsewhere. If we use your data because you said yes, you can change your mind at any time.

Email support@packedout.co.uk and we’ll reply within one month. It’s free.

If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d like the chance to put it right first.

09Cookies and your browser

We don’t use advertising cookies or tracking cookies. [if you add analytics, name the tool here]

The app uses cookies to keep you logged in. Cloudflare may set one when it checks a sign-up or login is from a real person. These are needed for the service to work.

The website saves a few small choices in your browser so it remembers them next time, like whether you’re a venue or an act. This stays on your device. You can clear it from your browser settings at any time.

10Age

You must be 18 or over to join Packed Out. Creators must be 25 or over for any collab that shows alcohol. We don’t knowingly collect data from anyone younger.

11Changes to this policy

If we change this policy, we’ll update the date below. If the change is important, we’ll email you first.