Privacy Policy

Last updated: 10 November 2026

This policy explains what personal data Eventdoor collects when you buy or sell tickets, how we use it, and the rights you have. We collect only what we need to sell you a ticket, run the door and pay organisers.

Who we are

Eventdoor ("we", "us") is a ticketing service operated by a sole trader trading as "Eventdoor", and is the ticket seller of record for events listed on this site. We are the data controller for the personal data described here. You can contact us at bookings@eventdoor.co.uk.

What we collect

If you buy tickets

• Your order: the event, ticket types and quantities, prices, whether you chose refundable tickets, and your order number.
• Your email address: needed for free tickets, and optional for paid ones (Stripe may also ask for it at checkout). We use it to send your tickets and receipt.
• Name on ticket: only if you choose to add one.
• Your tickets: each ticket's unique code, and when it was scanned at the door.
• Refund requests: when you asked and what was refunded.
• Card details: card payments are handled by Stripe. Your card number goes straight to Stripe and never reaches our servers. We receive confirmation of the payment and Stripe's fee for it.

If you sell tickets

• Your account: your name, organiser or brand name, email address, phone number, a securely hashed password (never stored in readable form), and an optional profile photo.
• Your events: everything you enter when listing an event, including the description, venue, dates, ticket types, prices, capacity and image.
• Bank details for payouts: your account name, sort code and account number. These are stored encrypted, and only the last four digits are ever shown.
• Email settings: whether you want ticket sale alerts and Eventdoor news.
• Sign-up checks: the result of the on-screen check you complete when you sign up.

Everyone

• Technical data: our hosting provider keeps standard server logs, which include IP addresses. We also record IP addresses briefly to stop repeated failed door-scanner PIN attempts.
• Emails you send us: if you contact us, we keep the conversation so we can help you.
• Unsubscribes: if you unsubscribe, we keep your email address on a "do not email" list so we don't send you marketing again.

How we use it

• To process your order, issue and email your tickets and receipt, and check tickets at the door.
• To handle refunds, including refundable ticket requests.
• To create and run organiser accounts, review events before they go on sale, and show organisers their own sales.
• To pay organisers their ticket sales after an event, minus Stripe's fee.
• To send service emails about your tickets, your account or an event you've booked, such as a change of time or venue.
• To send news and updates, only if you've turned them on. You can unsubscribe from any marketing email.
• To prevent fraud and keep the service secure.

Our legal bases

• Contract: to sell you tickets, run your organiser account and pay you.
• Legal obligation: to keep tax, accounting and transaction records.
• Legitimate interests: to prevent fraud, keep the service secure, and send service messages about an event you've booked, balanced against your rights.
• Consent: for marketing emails. You can withdraw consent at any time.

Who we share it with

• Stripe (payments): processes your card payment and refunds, under its own privacy policy.
• Our QR code provider (goQR.me's api.qrserver.com): when you open your ticket page, your ticket's code is sent to this service to draw the QR image, and it can see your IP address.
• Our hosting and email providers: to run the site and deliver emails.
• The event organiser: details of orders for their event, including the name on ticket if you gave one, so they can run the event and admit you.
• Authorities or advisers: where the law requires it, or to establish, exercise or defend legal claims.

We don't sell your personal data.

International transfers

Some of our providers, such as Stripe, may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

How long we keep it

We keep order and payment records for as long as we need them to provide the service and meet legal, tax and accounting requirements, generally up to six years for financial records. Organiser accounts are kept until you ask us to close them, then deleted or anonymised once any open payouts are settled and records we must keep have been kept. Rejected event submissions are removed sooner. Unsubscribe records are kept so we can keep honouring your choice.

How we protect it

Access to personal data is limited to what's needed to run the service. Passwords are hashed and bank details are encrypted. Card numbers never reach our servers. We take reasonable technical and organisational measures to protect data, though no system can be completely secure.

Children

Eventdoor is for adults buying tickets, including tickets for children to attend events. We don't knowingly collect personal data directly from children. If you think a child has given us their data, contact us and we'll remove it.

Cookies

We use one essential cookie to keep you logged in and protect forms. We don't use analytics or advertising cookies. See our Cookie Policy.

Your rights

Under UK GDPR you can ask to access, correct, delete or restrict your personal data, object to some processing, withdraw consent, and ask for a copy of your data in a portable format. Email bookings@eventdoor.co.uk and we'll respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to help first.

Changes

We may update this policy. The date at the top shows the latest version, and we'll highlight significant changes on this page.