Privacy notice

Pilot version — last updated 13 October 2026. Controller: DigMusiK Limited, 71–75 Shelton Street, London WC2H 9JQ. Questions: stu@digmusik.com.

1. What we collect

Account data: name, email, password (stored hashed), role, and profile details you add (venue rooms, band bios, fan city and preferences). Fan signals: follows, gig interests, stated budgets and travel appetite — shown to venues and bands only after anonymisation and aggregation. Transactions: ticket orders and payouts, processed by Stripe (we never see full card numbers). Technical: basic logs, device and cookie data described in our cookie policy.

2. Why we use it (lawful bases)

Contract: running accounts, bookings, tickets, payouts and streaming. Legitimate interests: demand forecasts, fraud prevention, service improvement. Consent: marketing emails and optional analytics — withdraw any time. Legal duty: tax, accounting and safety records.

3. What we never do

We never sell personal data. We never show venues or bands who individual fans are — only aggregated demand. We never use your music or content beyond running and promoting the service under the licence in our terms.

4. Sharing

Processors who help run the service: hosting and infrastructure (Hostinger, AWS, both EU/UK-region), payments (Stripe), and email delivery. Each acts only on our instructions. We disclose data if the law requires it or to protect users and the service.

5. Retention

Account data while your account is active, then deleted or anonymised within 12 months of closure except where tax, accounting or dispute rules require longer. Anonymised, aggregated demand statistics may be kept indefinitely because they cannot identify anyone.

6. Your rights

UK GDPR gives you rights of access, correction, erasure, restriction, portability and objection, plus the right to complain to the ICO (ico.org.uk). Email stu@digmusik.com and we will respond within one month.

7. Security and children

Traffic is encrypted in transit, passwords are hashed, and access to personal data is limited to what each role needs. The service is not for under-16s; accounts found to be held by children will be closed.