Privacy Policy

Venore is an event discovery and ticketing platform operated by VENORE LIMITED (“Venore”, “we”), registered in England and Wales under company number 17453414. We are the data controller for the platform. For questions about this policy or your data, email hello@venore.events.

When you buy a ticket, the organizer of that event also receives your details so they can run the event and tell you about their own future events, unless you opt out. For that purpose the organizer is a separate data controller; their use of your data is governed by their own policies as well as the rules we impose on them below.

• Account details — name, email address, password (stored hashed), and if you sign in with Google, the name and email Google shares with us.
• Purchase details — the tickets you buy, order totals, and a reference to your payment. Card numbers are handled entirely by Stripe and never touch our servers.
• Email choices — whether each organizer may email you, how that came about (you bought a ticket and didn’t opt out, followed them, or agreed), and any opt-out or unsubscribe, with the time and wording recorded.
• Activity — events you save, organizers you follow, comments you post, messages you exchange with organizers, and check-in scans at the door (which record who scanned you and when).
• Notifications — if you turn on push notifications, the browser subscription that lets us reach that device. Turning them off removes it.
• Technical data — IP address, browser and device information, and error reports needed to keep the service secure and working.
• Data from organizers — an organizer may add contacts they already hold to their Venore audience. They confirm those people agreed to hear from them; we record who added you, when, and on what basis, and anyone who unsubscribed stays unsubscribed even if added again.

• To sell and deliver tickets, send order confirmations and admit you at the door (performance of a contract).
• To give the organizer of an event you bought a ticket for your name, email and order details so they can run the event (performance of a contract) and email you about their own future events — after a paid purchase unless you opt out at checkout or unsubscribe, or where you followed them or agreed.
• To keep the platform safe: fraud prevention, abuse reports, rate limiting and security monitoring (legitimate interests).
• To improve the service using aggregate, non-identifying analytics (legitimate interests).
• To meet legal obligations such as tax and accounting records.

We do not sell personal data and we do not run third-party advertising on Venore.

Organizers can only message you inside Venore if you hold a ticket to one of their events. You can mute or block any organizer, and you can turn off organizer messages entirely in your account settings. An organizer can also send updates to everyone holding a ticket for an event (up to three a day) — a time or venue change, entry details or a cancellation, never a promotion. It arrives in your Venore inbox, or by email if you’ve turned organizer messages off or we can’t notify a device of yours; if you’ve blocked the organizer, you won’t get it. When you buy a ticket, you can tick “Don’t email me” at checkout; either way, every marketing email from an organizer carries an unsubscribe link that works without signing in, and once you opt out, buying another ticket doesn’t sign you back up.

• Event organizers — as described above.
• An organizer’s door staff — people the organizer adds to check tickets at one event. At the door they see your name, ticket type and whether it has been used, for that event only, and nothing else about you. Their access ends a day after the event starts.
• Stripe — payment processing and payouts.
• Supabase — database, authentication and file storage (hosted in London, UK).
• Vercel — application hosting, and anonymous visit counts (pages, referrers, countries) that use no cookies and never identify you.
• Resend — transactional and consented marketing email delivery (sent from the EU).
• OpenFreeMap — the map tiles behind venue maps; their servers see your IP address when a map loads.
• Sentry — error monitoring, with personal identifiers removed before reports are sent.
• Cloudflare — bot protection on sign-up and sign-in.
• Google — only if you choose to sign in with Google.

We may also disclose data where the law requires it or to protect the rights and safety of users.

Data is stored in the United Kingdom, with some providers processing it in the European Union. Where a provider processes data outside the UK or EU, transfers are covered by standard contractual clauses or an adequacy decision.

We keep your account for as long as it exists. Order and ticket records are kept for six years for tax and dispute purposes. Messages and comments are kept while your account exists or until removed. Security logs are kept for up to twelve months.

Under UK GDPR you can ask us to access, correct, delete or export your data, to restrict or object to processing, and you can withdraw consent at any time. Email hello@venore.events and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Venore uses only essential cookies: your session and your last-used space. When you arrive from an organizer’s email, the link carries a short reference in the address so their message can be credited if you buy; nothing is stored in your browser for it. Stripe sets its own fraud-prevention cookies on the checkout page. We set no advertising, analytics or cross-site tracking cookies.

We will post any changes here and update the date above. If a change materially affects how we use your data, we will tell you by email or in the app first.

See also our Terms of Service.