Privacy & Cookie Policy

1. Who we are

The data controller for events.albionwealthservices.com is Albion Wealth Services Ltd, company number 09040492, registered office at 66 Paul Street, London EC2A 4NA, United Kingdom ("Albion", "we", "us"). For any privacy question or request, contact us at contact@albionwealthservices.com.

2. What data we collect

• Order and ticket data: full name, email address, and (optionally) phone number, plus the event, ticket type and quantity you purchase.
• Account data: if you create an account, your name, email address, and an encrypted password.
• Payment data: your payment is processed directly by our payment partners — Revolut or Stripe, depending on the payment method used for that event; we receive confirmation that payment succeeded or failed, but never see or store your full card or bank details.
• Organiser account data: if you sign up as an event organiser, we collect your organisation's name, legal/business details (or your personal details if registering as an individual), tax ID, address, phone number, and date of birth (individuals only) — this is the information Stripe requires to verify organisers before they can receive payouts via Stripe Connect, which we collect once at signup so you don't have to repeat it during Stripe's own verification step. We never collect your bank account details directly — those are entered directly with Stripe during its hosted onboarding.
• Team data: if you invite a colleague to help manage your organiser account, we collect their email address to send the invitation and, once accepted, their name.
• Entry data: the time your ticket is scanned at an event, recorded against your ticket for fraud prevention (to stop the same ticket being used twice).
• Technical data: standard web server logs (IP address, browser type, pages visited) generated automatically by our hosting provider.

3. How we use your data

We use your data for the following purposes:

• To process your order and deliver your ticket(s) — necessary to perform our contract with you.
• To manage your account and show your ticket history — necessary to perform our contract with you.
• To verify tickets at entry and prevent duplicate use — our legitimate interest in running events securely.
• To contact you about changes to or cancellation of an event you hold a ticket for — necessary to perform our contract with you.
• To keep our site secure and prevent fraud — our legitimate interest.
• To comply with tax, accounting and other legal obligations.

We do not use your data for automated decision-making, and we do not sell your personal data.

4. Who we share it with

We share personal data only with the service providers who help us run this site, under contracts that require them to protect your data:

• Supabase — database and account hosting.
• Vercel — website hosting and delivery.
• Revolut — payment processing for events using Revolut as the payment method.
• Stripe — payment processing and organiser identity/bank verification for events and organisers using Stripe Connect.
• Resend — sending order confirmation, ticket, and team invitation emails.
• The organiser of an event you hold a ticket for, limited to what they need for entry management.

We do not share your data with advertisers, and we do not currently use any analytics or advertising cookies (see the cookie table below).

5. International transfers

Our database is hosted in the EU (London, UK region). Some of our service providers listed above may process data outside the UK/EEA; where they do, they rely on appropriate safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses.

6. How long we keep your data

We keep order and ticket records for as long as needed to fulfil the event, handle any disputes, and meet our accounting and tax obligations (typically up to 6 years after the event). If you close your account, we delete or anonymise your profile data, but retain order records for the period above.

7. Cookies

We use a small number of strictly necessary cookies. We do not currently use analytics, advertising, or social media cookies. Because these cookies are essential to the site working, they do not require your consent under applicable law, but we tell you about them here for transparency.

If we introduce analytics or marketing cookies in future, we will update this table and ask for your consent before setting them.

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Ask us to delete your data, where we are not required to keep it.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ICO), or the data protection authority in your EU country of residence.

To exercise any of these rights, contact contact@albionwealthservices.com.

9. Children

This site is not directed at children, and ticket purchases require the buyer to be at least 18 years old.

10. Security

We use industry-standard measures — including encryption in transit, access controls, and row-level security on our database — to protect your data. No method of transmission over the internet is completely secure, but we work to protect your information at every step.

11. Changes to this policy

We may update this policy from time to time; the date at the top shows the last revision.

12. Related documents

See also our Terms & Conditions.