Privacy Policy

1. Who We Are

Scope is a ticketing platform operated in England and Wales. We are the data controller in respect of personal data collected through the platform. References to "we", "us" or "Scope" in this policy refer to the Scope platform operator.

For data protection enquiries, contact us at: privacy@scopeshows.com

2. What Personal Data We Collect and Why

Account Registration: Name and email address - required to create and manage your account, issue tickets, and send order confirmations.

Ticket Purchases: Name, email address, and payment information - required to process ticket orders and issue refunds. Payment card data is processed by our payment provider (Stripe) and is not stored by Scope.

Event Updates: if you hold a ticket for a show, we use your email address to contact you about that show as part of the service. This happens whether or not you have subscribed to our marketing emails. These messages cover things like a change of time or venue, a cancellation or postponement, set times, entry and access information, and refunds. They never contain promotions. We hold these addresses with our email provider Brevo until 30 days after the event. You can still unsubscribe from marketing emails at any time, and that does not affect service messages about a ticket you hold.

Profile Information: Role information, band affiliations, venue affiliations - collected where you apply for a specific platform role (promoter, band manager, venue manager).

Uploaded Files: Supporting documents submitted with role applications - used to verify your identity and role.

Usage Data: Pages visited, events viewed, bands followed - used to personalise your experience and improve the platform.

Communications: In-app notifications and email communications about events, ticket purchases, and platform updates.

Check-In Data: When your ticket is scanned at an event, the time, result, and scanning staff member are logged.

3. Legal Basis for Processing

We process your personal data on the following lawful bases under UK GDPR:

• Contract performance: processing necessary to fulfil your ticket purchase and deliver the services you have requested.
• Legitimate interests: platform security, fraud prevention, improving our services, and communicating about relevant events.
• Legal obligation: retaining financial transaction records for audit and tax purposes.
• Consent: non-essential cookies and marketing communications, where separately obtained.

4. How We Use Your Data

• Processing ticket orders and issuing tickets
• Sending order confirmations and booking references
• Sending event updates, cancellation notices, and postponement notifications
• Verifying identity for role applications
• Enabling promoters to manage attendee check-in at events
• Personalising your feed (followed bands, area preferences)
• Platform security and fraud prevention
• Improving the platform based on usage analytics

5. Who We Share Data With

Payment Processors: Stripe processes payments on our behalf. Stripe is a data processor acting under our instructions. Your card details are never stored by Scope.

Event Promoters: When you purchase a ticket, the promoter receives your name and email address for the purposes of managing their event attendee list and processing refunds where required.

Venue Operators: Check-in data (name and ticket type) is accessible to venue staff operating the Scope check-in tool for the event.

Service Providers: We may use third-party services for email delivery, analytics, and infrastructure. These providers are contractually bound to process your data only on our instructions.

We do not sell your personal data to any third party.

6. How Long We Retain Your Data

Account data: Retained for the duration of your account and deleted within 30 days of a completed account deletion request.

Order and financial records: Following account deletion, order records are kept without personal identifiers for 6 years from the end of the financial year they fall in, for accounting and tax obligations. After that they are reviewed for removal. Order reference, amount, date and the event are kept; your name, email address and account identifier are not.

Event update lists: the list of ticket holders for a show is deleted 30 days after the event date. Any address that was held only for that purpose is deleted with it. An address on our marketing list is kept under your marketing choice.

Role application documents: Retained for 12 months from the date of the application decision.

Check-in logs: Retained for 12 months from the event date.

Usage data: Retained for up to 24 months on an aggregated and anonymised basis.

7. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of Access: You can request a copy of the personal data we hold about you. This can be done from your account settings page (Data & Privacy tab).
• Right to Rectification: You can correct inaccurate data by updating your account or contacting us.
• Right to Erasure: You can request deletion of your account and personal data from your account settings. See Section 8 for how this works.
• Right to Restriction: You can ask us to restrict processing of your data in certain circumstances.
• Right to Portability: You can download a copy of your data in a portable format from your account settings.
• Right to Object: You can object to processing based on legitimate interests at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, use the tools in your account settings or contact us at privacy@scopeshows.com. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Account Deletion (Right to Erasure)

You can request deletion of your account and personal data from the Data & Privacy section of your account settings. When you submit a request:

• If you still hold tickets for a show that has not happened yet, we wait. Your tickets and your account keep working until the last of those shows has ended, plus a short buffer of 7 days. We confirm the date to you when you submit the request.
• Once that date arrives, deletion is completed automatically. We remove your account, which means your name, email address and profile data, your marketing contact with our email provider, and your payment customer record with Stripe.
• Your order records are kept without personal identifiers for 6 years from the end of the financial year they fall in, for accounting and tax obligations, then reviewed for removal. They hold the order reference, amount, date and event, not your name, email address or account identifier.
• Tickets you already used, and attendance records for those shows, are kept in anonymised form as part of the event record.
• If you would rather not wait until after your shows, you can ask us to cancel your tickets for a refund under our normal refund rules and we can complete the deletion straight away.
• We send one email to confirm your request and the date, and no further email once your account is removed.

Deletion cannot be reversed. If you hold tickets, deleting your details before the show means you lose access to those tickets.

9. Cookies

We use cookies to operate the platform, maintain your session, and (with your consent) to understand how the platform is used. A cookie consent banner is shown on first visit. You can manage your cookie preferences at any time.

Essential cookies: Required for the platform to function. Cannot be disabled.

Analytics cookies: Help us understand how the platform is used. Only set with your consent.

See our full Cookie Policy for more detail.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Payment data is handled entirely by Stripe under PCI DSS certification and is never transmitted to or stored on Scope servers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification. Continued use of the platform following notification constitutes acceptance of the updated policy.