How we look after your details

Who we are, and who decides

One Tandem Limited, a company registered in England and Wales (company number 17229064), trading as Tutti Tickets. We're registered with the Information Commissioner's Office, number ZC156390.

Tutti runs event pages and bookings for organisers. Two different people decide what happens to your details, depending on what they are:

• The organiser whose event you book, or ask to hear about, decides what happens to your booking: they're its "controller", and we look after it for them. Each event page says which organiser runs it. Their own privacy notice may say more.
• We decide what happens to accounts on Tutti, to Find events, to leaders' profiles, and to keeping Tutti working and secure.

When you book

We keep what you give when you book: your name and email address, the name of each person you book for (and their email address, if you give it), their answers to the organiser's questions, the tickets and extras, any discount code, what you paid and how, and the time. If you pay by bank transfer and address the invoice to someone else, we also keep the name, address and any PO number you give for it; if you save a name and address to your account for future invoices, we keep those with your account. The organiser and their team can see all of it, except as below.

If you book for someone else, please make sure they're happy for you to give us their name and answers.

Health details. Some questions, such as dietary or access needs, are health information. Only the organiser's owners and admins can see the answers (never the rest of their team), and we delete them 30 days after the event.

Your booking's link is how you see and change your booking. Anyone with it can see the booking (but not the answers), so keep it to yourself. It stops working 30 days after the event.

How long: the organiser keeps bookings as long as they need them to run their events and their accounts, and never more than six years after the event (the usual period for tax records). When they close their Tutti account, we delete them sooner, unless the law says something must be kept longer.

Paying

By card (including Apple Pay and Google Pay), you pay on Stripe's own page, straight to the organiser's Stripe account. Your card details go to Stripe, never to us. Stripe tells us whether the payment went through, so we can confirm your booking.

By bank transfer, Stripe gives you bank details for your booking in the organiser's name, and matches your payment to it. To do that, Stripe holds your name and email address for the booking. If your booking is cancelled before it's paid in full, Stripe emails you to ask where to send back anything you'd already sent.

Refunds go back the way you paid. For a bank transfer, Stripe emails you for the account to send it to.

Stripe is responsible for the payment details it collects, under its own privacy notice.

Passing a place on, and cancelling

If you pass a place to someone else, we keep the email address you gave for them and send them the offer. When they accept, their details and answers replace the old ones. If you cancel, we keep the booking, marked cancelled, with any refund.

Emails about your event

We email you your booking, payment reminders if you're paying by transfer, and anything the organiser sends to everyone booked (directions, say). These come from Tutti in the organiser's name, and replies go to them.

For every email we send, we keep a record of who it went to, which email it was, its subject and when, and whether it arrived or was opened (never what it said), for 13 months, so we can tell when emails aren't getting through. If an address bounces or marks us as spam, we stop emailing it.

After the event

The morning after an event, we email everyone who came, on the organiser's behalf, to ask how it was. If you answer, we keep your stars, your comment, and whether you agreed to it being shared (with the words you agreed to and when), for the organiser, as long as they keep their bookings.

If you agreed it may be shared, the organiser, and the event's leaders for what you said about them, may publish it on their Tutti pages with your first name, shortened or with personal details taken out; if you change it or take back your agreement, it comes down. A leader you wrote about sees your answer and your first name, never your email address. To help, Tutti may send comments and their stars, with the organiser's and leaders' names (never yours or your email address), to Anthropic, whose Claude works out who a comment is about, summarises comments for the organiser, or drafts a version with personal details taken out.

If you run events, we may ask you how Tutti is working for you, at most twice a year; what you tell us is ours, to improve Tutti.

When you ask to hear when booking opens

We keep your name, your email address and the date you asked, and email you once, when booking opens. The organiser and their team can see them.

If you tick "keep me posted", we record that you did, with the words you agreed to and when, so the organiser can tell you about their future events. It's optional, and you can change your mind at any time.

On an organiser's page you can ask to hear when they have an event coming up. We email you a link to confirm first, and only add you to their mailing list once you've pressed it, recording the words you agreed to and when. They then email you, through us, when each new event goes up, and every email has a link to stop.

If you join a waiting list

We keep your name, email address and how many places you asked for, so we can offer you places that come back and hold them for you. The organiser and their team can see them. We keep them until the event has happened, or until you leave the list, which you can do from any of its emails.

Find events

When you search by distance, we use the postcode you give for that search. It's kept with your visit (in the session cookie below), never in a page's address or our logs, and never with your name. To work out where it is, we send the postcode alone to postcodes.io, a free service run on open government data.

Organisers' pages and their events appear in Find events and the list of organisers unless the organiser switches that off.

Accounts for people who book

You never need one to book. After you've paid, you can ask for one: we email a link to the address you booked with, and using it makes the account and proves the address is yours. Then we keep your name and email address, show you every booking made with that address, with any organiser, and fill in your name and email the next time you book (never your answers).

Signing in is by a link we email you, which works once, for 20 minutes; a password is optional. If you never use the first link, we delete the account after 2 weeks. You can delete your account at any time, from My account: the organisers keep their bookings, as above, because they're theirs.

If you run events on Tutti

We keep your name, email address and password (scrambled, so nobody can read it), the organisation you set up and who is in its team, the version of our terms you agreed to and when, how you heard about Tutti if you told us, and when you sign in and from where. If you change your email address, we keep the new one unconfirmed until you use the link we send to it. We use these to run your account and keep it secure.

If you sign up but never confirm your email address, we delete the account after 2 weeks.

Deleting your account (from My account): your name, email address and password are deleted, and you leave every team. A record that an account existed stays, so things it did (an email sent, a refund made) still make sense to the organiser. If you're an organisation's only owner, you'll need to hand it over first.

Your organisation's page, if it's listed, shows its name, the line you wrote about it, and its public events.

If you lead events on Tutti

When an organiser invites you to lead an event, we keep your name and email address as they gave them, so we can send the invitation and show your name on the event while you decide. The organiser can also add a photo of you, which shows beside your name until you reply. If you say no, the photo is deleted and the event shows only your name, as the organiser typed it; if you never reply, it shows your name and any photo the organiser added.

If you say yes, you agree to a public profile and to your name and photo showing on the events you lead, and we record that you agreed, with the words you saw and when. Organisers on Tutti can find you by name in our search of leaders, unless you switch that off on your profile. If the organiser added a photo and you have none of your own yet, it becomes your profile's photo, which you can change or remove. You can delete your profile whenever you like: it goes, you leave the search, and the events you led keep just your name.

Cookies

We use three, and none to follow you around the web:

• Your session: keeps forms working, shows you messages, and holds a Find events postcode while you search. It goes when you close your browser.
• Signed in: keeps you signed in, if you are.
• The beta banner: remembers that you closed it.

We count visits to our own pages and to event pages, and where visitors came from (a link, a search engine), without cookies and without recording who anyone is.

Who else handles your details

To run Tutti we use: Scalingo (hosting, in France), Cloudflare (network and file storage), Brevo (sending emails), Stripe (payments), postcodes.io (finding a postcode, as above), Anthropic (summarising and tidying feedback, as above), GlitchTip (reports of errors in Tutti, which don't include your details) and Slack (our own notices of what's happening on Tutti: organisers' and their team's names, and what organisers tell us about Tutti, never the details of anyone who books). We never sell your details.

Why we're allowed to use them

The law asks us to say which reason we rely on for each use:

• Your booking, paying, passing a place on and emails about your event: to carry out the booking you made with the organiser (a contract).
• Health answers: your explicit consent, which you give by answering. You can ask the organiser, or us, to delete an answer at any time.
• "Keep me posted", following an organiser, leaders' public profiles, and sharing your feedback: your consent. You can take it back at any time, from the email, your profile or by asking us, and we stop from then on.
• Hearing when booking opens, waiting lists, and asking how an event went: to do what you asked, or what the organiser reasonably needs to run their events (legitimate interests).
• Accounts on Tutti, keeping Tutti secure, the record of emails sent, counting visits, and Find events: our legitimate interests in running Tutti well and safely, which we've weighed against yours.
• Anything the law makes us keep (tax records, say): a legal obligation.

Your rights

You can ask to see what we hold about you, to have it corrected or deleted, to object to how we use it, or to take back any consent you gave. For a booking, ask the organiser, or ask us and we'll pass it on. You can complain to the Information Commissioner's Office.

Changes

If we change this notice in a way that matters, we'll say so at the top of this page, with the date.