Privacy Policy

Last updated: 5 August 2026

This Privacy Policy explains how Mastermind Event LTD ("we", "us", "our") collects, uses, and protects personal data when you use the Mastermind Event website and mobile application, purchase event tickets, or otherwise interact with our services. We comply with the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Data controller

Mastermind Event LTD is the data controller for the personal data processed via this platform. For any privacy enquiry, contact us at privacy@mastermindevent.com.

2. What we collect

  • Account data: name, email, password hash, authentication identifiers.
  • Ticket and order data: event, tier, attendee name, attendee email, dietary or accessibility notes you supply.
  • Payment data: handled by Stripe; we store transaction IDs and amounts, not card numbers.
  • Communications: emails you receive (transactional and event updates) and your unsubscribe state.
  • Technical data: IP address, browser, device, and basic usage logs for security and abuse prevention.

3. Why we use it (lawful basis)

  • Contract: to sell and deliver tickets, send confirmations and entry passes, and provide your account.
  • Legal obligation: tax, accounting and invoice retention.
  • Legitimate interests: securing the platform, preventing fraud, improving the service.
  • Consent: optional marketing emails and non-essential cookies. You can withdraw consent at any time.

4. Cookies and similar technologies

Our website uses cookies and similar technologies. Details, including how to manage and withdraw consent, are available in our Cookies Policy. The mobile application does not use browser cookies but may use equivalent technologies where necessary for authentication, security or analytics.

5. Sharing

We share data only with processors needed to run the service:

  • Stripe (payments)
  • Supabase / Lovable Cloud (hosting and database, EU region where possible)
  • Email delivery providers (transactional email)
  • Google Analytics 4 (site analytics, only with your consent)
  • Meta Platforms Ireland Ltd. (Facebook / Instagram) — advertising measurement via the Meta Conversions API, only with your consent. On purchase we send Meta the order value and currency together with a hashed (SHA-256) copy of your email, first name, last name and country, plus the _fbp / _fbc cookies where set. See our cookies policy for details.

We never sell your personal data.

6. Mobile app permissions

Depending on the features you use, the Mastermind Event mobile app may request access to:

  • Camera – to scan QR codes for event entry and check-in.
  • Notifications – to send important updates relating to your account, tickets and events.

These permissions are only requested when required and may be disabled through your device settings at any time.

7. Account Deletion

You may request deletion of your Mastermind Event account and associated personal data at any time by contacting us at support@mastermindevent.com from the email address associated with your account.

We will process valid account deletion requests within 30 days.

When we receive a valid deletion request, we will permanently delete or anonymise your personal data unless we are required to retain certain information to comply with legal, regulatory, accounting or fraud-prevention obligations. For example, transaction and invoice records may be retained for up to 7 years where required by applicable law.

Once your account has been deleted, you will no longer be able to access your account or recover any associated data that has been permanently deleted.

8. International transfers

Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

9. Retention

Account and ticket records are kept while your account is active and for up to 7 years after to comply with tax and accounting law. Marketing preferences are kept until you change them.

10. Your rights

Under GDPR you have the right to:

  • Access a copy of your data
  • Rectify inaccurate data
  • Erase your data (where no legal obligation requires us to keep it)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with your local supervisory authority

To exercise any of these rights email privacy@mastermindevent.com.

11. Security

We use industry-standard technical and organisational measures to protect personal data, including encryption in transit, secure authentication, hashed passwords, role-based access controls, and monitoring to help prevent unauthorised access.

12. Children's privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children without appropriate parental consent.

13. Changes

We may update this policy. Material changes will be notified by email or via a prominent notice on the platform.