Privacy Policy

How Seaty collects, uses, stores and protects your personal information when you buy tickets, run events, or use the platform. UK GDPR compliant.

Trademark

Seaty is a registered trademark and trading name of Seaty Ltd. Information Commissioner's Office Reference ZA543843.

What kinds of personal information about you do we process?

When you use or interact with Seaty Services, we may collect your personal data. This could be on behalf of us or at other times on behalf of an organiser using Seaty to run their event.

Personal information that we collect and process in connection with all of our products and services, if relevant, includes:

  • Full name
  • Email address
  • Records of your contact with us, such as message and email history when you get in touch with us
  • Demographic information such as preferences
  • Other information relevant to customer surveys and/or offers

What we collect from all users

Information you voluntarily provide to Seaty Services such as when you sign up for an account to use our Services, get in touch with us with questions, or browse sections of our website.

Personal data we may collect from you includes without limitation your name, email address and other information that enables users to be personally identified.

Information we collect automatically would be data that is sent to us from the device and browser you are using to connect to the website.

This information may include without limitation, your IP address, characteristics about your access device or browser, information on the status of your activities on Seaty or similar technologies.

When you sign up for the use of Seaty Services or submit any personal data to us, we may therefore link other non-personal data with your personal data.

At such a time, we will likely treat any such combined data as your personal data until it can no longer be associated with you or used to identify you.

What we collect from event organisers

When you are an event organiser we will collect additional personal data from you.

When you use our payment processing services we will need to collect financial information from you (for example your bank account information or an address to verify your personal information) to facilitate payments and information required for taxation purposes.

We may collect information from other third party sources such as websites, your bank, our payment processing partners (Stripe) and credit checking organisations.

Gift Aid Information Collection

For UK registered charities using Seaty, we may collect additional personal information when attendees opt to make Gift Aid declarations on their ticket purchases.

Gift Aid personal data we collect includes:

  • Full name
  • Street address
  • Town/city
  • Postcode
  • UK taxpayer declaration

Legal basis for Gift Aid processing:

We process Gift Aid information under Article 6(1)(a) (consent) and Article 6(1)(c) (compliance with legal obligations) of UK GDPR, as Gift Aid declarations are required by HMRC for UK tax reclaim purposes.

Gift Aid data retention:

Gift Aid declarations and related personal data are retained for 6 years as required by HMRC regulations. This data is stored securely and is only used for Gift Aid claim purposes and HMRC compliance.

Gift Aid data sharing:

Gift Aid information is shared only with the relevant charity organisation for HMRC submission purposes. Seaty acts as a data processor for Gift Aid information on behalf of the charity organisation who remains the data controller.

Your Gift Aid rights:

You can withdraw your Gift Aid declaration by contacting the charity organisation directly. Please note that once a Gift Aid claim has been submitted to HMRC, we may still need to retain the data for compliance purposes even if you withdraw consent.

Waiting List Information Collection

When you join a waiting list for an event, we collect personal information to allow the event organiser to contact you when tickets become available.

Waiting list personal data we collect includes:

  • Full name
  • Email address
  • Phone number (optional)
  • Number of tickets requested
  • Preferred dates (optional)
  • Accessibility requirements (optional)
  • Additional notes (optional)

Legal basis for waiting list processing:

We process waiting list information under Article 6(1)(a) (consent) of UK GDPR. By joining a waiting list, you consent to the event organiser contacting you about ticket availability.

Waiting list data retention:

Waiting list entries are retained until actioned by the event organiser. When an entry is marked as completed (you received tickets), your personal data (name, email, phone) is automatically deleted from the waiting list, retaining only the non-personal record of tickets requested and the linked order. Pending and contacted entries retain personal data until the organiser marks them as completed or the event is deleted.

Waiting list data sharing:

Waiting list information is shared with the event organiser who manages the waiting list for their event. Seaty acts as a data processor for waiting list information on behalf of the event organiser who remains the data controller.

Your waiting list rights:

You can request removal from a waiting list by contacting the event organiser directly. Event organisers can mark your entry as refused, which removes you from the active waiting list while retaining a record for audit purposes.

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

  • Internal record keeping - We maintain records of your account and transactions
  • Service improvement - We may use the information to improve our products and services
  • Market research - From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone or mail
  • Website customisation - We may use the information to customise the website according to your interests
  • Promotional communications - We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided
  • Facilitating event updates - We may use your email address (and share it with the relevant event organiser) so they can provide you with necessary updates or additional information about the event you're attending. In some cases, Seaty may also send or facilitate these communications on the organiser's behalf. These messages are typically non-marketing in nature (e.g., changes to date, venue, schedule) unless you have explicitly opted in to receive marketing content from that organiser

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Data breach notification:

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR.

If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, providing information about the nature of the breach and the measures we are taking to address it.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site.

Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

You can find more information on how we use cookies by reading our Cookies Policy.

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website.

Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.

You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

Marketing preferences:

Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes.

If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at Support@Seaty.co.uk

Data protection:

We will not sell, distribute or lease your personal information to third parties. We may use your personal information to send you promotional information which we think you may find interesting if you tell us that you wish this to happen.

Correcting your information:

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

The UK General Data Protection Regulation (UK GDPR)

The UK General Data Protection Regulation (UK GDPR) is the privacy law that governs how we handle personal data. This regulation requires that Seaty, and event organisers using the service, provide users and attendees with comprehensive information about how their personal data is processed.

Are you an event organiser using Seaty? For plain-English UK GDPR guidance covering your responsibilities as a data controller — lawful basis, data minimisation, retention, sharing attendee data with venues — see our GDPR for UK event organisers guide.

Information on what you need to know

The legal grounds for the processing of your personal data:

We are required to tell you about the legal ground we rely on to process all personal data about you. In relation to this we will process your personal data only because:

  • You provided your consent
  • The processing is in our legitimate interest as an event organising and ticketing platform
  • It is necessary for our agreed contractual relationship
  • The processing is necessary for us to comply with our legal or regulatory obligations

Retention of personal data:

Personal data may be required for as long as is needed to provide you with your services, or in the event of complying with our legal obligations, resolving disputes that may arise, and enforcing agreements.

We retain different types of data for different periods:

  • Active account data - Retained while your account remains active
  • Inactive account data - Retained for 10 years after your last account activity, after which it will be deleted
  • Transaction records - Retained for 7 years for accounting and tax purposes
  • Gift Aid declarations - Retained for 6 years as required by HMRC regulations
  • Marketing preferences - Retained until you withdraw consent or your account is deleted
  • Support communications - Retained for 3 years to assist with ongoing support queries
  • Waiting list entries - Personal data deleted when entry is completed; non-personal records retained with linked order

Know your rights:

Data protection laws provide you with rights in relation to personal data that we hold about you here at Seaty, including a right to request a copy of the personal data, request that we rectify, restrict or remove your personal data and unsubscribe from marketing communications.

You can exercise these rights by contacting us or changing the "cookie settings" in your browser (see our Cookies Policy for more information).

Note that all requests to exercise data protection rights will be assessed by us on a case by case basis. There may be times where we are not legally required to comply with your request because of the laws in your jurisdiction or because of exemptions provided for in data protection legislation.

Making complaints:

If you have a complaint about how we handle your personal data, please get in touch with us to explain the situation.

If you are not happy with how we have attempted to resolve your complaint, you may contact the Information Commissioner's Office (ICO), the UK's data protection authority, at https://ico.org.uk or by calling 0303 123 1113.

Seaty as a data controller and a data processor:

UK data protection laws make a distinction between organisations that process personal data for their own purposes (known as "data controllers") and organisations that process it on behalf of other organisations (known as "data processors").

Seaty may act as either a data controller or a data processor in respect of your personal data, depending on the circumstances.

When Seaty is a data controller:

If you create an account with us to organise your events, Seaty will be a data controller in respect of the personal data that you provide as part of your account.

We will also be a data controller of the personal data that we have obtained about the use of the applications or Seaty properties, which could relate to organisers or consumers. We use this to conduct research and analysis to help better understand and serve users of the services as well as to improve our platform and provide you with more targeted recommendations about events we think may be of interest to you.

If you have a question or complaint about how your personal data is handled, these should always be directed to the relevant data controller since they are the ones with primary responsibility for your personal data.

When Seaty is a data processor:

If you register for an event as a consumer, we will process your personal data to help administer that event on behalf of the event organiser and to help the organiser target, and understand the success of, their event and event planning.

In these circumstances, Seaty merely provides the "tools" for organisers; Seaty does not decide what personal data to request on registration forms or event pages, nor is it responsible for the continued accuracy any personal data provided.

Any questions that you may have relating to your personal data and your rights under data protection law should therefore be directed to the organiser as the data controller, not to Seaty.


Contact Us

For privacy-related questions or to exercise your data protection rights, please contact us at:

Information Commissioner's Office Registration: ZA543843