Last Updated: 3 August 2026
At Out & Down, we respect your privacy and are committed to protecting personal data. This Privacy Policy explains how we collect, use, and protect personal data for both Ticket Buyers and Event Organisers / Promoters (“Organisers”).
1. Who We Are
Out & Down acts as an Events Guide and Ticket Agent for Grassroots & Independent Culture.
For any data protection inquiries or to exercise your rights, contact us at:
- Email: hello@outanddown.com
- Live Support: Via the support widget on the bottom right corner of our website.
2. Information We Collect
A. From Ticket Buyers
- Contact Information: Email address (required for guest checkout and ticket delivery).
- Account Details: If you choose to register an optional account, we store your login credentials and order history.
- Booking & Entry Data: Purchased tickets, event dates selected, and QR code scan status.
- Note: Payment card and banking details are processed securely by external payment gateways (e.g., PayPal/Stripe). Out & Down does not store your full payment card numbers.
B. From Event Organisers & Promoters
- Account Information: Name, email address, password, profile details, and organisation/venue name.
- Financial & Payout Data: Linked PayPal account information, site Wallet transactions, and payout history.
- Listing Details: Event media, descriptions, ticket types, and contact information.
- Operational Logs: Approval requests, scanner activity, and ticket management actions.
3. How We Use Your Data
- To Process Transactions & Issue Tickets: Emailing digital tickets, QR codes, and booking confirmations.
- To Facilitate Door Check-In: Allowing Organisers to verify valid tickets at entry using our scanner tools.
- To Manage Organiser Wallets & Payouts: Transferring ticket revenue to Organiser PayPal accounts post-event.
- To Send Critical Updates: Notifying buyers of event cancellations, date shifts, or major changes.
- To Prevent Fraud & Resolve Disputes: Monitoring chargebacks, unpaid balances, and platform security.
4. Data Sharing & Responsibilities
Data Shared Between Buyers & Organisers
When a buyer purchases a ticket, we share relevant booking details (such as buyer name and email address) with the specific Event Organiser hosting that event.
- Organiser Responsibilities: Under the GDPR, Organisers act as independent Data Controllers for the attendee data accessible in their management dashboard. Organisers must handle attendee data strictly for event operations, check-in, and direct event updates. Organisers may not sell attendee data or add buyers to external marketing lists without explicit consent.
Third-Party Service Providers
We share necessary data with trusted service providers:
- Payment Processors (e.g., PayPal, Stripe): To process payments, handle refunds, and issue payouts.
- Legal & Tax Authorities: Only where strictly required by law or tax regulations (e.g., HMRC).
- Analytics Providers (Google Analytics): To analyze traffic, user interaction, and site performance. Google automatically collects browsing data (such as cookies, IP addresses, and device identifiers). To learn more about how Google collects and processes data, visit this page.
.
5. Your Rights Under GDPR
Whether you are a Buyer or an Organiser, you have the following rights regarding your data:
- Access: Request a copy of the personal data we hold about you.
- Erasure (“Right to be Forgotten”): Request the deletion of your account and personal data (subject to legal/tax record-keeping duties).
- Rectification: Ask us to correct inaccurate or outdated details.
- Restriction: Request that we temporarily limit the processing of your data.
To exercise these rights, email hello@outanddown.com.