Legal
Privacy policy.
Your data should work for you, not against you. Here is exactly what we collect, why, and the control you have over it.
Last updated
01Who we are
encore is operated by Encore Live Ltd, a company registered in England and Wales (company number 00000000), whose registered office is 12 Hanbury Street, London E1 6QR, United Kingdom. For the purposes of UK data protection law, we are the controller of the personal data described in this policy.
When you buy a ticket, the event organiser also receives some of your details so they can run the event. The organiser is a separate controller for that data and their own privacy policy applies.
02What we collect
Information you give us
- Your name, email address and, optionally, your phone number when you book.
- Account details such as your password (stored only as a secure hash) and preferences.
- Messages you send to our support team.
Information created when you use encore
- Your bookings, ticket references and entry scans.
- Events you save and the city you browse.
- Device, browser and approximate location derived from your IP address.
Payment information
Card payments are processed by our payment provider. We never see or store your full card number — we receive only a token, the card brand and the last four digits.
03How we use your data
| Purpose | Lawful basis |
|---|---|
| Processing bookings and issuing tickets | Contract |
| Sending booking confirmations and event changes | Contract |
| Preventing fraud and ticket touting | Legitimate interests |
| Improving the service through aggregate analytics | Legitimate interests |
| Sending recommendations and newsletters | Consent (you can withdraw at any time) |
| Keeping financial records | Legal obligation |
05How long we keep it
- Booking and transaction records: 6 years, to meet UK tax requirements.
- Account data: until you close your account, then deleted within 30 days.
- Support conversations: 2 years.
- Analytics data: aggregated or deleted after 14 months.
06Your rights
Under UK GDPR you have the right to:
- access a copy of your personal data;
- correct data that is inaccurate;
- ask us to delete your data, or restrict how we use it;
- object to processing based on legitimate interests, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time.
To exercise any of these rights, email privacy@encore.example. We respond within one month. If you are unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.
08Changes to this policy
We may update this policy from time to time. When we make material changes, we will tell you by email or with a notice on the site before they take effect.