Privacy Policy

1. Who we are

FacilEvents is a trading name of David Nunes Cuba, a sole trader operating in the United Kingdom. Horwich, Greater Manchester, United Kingdom. Data protection enquiries: support@facilevents.com.

2. Our data protection roles

Our role depends on why personal information is being processed. FacilEvents acts as CONTROLLER for information used for its own purposes: Organiser account administration, subscription billing, customer support, Platform security, fraud and abuse prevention, technical and audit logs, legal compliance, and administration and improvement of the service.

Where an Event Organiser uses FacilEvents to collect and manage information about its Attendees, the Organiser determines why that information is collected and how it is used — the Organiser acts as controller and FacilEvents as PROCESSOR on its behalf. Questions about how an Organiser uses Attendee information should normally be directed to that Organiser.

3. Information we may collect

Organiser information: name, email address, telephone number, organisation name and address, account information, subscription and billing information, connected payment-provider information, support communications and account activity.

Attendee information collected on behalf of Organisers: name, email address, telephone number, ticket or registration information, order identifiers, check-in status, answers to registration questions, consent records and other information requested by the Organiser. Organisers are responsible for ensuring the information they choose to collect is appropriate and lawful.

Technical information: IP address, device and browser information, login and security logs, timestamps, session information, error diagnostics and cookie information.

4. Payment information

Event ticket payments are processed by third-party Payment Providers connected by the Event Organiser (such as Stripe or SumUp). FacilEvents does not receive or hold ticket proceeds. Payment Providers independently collect and process payment details under their own terms and privacy notices. FacilEvents receives only limited transaction information required to provide the Platform — transaction identifiers, payment status, amount, currency and refund status.

5. Why we use personal information and lawful bases

Where FacilEvents acts as controller, we use personal information to create and manage accounts, provide services, calculate and collect subscription and platform fees, provide support, authenticate users, protect the Platform, prevent fraud and misuse, maintain records, comply with legal obligations, enforce our Terms and improve the service.

Lawful bases: CONTRACT, where processing is necessary to provide services requested by an Organiser; LEGITIMATE INTERESTS, for security, fraud prevention, administration and improvement, where not overridden by individuals’ rights; LEGAL OBLIGATION, where required by law; and CONSENT, for optional marketing communications and non-essential cookies. Where we rely on consent, it may be withdrawn at any time.

6. Special category data and children

FacilEvents does not require Organisers to collect special category personal data as a standard part of Event registration. Organisers should not collect information concerning health, racial or ethnic origin, religious or philosophical beliefs, biometrics or other special category data unless they have a genuine need and an appropriate lawful basis. Where such information is collected through an Organiser’s registration form, the Organiser is responsible for its lawfulness.

Organiser accounts are intended for persons aged 18 or over. Events may involve children, and the Organiser is responsible for ensuring that collection and use of children’s information is lawful, proportionate and appropriately communicated to parents and guardians.

7. Service providers and international transfers

We use third-party service providers to operate FacilEvents, including cloud hosting, databases and authentication, transactional email, payment integrations, monitoring and analytics. Current providers are described on our Subprocessors page.

Some providers may process personal information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we use an appropriate lawful transfer mechanism.

8. Retention and security

We retain personal information only as long as reasonably necessary for the purposes it was collected, including legal, accounting, security and dispute-resolution requirements. Data processed on behalf of Organisers is retained and deleted according to our agreement with the Organiser. Backup copies may remain for a limited period before being securely overwritten.

We use appropriate technical and organisational measures — including encryption in transit and at rest and per-organisation isolation — designed to protect personal information. No internet-based system can guarantee absolute security.

9. Your rights and complaints

Depending on the circumstances, individuals may have rights of access, correction, deletion, restriction, objection, data portability and withdrawal of consent. Where FacilEvents processes Attendee information solely on behalf of an Organiser, requests relating to that information may need to be handled by the relevant Organiser.

Please contact us first at support@facilevents.com if you have concerns. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator — ico.org.uk.

10. Cookies and changes

FacilEvents uses cookies where necessary to provide and secure the Platform; non-essential technologies (analytics) only run with your consent. See the Cookie Policy.

We may update this Privacy Policy; the latest version is published on this page with its date.