Privacy
policy.

1. Who is responsible for your information

Bangs is the controller of the personal information described in this policy. Questions, requests or complaints about privacy can be sent to hello.bangs.show@gmail.com.

2. Information we collect

We collect information you give us when you use Bangs:

• your email address and an account identifier when you sign in;
• the show title, genre, venue, performance time, ticket quantity and note you add to a listing;
• messages you send through a private conversation; and
• information you include when you contact us or report a problem.

We also create operational records such as listing and conversation identifiers, timestamps, read status, publication status and email-notification status. Our hosting, authentication and analytics providers may receive technical information such as your IP address, device and browser information, referring page, cookie or similar identifiers, and how you interact with the service.

Bangs does not ask for payment details and does not store ticket files or QR codes. Please do not put contact details, payment information or sensitive personal information in a listing or message.

3. How we use your information

We use personal information to:

• sign you in and keep your account secure;
• publish, manage and remove your ticket listings;
• create private conversations between ticket givers and requesters;
• send sign-in codes and message notifications;
• publish public listing details on the Bangs Instagram account;
• measure how Bangs is used and improve the service;
• prevent abuse, investigate reports and enforce our terms; and
• meet legal obligations and establish or defend legal claims.

4. Our legal reasons for using it

We process account, listing and conversation information because it is necessary to provide the service you request. We use limited operational and security information for our legitimate interests in running, protecting and improving Bangs. We may process information to comply with the law, and rely on consent where the law requires it, including for non-essential analytics cookies.

5. What other people can see

Active listings are public. They show the ticket information and note you submit, but not your name, email address or account identifier. Public listing details may also appear in posts and Stories on the Bangs Instagram account.

Private messages are visible only to the ticket giver and the requester in that conversation, and to Bangs when reasonably necessary to operate the service, investigate a report or comply with the law. Participants do not receive one another's email addresses from Bangs.

6. Services that process information for us

We use carefully selected providers to operate Bangs:

• Neon provides the database and email-code authentication;
• Vercel hosts the website and processes service logs;
• Resend delivers message-notification emails;
• Google Analytics helps us understand site usage, with advertising signals and personalised advertising disabled; and
• Meta receives public listing content that Bangs publishes to Instagram.

These providers process information under their own terms and privacy safeguards. Some may process information outside the UK. Where required, we rely on recognised safeguards for international transfers, such as adequacy regulations or approved contractual protections.

We do not sell your personal information.

7. Cookies and analytics

Bangs uses cookies needed to sign you in and maintain a secure session. In production, Google Analytics may use cookies or similar technology to collect aggregated information about visits and interactions. Advertising signals and personalised advertising are disabled. You can restrict or delete cookies using your browser settings, although blocking essential cookies may stop sign-in from working.

8. How long we keep information

Private conversations become inaccessible 24 hours after the performance and are then scheduled for deletion. Related messages and notification records are deleted with the conversation. Copies may remain briefly in backups or security logs before they are overwritten.

Listings and their publication records are kept for as long as reasonably needed to operate the noticeboard, prevent duplicate Instagram posts, handle reports and maintain an accurate service history. Account and support information is kept while needed for the service or until you ask us to delete it, unless we need to retain something for security, legal or dispute-handling reasons.

9. Your rights

Depending on the circumstances, UK data-protection law may give you the right to ask for a copy of your personal information, correct it, delete it, restrict or object to its use, or receive information you provided in a portable format. Where processing relies on consent, you may withdraw that consent at any time.

To make a request, email hello.bangs.show@gmail.com. We may need to verify that the request relates to you. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

10. Security and children

We use access controls, private server-side queries and other proportionate safeguards to protect personal information. No online service can guarantee absolute security, so please keep one-time sign-in codes private and only share the minimum information needed to transfer a ticket.

Bangs is for people aged 18 or over and is not directed at children.

11. Changes to this policy

We may update this policy when Bangs, its providers or the law changes. The date at the top shows when it was last updated. Material changes will be presented clearly where practical.

See also our Terms and conditions.