Last updated [date]
Privacy notice
This notice explains what happens to the details you give us when you register for updates on merchstub.com. In short, we use them to tell you about MerchStub, and for nothing else.
Who we are
MerchStub is run by [MerchStub Ltd, a company registered in England and Wales, company number 00000000, registered office address]. We are the controller of your personal data. Our ICO registration number is [ZA000000].
For anything about your data, email privacy@merchstub.com.
What we collect
When you register, we collect:
- whether you're a band, a venue or a fan
- your name and email address
- your band or venue name and your town or city, if you choose to give them
- whether you ticked the box to hear about taking part in a pilot gig
- the date and time you registered
We don't ask for, and don't want, anything else.
How we use it, and why we're allowed to
| What we do | Lawful basis |
|---|---|
| Email you news about MerchStub, including when it's coming to your area | Your consent, given when you register |
| If you ticked the pilot box, contact you about running a pilot gig | Your consent, given by ticking the box |
| Use your role and town to decide where to launch first and what to tell you | Our legitimate interest in planning where to launch |
| Check the form was filled in by a person, not a bot (see Cloudflare Turnstile below) | Our legitimate interest in keeping the list free of spam |
We don't sell your details, and we don't pass them to bands, venues or advertisers. We don't use them for profiling or automated decisions.
Who else handles your data
We use a small number of service providers. They process data only on our instructions:
- Amazon Web Services hosts this site and receives and stores your registration, in its London (eu-west-2) region.
- Cloudflare Turnstile checks the form is being submitted by a person. To do that, Cloudflare processes technical information about your browser and device, such as your IP address. See Cloudflare's Turnstile privacy addendum.
- IONOS hosts our email, so it handles the update emails we send and any email you send us.
Some of these providers may process data outside the UK. When they do, they're covered by UK adequacy regulations or the UK International Data Transfer Addendum.
How long we keep it
We keep your details until you unsubscribe or ask us to delete them. If MerchStub doesn't launch, we'll delete the whole list. We'll also review the list once a year and delete anyone we haven't emailed in 24 months.
Cookies
This site doesn't set its own cookies or use analytics or advertising trackers. Our fonts are hosted on this site, so loading a page doesn't contact Google or any other font service. Cloudflare Turnstile may store information in your browser that it needs to tell people from bots. That is strictly necessary for the form to work, so it doesn't need consent.
Your rights
You can ask us to:
- tell you what we hold about you and send you a copy
- correct anything that's wrong
- delete your details
- stop using your details for something you've objected to
- stop emailing you. Every email has an unsubscribe link, or you can just reply and tell us
Email privacy@merchstub.com and we'll respond within one month. Withdrawing consent doesn't affect anything we did before you withdrew it.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this notice
If we change how we use your details, we'll update this page. If the change is significant, we'll email you before it takes effect.