Privacy Policy

1. Who We Are

EventPod is operated by Pod Partners Limited, a company registered in England and Wales. We are registered with the UK Information Commissioner's Office (ICO) under registration number ZC098468.

For the purposes of UK data protection law:

• Pod Partners Limited acts as a Data Controller for host accounts and website users.
• Pod Partners Limited acts as a Data Processor when processing ticket buyer data on behalf of event hosts.

If you have questions about this Privacy Policy, please send a message from the Support page.

2. Scope of This Policy

This Privacy Policy explains how we collect, use, and protect personal data when:

• Event hosts create and manage events
• Customers purchase tickets
• Tickets are scanned at events
• You visit www.eventpod.net

We comply with UK GDPR, the Data Protection Act 2018 and PECR.

3. Personal Data We Collect

Event Hosts

• Name
• Email address
• Business or venue name
• Phone number (if provided)
• Login credentials
• Stripe account ID
• IP address and device information

Ticket Buyers

• Name
• Email address
• Ticket type and event attended
• Order reference
• Check-in status
• IP address

We do not collect or store payment card details.

Website Visitors

• IP address
• Browser type and version
• Pages visited
• Referring website

4. How We Use Personal Data

Contractual Necessity

• Provide access to the EventPod platform
• Create and manage events
• Issue QR code tickets
• Enable event check-in
• Provide customer support
• Process payments via Stripe

Legitimate Interests

• Fraud prevention
• System security
• Platform improvement
• Internal analytics

Legal Obligations

• Tax and accounting compliance
• Regulatory requirements

5. Payments and Stripe Checkout

Payments are processed securely via Stripe Checkout. When purchasing a ticket, you are redirected to Stripe's secure payment page.

Stripe acts as an independent Data Controller for payment information and may collect:

• Payment card details
• Billing address
• Fraud prevention data
• Device and cookie data

EventPod does not store card numbers or CVV codes. You can view Stripe's privacy policy at stripe.com/privacy.

6. Cookies and Consent

EventPod uses cookies for essential functionality, login sessions, payment processing, and analytics (where consent is given).

We use CookieHub to manage cookie consent in compliance with UK GDPR and PECR. You may change your preferences at any time via the "Cookie Settings" link on our website.

Please see our Cookie Policy for full details.

7. Data Sharing

We do not sell personal data.

We may share data with:

• Stripe (payment processing)
• Cloud hosting providers (e.g. Microsoft Azure)
• Email delivery providers
• Analytics providers (where consent applies)
• Professional advisers
• Regulatory authorities (where required)

8. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or UK International Data Transfer Agreements.

9. Data Retention

• Host data: retained while account is active
• Ticket records: retained up to 6 years for tax purposes
• Support communications: retained as necessary

10. Data Security

We implement appropriate technical and organisational measures including encrypted HTTPS, secure hosting infrastructure, access controls and system monitoring.

11. Event Hosts as Data Controllers

When a customer purchases a ticket, the event host is the Data Controller of attendee data. EventPod acts as a Data Processor on their behalf.

12. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction
• Request erasure
• Restrict or object to processing
• Request data portability
• Lodge a complaint with the ICO

To request this please send a message from the Support page.

13. Children's Data

EventPod is intended for use by hosts and adults purchasing tickets. We do not knowingly collect data from children under 13.