Event Play

Privacy Policy

Last updated: 1 June 2026

This notice explains how we handle personal data in connection with this public marketing and company website (eventplay.app). It does not cover the Event Play app or any pilot, which have a separate privacy notice provided when you use them.

1. Who we are (controller)

This website (eventplay.app) is operated by Event Play Ltd, the data controller, a company registered in England and Wales (company number 17249506). Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

Privacy contact: privacy@eventplay.app. General contact: info@eventplay.app.

2. Scope of this notice

This notice applies to this marketing and company website only. The Event Play app and any pilot are governed by a separate privacy notice provided at the point of use (see section 11).

3. What data the website processes

Our general marketing and company pages (for example the home, organisers, legal, and contact pages) are static and informational: they offer no accounts, sign-up, waitlist, or contact form, and we do not collect personal data through forms on those pages.

There is one exception — the invited-guest email-collection page at /collect. If your event organiser sends you a collection link, that page lets you submit your own email address so the organiser can send you an official invitation. It collects: the email address you submit; the opaque collection token from your link together with limited technical request data (such as IP address) needed to process and secure the submission; and a Cloudflare Turnstile verification check (challenge response plus limited technical data) used only to prevent automated abuse (see section 5 and our Cookie Policy). Submitting your email does not create an account or grant access to any event — access follows a separate organiser approval and invitation step. How your submitted email is then used in the invited-guest flow is governed by the Event Play app and pilot privacy notice (section 11).

We may process technical and server logs — when you visit, our hosting provider may automatically process limited technical data (such as IP address, browser or user-agent, pages requested, and timestamps) to deliver the site securely and diagnose problems.

We may process email correspondence — if you choose to email us at info@eventplay.app or privacy@eventplay.app, we process the contents and your email address to respond.

We do not use analytics or advertising or tracking technologies on this website (see our Cookie Policy).

4. Why we process it (lawful bases — high level)

Delivering and securing the website, and responding to your enquiries: our legitimate interests in operating a secure website and communicating with people who contact us (and, where relevant, taking steps in relation to a possible future relationship).

Compliance with legal obligations where applicable. The final lawful-basis mapping is being confirmed in legal review.

5. Who we share it with (processors and hosting — high level)

Hosting and content delivery: our website is hosted on Vercel, which processes technical and log data on our behalf as a processor.

Email: our business email is handled by our email provider or providers as processor(s).

Bot protection on the email-collection page: the email-collection page uses Cloudflare Turnstile (provided by Cloudflare, Inc.) as a processor to tell genuine visitors from automated abuse. It processes a challenge response and limited technical data (such as IP address) for that security purpose only — not for analytics, advertising, or tracking.

We require appropriate data-processing terms with our processors. We do not sell personal data. Product-side processors that relate to the app or pilot are covered by the product privacy notice, not this website notice.

6. International transfers (high level)

Where a processor stores or processes data outside the UK or EEA, we rely on appropriate safeguards (such as UK or EU adequacy decisions or standard contractual clauses with the UK Addendum). Details are available on request. Specifics are being confirmed in legal review.

7. Retention (high level)

Server and hosting logs are retained only as long as needed for security and operation, then deleted or aggregated, in line with our hosting provider's defaults and our settings.

Email correspondence is retained as long as needed to handle your enquiry and for a reasonable period afterwards, then deleted. Concrete periods are being confirmed in legal review.

8. Your rights

Subject to UK GDPR, you have rights to access, rectification, erasure, restriction, objection, and portability, and the right not to be subject to solely automated decisions with legal or similarly significant effect (we do not carry out such decision-making on this website).

To exercise any right, contact privacy@eventplay.app. Please do not include sensitive information in your initial email.

9. Complaints

You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first via privacy@eventplay.app.

10. Cookies

See our Cookie Policy. This website uses only strictly necessary cookies, if any, and no analytics or advertising cookies.

11. The Event Play app and pilots

The Event Play app and any pilot are governed by a separate privacy notice provided at the point of use. This website notice does not describe product or guest-data processing. Event Play is currently in limited pilot and not generally available.

12. Changes

We may update this notice; the 'Last updated' date shows the latest version.