1. Who We Are
Brighton Tour operates food and drink experiences across Brighton, UK. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For any data-related enquiries, contact us at: hello@brightontour.co.uk
Brighton Tour LTD company number 17115295.
2. What Data We Collect
When you purchase a ticket or interact with our platform, we may collect:
- Name β to identify your booking
- Email address β to send your ticket and booking confirmation
- Phone number β optionally provided, for event communication
- Age range β optional, collected at checkout for demographic insights
- Gender β optional, collected at checkout for demographic insights
- Payment information β processed securely by Stripe; we do not store card details
- Marketing preferences β whether you've opted in to receive updates
- Scan timestamps β when your ticket QR code was validated at a venue
3. Why We Collect It (Legal Basis)
We process your data under the following lawful bases:
- Contract performance β to fulfil your ticket booking and provide access to the tour
- Legitimate interests β to improve our events, understand our audience, and detect fraud
- Consent β where you've opted in to receive marketing emails
- Legal obligation β where required to comply with applicable laws
4. How We Use Your Data
We use your data to:
- Send your ticket confirmation and QR code via email
- Provide access to our tours via ticket validation
- Share anonymised, aggregated statistics with partner venues (e.g. age range, gender, scan times β never your name or contact details)
- Send you marketing updates if you've opted in
- Improve our products and services
- Prevent fraud and misuse of our ticketing system
5. Data Sharing
We do not sell your personal data. We may share it with:
- Stripe β for secure payment processing
- Resend β our email delivery provider, used solely to send transactional emails
- Partner venues β only anonymised and aggregated data (never personal identifiers)
- Legal authorities β where required by law
6. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Ticket and booking records are retained for up to 3 years. You may request deletion at any time.
7. Cookies
Our website uses minimal cookies necessary for the site to function correctly (e.g. session management). We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings.
8. Your Rights
Under UK GDPR, you have the right to:
- Access β request a copy of the personal data we hold about you
- Rectification β ask us to correct inaccurate data
- Erasure β request deletion of your data
- Restriction β ask us to limit how we use your data
- Portability β receive your data in a machine-readable format
- Object β object to processing based on legitimate interests or for direct marketing
- Withdraw consent β at any time, where processing is based on consent
To exercise any of these rights, email us at hello@brightontour.co.uk. We will respond within 30 days.
9. Security
We use industry-standard security measures to protect your data, including encrypted data transmission (HTTPS), secure third-party payment processing via Stripe, and access controls on our systems.
10. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on this page. We will notify you of material changes by email where appropriate.
11. Contact & Complaints
If you have concerns about how we handle your data, please contact us first at hello@brightontour.co.uk.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk