Privacy Policy

When you buy a ticket: your name, email address and phone number if you give one, what you bought, and the amount paid. Card details go directly to our payment processor and never touch our servers.

When you use the site: which event pages you opened and whether you arrived from a shared link. We store a one-way hash of your IP address rather than the address itself, and we do not build advertising profiles or fingerprint your device.

When you check in: that your ticket was scanned, when, and at which entrance.

If you run events: your account details, your organization, and the payout information your bank and our payment processor require.

To sell you a ticket and get it to you; to let an organizer admit you at the door; to calculate and pay out what each party to an event is owed; to prevent fraud; and to meet our tax and accounting obligations.

This is the part most worth reading.

When you buy a ticket, the organizer of that event may receive your name and contact details, so they can tell you about door times, changes, and cancellations. Which parties receive them — the promoter, the venue, both, or neither — is set on the event before it goes on sale.

They receive them for that event only. An organizer never gets contacts from another organizer’s events, and consent to hear from a venue is not consent to hear from every promoter who books it. Every export an organizer makes is logged.

We do not sell your personal information. If that ever changes, we will say so here before it happens and give you a way to opt out first.

Transactional messages — your tickets, a refund, a change to an event you bought for — are part of the service and are always sent.

Marketing from an organizer requires your consent, recorded against that organizer. Every marketing message carries a way to stop it, and stopping it applies immediately and permanently to that organizer.

If you share an event link, we record that the link was created and opened so organizers can see what worked. We record the relationship between links, not the contents of your messages, and we have no access to your contacts unless you explicitly grant it.

We rely on a small number of processors: a payment processor for card payments and payouts, a database and hosting provider, and an email provider for ticket delivery. They act on our instructions and may not use your data for their own purposes.

Order and payment records are kept for as long as tax and accounting law requires, typically seven years. Contact records are kept until you ask us to delete them or the organizer’s permission is revoked. Analytics about shares and views are kept in aggregate.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to a particular use. If you are in California, that includes the right to know, the right to delete, and the right to opt out of sale — we do not sell personal information, but the right stands. If you are in the EEA or UK, the GDPR rights apply, including the right to complain to your supervisory authority.

Deleting your contact record does not delete an order we are required to keep for accounting, but it does remove you from every organizer’s reachable list.

Glendi is not intended for anyone under 16, and many events on it are 18+ or 21+. We do not knowingly collect data from children.

To exercise any of the above, or to ask how your data is being used, get in touch. We answer data requests within 30 days.