Privacy notice
Who we are and how to contact us
Brighton Gigs (brightongigs.co.uk) is run by Susie Brown, under the name Brighton Gig Buddies. It is a non-commercial site. Susie is responsible for the personal information described here (the "controller" under UK data protection law).
For any question or request about your information, email hello@brightongigs.co.uk. We aim to reply within one month.
What we collect and why
We collect only what we need to run the site and the features you choose to use. We don't sell your information or use it for advertising.
| What you do | What we collect | Why |
|---|---|---|
| Create an account and sign in | Your email address, the display name you choose, and when you signed up and last signed in. We email you a one-time sign-in code. | To give you an account, sign you in, and show your name to friends in your groups. |
| Join or create groups; like, review or mark acts as attended on a festival page | The groups you belong to, and your likes, "attended" marks and reviews. | So you and your friends can share what you want to see and have seen. Only people who share a group with you can see them. |
| Use the "Get in touch" form | Your name, email address, the role you pick, and your message. | To read and reply to your message. The form emails it to us; the site itself keeps no copy. |
| Email hello@brightongigs.co.uk | Your email address and whatever you write. | To read and reply to your email. |
| Used one of our earlier festival pages (2026, before accounts) | The name you typed and your likes, kept with that festival's archive. | To keep a record of the group's picks. |
| Visit the site | Anonymous visit counts (pages viewed, referring site, country, browser type), with no cookies and no personal data. | To see how the site is used and improve it. |
| Visit the site | Your IP address and basic request details, briefly processed by our hosting provider. | To deliver the site and keep it secure. |
Content loaded from other sites. Some parts of our pages come directly from other companies, so your browser connects to them and they receive your IP address:
- Fonts are hosted on our own site, so no font provider receives your details.
- Gig images, from venue and ticketing websites, and festival act images from the festival's own website (hosted by Squarespace).
- Festival maps, from CARTO (map tiles) and unpkg (map software), on festival pages.
- Sign-in software, from jsDelivr, only when you use sign-in.
Our site limits what we pass on to these sites: they are told only that the request came from brightongigs.co.uk, not which page you were on.
Our legal reasons for using your information
UK data protection law requires a lawful basis for each use. Ours are:
| Use | Lawful basis |
|---|---|
| Your account, sign-in, groups, likes, "attended" marks and reviews | Contract: providing the service you signed up for. |
| Replying to messages from the form or email | Legitimate interests: responding to people who contact us. |
| Names and likes on earlier festival pages | Legitimate interests: keeping a record of the group's picks. |
| Anonymous visit counts | Legitimate interests: understanding and improving the site. No personal data is collected. |
| Hosting logs and security | Legitimate interests: delivering the site and protecting it from abuse. |
| Content loaded from other sites | Legitimate interests: displaying fonts, gig images and maps. |
Where we rely on legitimate interests, you have the right to object. See "Your rights" below.
Who we share it with
We use these services to run the site. They handle your information on our behalf, and only for these purposes.
| Service | What it does for us | Where the data is |
|---|---|---|
| Supabase | Stores accounts, groups, likes, "attended" marks and reviews; runs sign-in. | Our project's region is Frankfurt, Germany. Supabase is a US company; its data processing terms include the UK's international data transfer addendum. |
| Brevo | Sends the sign-in code emails and messages from the "Get in touch" form. | EU only (France, Germany and Belgium). |
| Cloudflare | Hosts the site; runs the "Get in touch" form (it passes your message on without keeping a copy); stores likes from earlier festival pages; forwards emails sent to hello@; counts visits. | Worldwide network. Cloudflare is a US company and relies on standard contractual clauses with the UK addendum. |
| Microsoft (Outlook.com) | Receives copies of emails sent to hello@, including messages from the "Get in touch" form. | Microsoft may store it outside the UK, including in the United States. |
| Google (Gmail) | Where emails sent to hello@ (including form messages) arrive, and the account we reply to you from. | Google may store it outside the UK, including in the United States. |
Content loaded from other sites (fonts, gig images, maps, sign-in software) is described above. Those companies receive your IP address but no account information.
International transfers. Some services store or process data outside the UK, including in the United States. Where they do, we rely on the safeguards each provider offers, such as the UK's international data transfer addendum to the EU standard contractual clauses.
How long we keep it
| Information | How long |
|---|---|
| Your account, name, groups, likes, "attended" marks and reviews | Until you delete your account. You can do this yourself any time: Account → Delete my account. Deletion is immediate and removes your profile, group memberships, likes, "attended" marks and reviews. If you owned a group, it passes to the next member. |
| Records of emails sent through Brevo (sign-in codes and "Get in touch" messages) | Held by Brevo. Deleted automatically after 1 month, the shortest period Brevo allows. We don't keep copies of the sign-in emails; form messages are kept in our inbox as below. |
| Messages from the form and emails to hello@ | Deleted 12 months after our last reply. |
| Names and likes on earlier festival pages | Kept with that festival's archive. Email us and we'll remove your name. |
| Anonymous visit counts | Contain no personal data. |
| Hosting logs | Kept by Cloudflare under its own retention rules. Cloudflare says these logs contain very limited personal data, mostly IP addresses. |
Cookies and browser storage
Brighton Gigs sets no cookies. A check of the homepage on 29 September 2026 found no cookies and nothing saved in the browser.
We do save a small amount in your browser's storage, only when you use these features:
- Staying signed in. If you sign in, your browser keeps a sign-in token so you stay signed in. This is essential to the feature you asked for. Signing out removes it.
- Festival pages. If you're in more than one group, your browser remembers which group you last picked on a festival page, on that device.
- Earlier festival pages. If you typed your name on one of our 2026 festival pages, your browser remembers it on that device.
- Joining a group. When you join a group from an invite link, your browser briefly keeps a note of the group you joined, and clears it once the festival page has read it.
Our visit counting uses Cloudflare Web Analytics, which uses no cookies or browser storage and doesn't track you across visits.
Your rights
You can ask us to:
- give you a copy of the information we hold about you;
- correct anything that's wrong (you can change your display name yourself in Account);
- delete your information (you can delete your account yourself in Account);
- limit how we use it, or give it to you in a portable format.
Your right to object. Where we use your information based on legitimate interests, you can object at any time, and we will stop unless we have a strong reason to continue.
To make a request, email hello@brightongigs.co.uk.
Complaints
If you're unhappy with how we've handled your information, please tell us first at hello@brightongigs.co.uk. We will acknowledge your complaint within 30 days and tell you what we're doing about it.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
Age
Accounts are for people aged 18 or over. If you believe a younger person has created an account, email hello@brightongigs.co.uk and we will delete it.
Changes to this notice
We will update this notice when what we collect or how we use it changes, and change the date at the top. This notice was last updated on 7 October 2026.