Gigulous

Privacy Policy

Introduction

SUMMARY
This policy applies to any Stream London Limited digital assets, including Gigulous and Stream.
Stream London Limited ("we/us") refers to any assets owned by Stream London Limited namely:
  • Gigulous
  • Stream
When you use www.gigulous.com (“Gigulous”) you trust us with your information. By helping you understand our privacy practices we want to show that we are committed to keeping that trust. This privacy notice (together with our terms of use and any other documents referred to on it) describes how we collect and use personal information about you in accordance with data protection legislation. This privacy policy applies to any users who share information with us. The information you share with us, for example by ‘Signing Up,’ helps us make your user experience better - to deliver more relevant content, offers and ads. We want to be clear and informative to our users and to ensure that we provide the best service possible. It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you so that you are aware of how and why we are using such information.
Our Data Protection Principles
We will comply with data protection law. This says that the personal information we hold about you must be:
  • Used lawfully, fairly and in a transparent way.
  • Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
  • Relevant to the purposes we have told you about and limited only to those purposes.
  • Accurate and kept up to date.
  • Kept only as long as necessary for the purposes we have told you about.
  • Kept securely.
Data Controller

The data controller is Stream London Limited of Suite 1, Scotts Place, 24 Scotts Road, Bromley, Kent BR1 3QD. This means that we are responsible for deciding how we hold and use personal information about you.

Our nominated representative is David Hodson.

Our Data Protection Registration Number is: XXXXXXX

Last modified: 1/2/2020 Effective date: 1/2/2020

Data collection and use

SUMMARY
We have several legal bases for processing your personal data. In each case, we have chosen the least intrusive method for our users, anonymising data where possible in providing our service.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
1. Performance of a Contract
We may need to process your personal data in order to fulfil a contractual obligation with you. These may include but are not limited to the purchasing of tickets/merchandise from us.
2. Consent
Where we process your personal data for direct marketing, whether for the purpose of sending communications from us or from our business partners (third parties) (see here) it will be based on us having obtained valid opt-in consent from you to do so. You may remove your consent at any time.
3. Legitimate Interest
We may process user data on a non-identifiable basis to develop insight on the behaviour of our users, which helps us and our partners improve their marketing. You have the right to withdraw your consent at any time.

The information we collect

SUMMARY
In order to provide our service across our digital platforms, we collect data from our users. This may be in the form of data such as your band/music genre preferences, or personal data such as your email used to create your account. In each case, we process this data in the most sensitive manner possible.
1. Information You Provide
All of the information you provide helps ensure that we can tailor our services just for you and make them as enjoyable as possible. This includes but is not limited to when you:
  • When you create or update your Gigulous account and include your name, email, gender, DOB, favourite bands and artistes and password.
2. Information Created
In order for us to maximise your experience with us, we collect some information when you use our services. This includes:
  • Log Information
    • In order to optimise your experience with us, we may use the internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, your location, time zone setting, browser plug-in types and versions, operating system and platform.
  • Usage and Preference Information
    • To help improve our service we may collect usage and preference information including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) on social interactions with other registered users, and methods used to browse away from the page and any phone number used to call our telephone numbers.
  • Electronic Communications and Calls
    • Electronic communications may include but are not limited to email, SMS (text message), facebook messenger and similar internet-based messenger services.

How we use your information

SUMMARY
We use the information we collect to provide our services, such as concert reminders, venue information, ticketing information and merchandising. It’s this data that allows us to personalise your digital experience.
We use the information collected for the following purposes:

1. Providing Services and Features
We use the information collected to ensure that our users get the best possible service from our products and features. This may include using the information to:
  • Keeping you up to date with relevant gig/venue news and offers (where you have consented for us to contact you about such); and
  • Make your experience with us more enjoyable by personalising ads that you see on our site.
2. Research and Development
In order for us to keep improving the service we provide we may use the information collected for testing, research, analysis and product development. This is to allow us to do the following:
  • To improve our site to ensure that content is presented in the most effective manner for you and for your device(s);
  • To allow you to participate in interactive features of our service when you choose to do so;
  • To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
  • To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them;
  • To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  • To detect that no fraudulent activity is made by you; and
  • To help keep our site safe and secure.
3. Communications from Us
We may use the information we collect to communicate with you via your consented forms of communication. This may include us doing the following:
  • Information about you provided to us by you;
  • Updating you with our new products and services;
  • Contacting you with regards to gig/venue offers;
  • Keeping you up to date with the latest live music news; and
  • Promoting competitions, we offer.
Change of Purpose

We will only use your personal information for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Automated Decision-Making

Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We are allowed to use automated decision-making in the following circumstances:

  • Where we have notified you of the decision and given you 21 days to request a reconsideration.
  • Where it is necessary to perform the contract with you and appropriate measures are in place to safeguard your rights.
  • In limited circumstances, with your explicit written consent and where appropriate measures are in place to safeguard your rights.

If we make an automated decision on the basis of any particularly sensitive personal information, we must have either your explicit written consent or it must be justified in the public interest, and we must also put in place appropriate measures to safeguard your rights.

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless we have a lawful basis for doing so and we have notified you.

[We do not envisage that any decisions will be taken about you using automated means, however, we will notify you in writing if this position changes.]

Cookies and Third Party Technologies

SUMMARY
Cookies are used by us and our partners to allow us to authenticate users, remember their preferences, monitor site performance and deliver more personalised advertising campaigns.

Cookies are small text files that are stored on your browser or device by websites, apps, online media, and advertisements. We use cookies and similar technologies for purposes such as:

  • Authenticating users
  • Remembering user preferences and settings
  • Determining the popularity of content
  • Delivering and measuring the effectiveness of advertising campaigns
  • Analysing site traffic and trends, and generally understanding the online behaviours and interests of people who interact with our services

We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs (software development kits), and other technologies to identify your device when you visit our site and use our services, as well as when you visit other online sites and services. For further information please see our cookie policy.

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless we have a lawful basis for doing so and we have notified you.

[We do not envisage that any decisions will be taken about you using automated means, however, we will notify you in writing if this position changes.]

Information Sharing And Disclosure

SUMMARY
We treat the information we collect from our users with the utmost care. Some of our products, services and features (planned) require that we share information with other users or at your request. You can withdraw this consent at any time.
1. With Your Consent

If you specifically consent to us doing so or it is necessary for us to fulfil a contract with you we may share your information with business partners, suppliers and subcontractors but only in accordance with consent from you. You may withdraw your consent at any time.

We partner with the following lists of suppliers and subcontractors, to provide you with information about future gigs and venue information. In some cases, they may process personal data, for example, to show results near you, or related to the genre of bands you like.

  • Band/Artistes management companies may include: List of names
  • Venue management companies and bookers may include: List of names
  • Publications may include: List of music press.

We also partner with the following performance, advertising and optimisation businesses to administer the services on our site. You find out more about how each manage their policies beneath, correct as of 22/01/2020.

  • Analytics, Optimisation & Personalisation - Hotjar, Optimize
  • Advertising & Behavioural - AdWords, Facebook, AppNexus,
     Lytics, Twitter, Bing Ads, Eyeota, Oracle, Outbrain
  • Community & Discussion - Tawk, Zendesk, Disqus
  • Communication Platforms - Twilio, Messagebird, Mapp
2. With the General Public When You Submit Content to a Public Forum

We love hearing from our users - including through public forums such as the comments sections on our site, social media, and certain upload features on our network. When you communicate with us through those channels, your communications may be viewable by the public.

For Legal Reasons or in the Event of a Dispute
  • We may share your information if we believe it is required by applicable law, regulation, operating agreement, legal process or governmental request. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
  • In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.

Information Retention and Deletion

SUMMARY
We adhere to a strict retention policy after which we will no longer process your data.

We retain your information while your Gigulous account remains active unless you ask us to delete your information or your account. We deem an account to be active if there has been any engagement by the user within a 4 year window +90 days to attempt to re-engage a user. After this period any personally identifiable information is deleted or anonymised.

If you would like us to delete or anonymise your information then please email noreply@gigulous.com

Storage of Your Data

The data that we collect from you will normally be transferred to, and stored at, a destination inside the European Economic Area ("EEA") but sometimes it is transferred outside of EEA and where we do so, we take steps to ensure the protection of data including the use of the EU/US privacy shield scheme. It may also be processed by staff operating inside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Data Security

We have put in place measures to protect the security of your information.

Third parties will only process your personal information on our instructions and where they have agreed to treat the information confidentially and to keep it secure.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who need to know such information. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Choice and Transparency

SUMMARY
By using our service or features, you do not forfeit any rights. We make it easy for our users to withdraw their consent at any time too.
1. Your Rights

You have the right to ask us not to process your personal data for marketing purposes by withdrawing consent to do so. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at noreply@gigulous.com.

2. Privacy Settings

We are committed to giving you choice and transparency. If you want to amend your privacy preferences you can access your privacy settings in the Gigulous preference centre here where you have the ability to update your current preferences for how your information is used and shared.

3. Marketing Consent

To either opt-in or opt-out from the different forms of marketing which includes the different forms of electronic marketing (email, SMS (text message), and other forms of internet-based communication) and phone calls from us or from our listed partners then you can change your preferences in the preference centre or you can contact us at noreply@gigulous.com.

4. Accessing and Correcting Your Information

We will always give you the right to access information held about you. Your right of access can be exercised in accordance with the General Data Protection Regulation.

The subject access request form can be found here. Any access request is free of charge although you must provide us with two forms of approved identification in order for us to verify your identity.

If you believe any of your information we hold is incorrect you may edit the name, phone number, email, VRM and postcode associated with your account here.

Under certain circumstances, by law, you have the right to:

  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing.
  • Request the transfer of your personal information to another party.

Both can be actioned by contacting noreply@gigulous.com.

Updates to our privacy policy

SUMMARY
We may occasionally update this policy. If you use our services after an update, you consent to the updated policy.

We will always keep you in the know, so any updates we make to our privacy policy in the future will be posted on this page and, where appropriate, we will notify you by email. Please check back frequently to see any updates or changes to our privacy policy. This policy was last updated on 01/02/2020.

Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to noreply@gigulous.com.

You have the right to make a complaint at any time to the Information Commissioner's Office (“ICO”), the UK supervisory authority for data protection issues. You can contact the ICO here.