Privacy
Privacy Notice
How Afroplug uses personal information when you browse events, create an account, buy tickets, organise events or promote them.
Who we are
The legal entity operating Afroplug has not yet been configured for production is responsible for the personal information described in this notice once the operating entity is verified and configured. Privacy enquiries can be sent to the privacy contact to be supplied by the client before production launch.
Information we use
Depending on how you use Afroplug, we may process account and profile information, contact details, event and ticket records, order and refund information, promoter attribution, check-in activity, support communications, payment-provider identifiers, device/security information, cookie preferences and legal-acceptance records.
Where information comes from
Most information comes directly from customers, organisers and promoters. Afroplug also receives transaction, payout, dispute and delivery status from service providers such as payment and email providers, and may generate security, audit and attribution records through normal platform use.
Why we use it and lawful bases
The final lawful-basis matrix requires client and solicitor approval. The current operational design anticipates contractual necessity for account, order and ticket fulfilment; legal obligation for records that must be retained for tax, accounting or regulatory reasons; legitimate interests for proportionate fraud prevention, security, service reliability and dispute handling; and consent where required for optional analytics or marketing technologies.
Payments and service providers
Payment card details are handled by Stripe and are not stored by Afroplug. Afroplug also relies on infrastructure and service providers for hosting, authentication/database services, transactional email and platform operations. The active provider register and international-transfer position must be verified against the client's production accounts before launch.
International transfers
Some providers may process personal data outside the UK. Where that happens, the operator must use an applicable UK transfer mechanism or other lawful safeguard and make the relevant information available to individuals.
Retention
Afroplug should retain information only for as long as needed for the purpose collected, including account operation, ticket fulfilment, fraud prevention, dispute handling, accounting, tax and other legal obligations. The production retention schedule is subject to client, accountant and solicitor approval.
Your rights
Depending on the circumstances and lawful basis, UK data protection law may give you rights including access, correction, erasure, restriction, objection and data portability. You may also withdraw consent where consent is the legal basis. Use the privacy contact to be supplied by the client before production launch to exercise a privacy right.
Marketing
Optional marketing must remain separate from essential transactional communications. The current release does not implement a marketing-preference backend or activate planned analytics/advertising integrations merely because configuration placeholders exist.
Automated decision-making and profiling
The reviewed Release 1 implementation does not intentionally make solely automated decisions that produce legal or similarly significant effects on customers. Promoter attribution and fraud/security controls should be reassessed if their use changes materially.
Children and age restrictions
The minimum account and purchase age, under-18 policy and parental-consent requirements have not yet been approved by the client. Event-specific age restrictions remain the organiser's responsibility subject to the final organiser terms and product rules.
Complaints
You can raise concerns with us first. You also have the right to complain to the UK Information Commissioner's Office (ICO).
Policy version: 2026-09-24. This operational draft must be reviewed against the client's final legal entity, lawful-basis matrix, processor contracts, age policy and retention schedule before production launch.
