1. Who We Are
Bounce is an event ticketing platform. When we say "we", "us" or "Bounce", we mean the company operating this website. We're the data controller for the personal information we collect through this platform.
2. What We Collect
Here's a plain-English breakdown of the data we collect and why:
| Data |
Why We Need It |
| Name and email |
To create your account and send you important emails (ticket confirmations, password resets, etc.) |
| Password (hashed) |
To secure your account. We never store your actual password — only a one-way hash. |
| Google account info (if you use Google login) |
To authenticate you. We only get your name, email and profile picture. |
| Bank details (for hosts/promoters) |
To pay you. These are encrypted with a unique key per user and stored securely. |
| Payment info |
Processed by Stripe. We never see or store your card number. |
| Profile photo |
Optional. Stored on AWS S3. |
| Event data (if you're a host) |
To display your events on the platform. |
| Order and ticket data |
To manage your purchases, generate QR codes, and process refunds. |
3. How We Use Your Data
- To run the platform — account management, ticket purchases, payouts, event management.
- To send transactional emails — ticket confirmations, event reminders, password resets, refund notifications. These are not marketing and you'll always receive them.
- To send marketing emails — only if you've opted in (e.g. by following a host). You can switch off all marketing emails with one toggle in your profile settings.
- To improve the platform — we may use aggregated, anonymised data to understand how people use Bounce.
4. Who We Share Data With
- Stripe — processes payments. They have their own privacy policy.
- Brevo (Sendinblue) — sends emails on our behalf.
- AWS — stores uploaded images (profile photos, event covers).
- Google Analytics — receives anonymised usage data (page views, traffic sources). No personally identifiable information is shared.
- Event organisers — when you buy a ticket, the organiser sees your name and email so they can manage their event.
We don't sell your data to anyone. Ever.
5. Cookies & Analytics
We use cookies for:
- Authentication — keeping you logged in (essential, can't be disabled).
- Promoter referral tracking — if you click a referral link, we set a cookie to credit the promoter. This expires after 7 days.
- Google Analytics — to understand how people use Bounce (page views, traffic sources, etc.). IP addresses are anonymised. No advertising or retargeting.
We don't use advertising cookies. For the full list of cookies, see our Cookie Policy.
6. Your Rights (GDPR)
If you're in the UK or EU, you have the right to:
- Access your data — ask us for a copy of what we hold.
- Correct your data — update your profile anytime.
- Delete your data — request account deletion (we'll remove your personal data, though we may keep anonymised transaction records for legal/accounting reasons).
- Opt out of marketing — one toggle in your profile. Transactional emails (ticket confirmations, etc.) are not affected.
- Data portability — ask us for your data in a machine-readable format.
To exercise any of these rights, email us at hello@bounce.live.
7. Data Security
- Passwords are hashed with bcrypt (industry standard).
- Bank details are encrypted with a unique key per user using Fernet encryption.
- All connections use HTTPS/SSL.
- Session tokens are stored in httpOnly, secure cookies.
8. Data Retention
- Account data is kept as long as your account is active.
- If you delete your account, we remove personal data within 30 days.
- Transaction records may be kept for up to 7 years for legal and accounting purposes (anonymised where possible).
9. Children
Bounce is not intended for anyone under 16. We don't knowingly collect data from children.
10. Changes
We may update this policy. If we make significant changes, we'll notify you by email or through the platform.
11. Contact
Questions about your privacy? Email us at hello@bounce.live.