Privacy policy
Last updated 28 October 2026
Draft for review. These terms will be finalised before passes go on sale.
Who we are
[Company name] Ltd, a company registered in England and Wales (company number [number]), registered office [address] is the controller of your personal information. Contact: hello@cambridgecitypass.com. [ICO registration number: ZA…]
What we collect
- Booking details: your name, email address, the names on each pass and what you bought. Card details are handled by Stripe; we never see your full card number.
- Using your pass: where and when your pass is checked in, booking codes issued to you, and the places you mark as favourites.
- Location: while the app is open and you've allowed it, your phone's location. We use it to confirm you're at a venue when you check in (we store the distance from the entrance, not a trail of where you've been) and to show nearby Easter eggs.
- Emails: messages you send us.
Why we use it
- To sell you passes and let you use them (our contract with you).
- To pay venues for visits and prevent misuse of passes (our legitimate interests).
- To send booking confirmations and sign-in codes (contract). We'll only send marketing if you've opted in, and you can opt out any time.
Who we share it with
- Venues: a pass holder's first name, initial and a partly hidden pass code, to record visits and pay them.
- Our service providers, who process data for us: Stripe (payments), Supabase (database, hosted in the UK/EU), Resend (emails), Cloudflare (website hosting), MapTiler (maps) and Google Workspace (email).
- Where the law requires it.
How long we keep it
Booking and payment records for [6 years] for tax purposes. Check-in and location-derived records for [24 months]. You can ask us to delete your account sooner where we don't need to keep it.
Your rights
You can ask to see, correct or delete your information, object to how we use it, or ask us to restrict it. Email hello@cambridgecitypass.com. If you're not happy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.