1
11632441.2
GIGPIG
PRIVACY AND COOKIE NOTICE
(Last updated October 2023)
1. INTRODUCTION
Who are we?
GigPig Ltd (“GigPig”, “we”, “us”, and “our”) is a company incorporated in
the United Kingdom with company number 13994282 and registered
address Unit 22 Field Farm Business Centre, Launton, Bicester, United
Kingdom, OX26 5EL. Where we decide the means or purpose of
processing personal data, we are the "controller."
What’s this notice about?
This notice covers processing activities relating to the following:
● our website https://gigpig.uk (the “Website”); and
● any services provided via the Website, including enabling venues
and bookers to discover and book artists for gigs, and giving
artists a platform to find, play and get paid for gigs (the “Platform
Services”)
(together, the “Platform”).
We process the following individuals’ personal data in relation to the
Platform:
● artists who feature on the Platform, or who have registered an
interest in featuring on the Platform (the “Artists”); and
● the employees, contractors or other personnel of venues who
feature on the Platform, or who have registered an interest in
featuring on the Platform (the “Venue Personnel” and “Venues”
respectively),
The Platform allows:
● Artists to use our Platform to create a profile and accept bookings;
and
● Venues to use our Platform to create a profile in order to discover
Artists available for bookings and manage bookings.
We update this notice from time to time so please check back in.
How do you contact us?
(if you have questions about this
notice or to exercise your rights)
Write to us at: [email protected]
If we can’t resolve your issue, you can also get in touch with the Information
Commissioner’s Office: https://ico.org.uk/concerns
(or if you live in a European country [email protected] than the UK,
you can submit a complaint to the supervisory authority in your country).
2. HOW WE USE PERSONAL DATA
Personal data
How we use it
Sources and recipients
Enquiry and Message Data
Purpose of Processing and Legal basis
Sources
2
11632441.2
We collect the following
categories of personal data in
relation to Artists and Venue
Personnel:
● name;
● contact details;
● other personal data sent
as part of enquiries; and
● logs of service messages
sent by Gigpig to Artists
and Venues*.
*Note: Artists and Venues are
not able to respond to such
messages in-Platform.
We process this information to respond to
enquiries relating to the Platform, and to
record the messages broadcast to
Venues and Artists.
We process this personal data using the
following legal bases:
● in accordance with the terms of our
contract with Artists or to take steps
at their request prior to entering into
a contract with them, where we
need this information to provide the
Platform; and/or
● to pursue our legitimate interests of
responding to Artist and Venue
requests and questions,
broadcasting service messages to
Artists and Venues, understanding
how Artists and Venues use the
Platform and of improving our
Platform.
We collect this information
directly from the relevant Artist
or Venue Personnel.
Recipients
We send service messages to
Artists and Venues via a third
party tool, Intercom.
Venue Personnel Data
Purpose of Processing and Legal basis
Sources
We collect the following
categories of personal data in
relation to Venue Personnel:
● names;
● email address;
● mobile phone number;
and
● Venue they are
associated with, and
whether such Venue has
been brought to the
Platform via, or used in
connection with, one of
our Platform Partners.
We process this information to onboard
Venue Personnel onto the Platform,
provide them with access to the Platform
and provide the Platform Services.
We also process Venue Personnel Data
for the purpose of collaborating on the
provision of online booking services with
our Platform Partners (as defined in
Section 4 below).
For these processing activities, we rely
on our legitimate interests, being:
• to provide the Platform Services
to Venues, via their Venue
Personnel,
• improve our Platform for Artists
and Venues, including via our
collaboration with Platform
Partners (specifically, in
respect of the online booking
services provided by expanding
the Artists and Venues
available on the Platform) and
• developing our business.
We may collect this
information directly from the
relevant Venue Personnel (or
colleagues of the relevant
Venue Personnel).
We may also collect this
information from our Platform
Partners, in respect of Venue
Personnel working for Venues
which have been
uploaded/onboarded to the
Platform in connection with
our collaboration with our
Platform Partners.
Recipients
We share some of this
information with Stripe, Inc for
the purpose of them
managing our payments
processes.
We share some of this
information with Auth0, Inc for
the purpose of them providing
security login services.
We may share this
information with our Platform
Partners in connection with
our collaboration with our
Platform Partners on the
provision of online booking
services.
Artist Data
Purpose of Processing and Legal basis
Sources
3
11632441.2
We collect the following
categories of personal data:
● names;
● addresses;
● email address;
● mobile phone number;
● links to social media
profile pages;
● location information
(using the Artist’s
postcode data);
● photographs;
● videos of the Artist’s
work;
● information on the Artist’s
work such as the genre,
type and style of their
music;
● whether an Artist has
been brought to the
Platform via, or used in
connection with, one of
our Platform Partners.
We process this information to upload
and onboard Artists onto the Platform,
provide them with access to the Platform
and provide the Platform Services.
We also process Artist Data for the
purpose of collaborating on the provision
of online booking services with our
Platform Partners.
Where the Artist is an individual, we
undertake certain of these processing
activities on the legal basis of
performance of the terms of our contract
with the relevant Artist, or to take steps
at the request of the relevant Artist prior
to entering into a contract with them, as
described in further detail at
https://gigpig.uk/legal/gigpig_terms_artis
ts.pdf.
Otherwise, we rely on our legitimate
interests, being:
• to provide the Platform
Services to Artists;
• improve our Platform for Artists
and Venues, including via our
collaboration with Platform
Partners (specifically, in
respect of the online booking
services provided by expanding
the Artists and Venues
available on the Platform); and
• developing our business.
We may collect this
information directly from the
relevant Artist, their agent or
other representative and
publicly accessible sources
(such as social media
platforms).
We may also collect this
information from our Platform
Partners, in respect of Artists
which have been
uploaded/onboarded to the
Platform in connection with
our collaboration with our
Platform Partrners.
Recipients
We share some of this
information with Stripe, Inc for
the purpose of them
managing our payments as
our payment providers.
We share some of this
information with Auth0, Inc for
the purpose of them providing
security login services.
We may share this
information with our Platform
Partners in connection with
our collaboration with our
Platform Partners on the
provision of online booking
services.
Analytics Data
Purpose of Processing and Legal basis
Sources
We collect the following
categories of personal data in
relation to Venue Personnel
and Artists:
● IP address;
● browser type and version;
● time-zone preferences;
● device make, operating
system and settings;
● clickstream to, through
and from our Platform;
● page response times;
● errors;
● scrolling, clicks
and mouse-overs data;
● methods used to leave
the Platform;
● pages visited;
● length of visits to the
Platform; and
● whether they have
previously logged in to the
Platform.
We process this information to
understand use of, engagement and
interaction with our Platform, to conduct
retargeted advertisements through third
party platforms, and to help us improve
and maintain our Platform and address
bugs.
We also process information regarding
previous log-ins to the Platform in order
to facilitate Artists and Venue Personnel
logging in to the Platform and avoid the
requirement to re-input login details each
time the Platform is accessed.
We process this personal data using the
legal basis of the Artist’s or Venue
Personnel’s consent.
Consent can be withdrawn at any time,
by emailing: [email protected].
We collect this information
using cookies and similar
technology, provided by
Google, Crazy Egg and Auth0
povided by Okta..
Recipients
We may use Platform such as
Google Ads (Google LLC),
Twitter Inc and Facebook
(Meta Platforms, Inc) to
provide retargeted
advertisements,
indirectly through their
platforms.
More information
You can find out more about
how Google uses data by
clicking here. Artists or Venue
Personnel can withdraw their
consent for Google Analytics
by using the following link:
Google Analytics.
You can find out more
information about how Crazy
4
11632441.2
Egg uses personal data by
clicking here.
We use Auth0, provided by
Okta, and Artists and Venue
Personnel can access their
privacy notice here.
3. COOKIES, ANALYTICS AND SIMILAR TECHNOLOGIES
Cookies, pixels and other technologies store and access data on devices to help websites and apps work. This
table explains their purpose, how long they last, and who else can access their data. We get consent to use
them unless they’re essential to the Platform.
Most browsers allow control over cookies, for more information: Google Chrome | Microsoft Edge | Mozilla
Firefox | Microsoft Internet Explorer | Opera | Apple Safari.
Cookie/data
Duration
Purpose
Access
The following third parties may have
access to the information collected
using their technology
_ga
2 years
Used to distinguish between
Artists and Venue Personnel
anonymously.
We use Google Analytics, and Artists
and Venue Personnel can access
their privacy notice here.
_gid
24 hours
Used to distinguish between
Artists and Venue Personnel
anonymously.
We use Google Analytics, and Artists
and Venue Personnel can access
their privacy notice here.
_ga_2243145
03
-1
2 years
Used to persist session state.
We use Google Analytics, and Artists
and Venue Personnel can access
their privacy notice here.
_gac_gb_
224314503-1
90 days
Contains campaign related
information. If an Artist or Venue
Personnel has linked their
Google Analytics and Google
Ads accounts, Google Ads
website conversion tags will
read this cookie unless they
opt-out.
We use Google Analytics, and Artists
and Venue Personnel can access
their privacy notice here.
_ce.s
5 years
Records anonymous usage
activity on the Platform to help
define common user patterns to
improve functionality and
content development in the
future.
We use Crazy Egg, and Artists and
Venue Personnel can access their
privacy notice here.
auth0.[unique]
.i
s.authenticate
d.
5 minutes
Used to persist logins to the
Platform.
We use Auth0, provided by Okta, and
Artists and Venue Personnel can
access their privacy notice here.
5
11632441.2
4. DATA RETENTION, TRANSFERS AND DISCLOSURE
How long do we
keep
personal data?
We will only keep personal data for as long as it is necessary to do so. Specifically:
● We will only retain Artist Data, Venue Personnel Data and Analytics Data for
two years from the last time the Artist or Venue Personnel logged in to our
Platform, unless some data is necessary to be retained in order for us to
comply with our legal
obligations.
● We will only retain Marketing Data until the Artist or Venue Personnel has
opted-out of marketing communications.
Transfers
The personal data described in this notice is generally stored in the UK or European
Economic Area. Where we use data processors outside the UK and European
Economic Area, and transfer personal data to a country which the European
Commission or the
Information Commissioner’s Office in the UK (the “ICO”) has found does not provide
an adequate level of protection, we use contracts approved by the European
Commission or the ICO which give personal data protection similar to that which it has
in Europe and the UK (as applicable).
For more information drop us a line using the contact details at the start of this notice.
Disclosure
Other than as set out above, we may disclose personal data described in this notice:
● Where required by law, government, competent authorities or the courts or to
establish, exercise or defend our legal rights, and for the purposes of preventing
crime and fraud (for example, we may share personal data with our professional
advisors, investigators, or credit reference agencies). We do this on the legal
basis of our legal obligation.
● With suppliers and subcontractors, as necessary for the purposes set out in this
notice. WE do this on the legal basis of our legitimate interests in engaging
suppliers and subcontractors to assist our provision of the Platform or Platform
Services, or as set out elsewhere in this notice.
● With our Platform Partners, which includes the following Genre Music Limited,
whose Privacy Policy can be accessed here: [insert]. We do this on the legal basis
of our legitimate interest in improving and expanding the Platform and Platfrom
Services through collaboration with such Platform partners.
●
● If involved in an investment, merger, acquisition, or sale of our organisation or
assets, personal data we hold may be shared on the basis of the legitimate
interests of us, our shareholders, customers and other parties to a transaction,
unless those interests are outweighed by prejudicial impacts upon the Artist or
Venue Personnel (as applicable).
5. DATA SUBJECT RIGHTS
The right to
rectification
Artists and Venue Personnel have the right to request a copy of the personal data
we hold about them and to have any inaccuracies corrected.
We will use reasonable efforts to the extent required by law to supply, correct
or delete personal data held about Artists and Venue Personnel on our files
(and with any third parties to whom it has been disclosed to).
The right to object
Artists and Venue Personnel can ask us to restrict, stop processing, or to delete their
personal data if:
● they consented to our processing the personal data, and have withdrawn that
consent;
● we no longer need to process that personal data for the reason it was collected;
● we are processing that personal data because it is in the public interest or it is
in order to pursue a legitimate interest of ours or of a third party, they don’t
agree with that processing and there is no overriding legitimate interest for us
to continue processing it;
● the personal data was unlawfully processed;
6
11632441.2
● they need the personal data to be deleted in order to comply with legal
obligations; or
● the personal data is processed in relation to the offer of a service to a child.
The right to data
portability
Artists and Venue Personnel have a right to obtain a machine-readable coy of their
personal data, which they can use with another service provider.
If we are processing data in order to perform our obligations to Artists or Venue
Personnel, or because they consented, or if that processing is carried out by
automated means, we will help them to move, copy or transfer their personal data to
other IT systems.
If Artists or Venue Personnel request, we will supply them with the relevant
personal data in a commonly used, machine-readable and interoperable
format. Where it is technically feasible, they can ask us to send this Information
directly to another IT system provider if they prefer.
The right to make a
complaint to a
supervisory authority
If Artists and Venue Personnel are unhappy with the way we are processing their
personal data, they can contact us using the contact details provided in this notice.
If Artists or Venue Personnel do not agree with the way we have processed
their personal data or responded to their concerns, an alternative is to submit
a complaint to a data protection supervisory authority. In the UK, this is the
Information Commissioner’s Office with whom we are registered:
https://ico.org.uk/concerns, or they can submit a complaint to the supervisory
authority in their country.
