Privacy Notice

1. Who we are

EVENTFLOWPRO ("EventFlow Pro", "we", "us") operates the EventFlow Pro event registration, ticketing and check-in service at eventflowpro.org. EVENTFLOWPRO is the data controller for the personal data described in this notice. Event organizers using EventFlow Pro are independent controllers of the attendee data they collect for their own events; we process that data on their behalf as part of providing the Service.

2. Personal data we collect

• Organizer account data — name, email address, organization name, contact phone, login credentials.
• Payout data — account holder name, contact email, bank name, routing and account numbers or PayPal email, country, and payout notes provided by organizers.
• Attendee registration data — first and last name, email, phone, optional date of birth, ticket quantity, answers to organizer custom questions, waiver acceptance and timestamp, check-in status and time.
• Order data — registration number, amount, currency, payment status and transaction reference. Card details are never collected or stored by us.
• Technical data — IP address, device and browser information, and usage and error telemetry.
• Support data — the content of messages you send us.

3. Why we use it and on what legal basis

• Providing the Service — creating accounts, publishing events, taking registrations, issuing tickets and enabling check-in. Legal basis: performance of a contract.
• Payments and payouts — processing ticket orders and remitting organizer payouts net of the platform fee. Legal basis: performance of a contract and legal obligation.
• Security and fraud prevention — protecting accounts and detecting abuse. Legal basis: legitimate interests.
• Support and service communications — answering enquiries and sending transactional emails such as ticket confirmations. Legal basis: performance of a contract.
• Product improvement — understanding how the Service is used. Legal basis: legitimate interests.
• Marketing — only where you have opted in. Legal basis: consent, which you can withdraw at any time.

4. Who we share it with

• Merchant of Record — Paddle.com, which handles the sale, payment processing, invoicing, tax compliance and refunds for all orders.
• Service providers and subprocessors — hosting, database, email delivery and error-monitoring providers acting on our instructions.
• Event organizers — attendee registration data is shared with the organizer of the event you registered for, so they can run the event and check you in.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect legal rights.

We do not sell personal data.

5. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

6. Retention

We keep organizer account and event data for as long as the account is active and for up to 12 months afterwards. Registration and order records are kept for up to 7 years where needed for tax and accounting obligations. Payout details are kept while needed to issue payouts and to meet financial record-keeping duties. Data no longer needed is deleted or anonymised.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. UK and EEA residents may also complain to their supervisory authority. Contact us at privacy@eventflowpro.org and we will respond within one month. Attendees should also contact the event organizer directly for data held by them.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls in our database so organizers can only reach their own event data, and restricted administrative access. No system is perfectly secure, but we work to protect your data and to notify you where required if something goes wrong.

9. Cookies

We use essential cookies and local storage to keep you signed in and to keep the Service secure; these cannot be turned off without breaking the Service. Our payment provider may set cookies necessary to complete checkout. We do not use advertising cookies. You can clear or block cookies in your browser settings.

10. Contact

EVENTFLOWPRO — privacy@eventflowpro.org.