Privacy notice
What we do with your personal data, why we're allowed to, and how to make us stop.
In effect from 13 August 2026.
Who we are
GigPlan is a service operated by Jadd Al-Khabbaz, a sole trader trading as GigPlan, at 166 Banks Rd, West Kirby, Wirral CH48 0RH. We are the data controller for the personal data described here.
For anything in this notice — a copy of your data, a correction, a deletion, or a complaint — email gigplan@gigplan.co.uk. We aim to reply within a few days and must reply within one month.
If you run a venue
When you sign up we hold your name, email address, and optionally your phone number; your venue's name, its public page address, and optionally its postcode; the dates you publish, the applications you receive, the bookings you confirm and the fees you agree; and any private notes or star ratings you record about an act.
We hold this to provide the service you signed up for — that is a contract lawful basis. Billing records are kept because tax law requires it (a legal obligation).
If you give us a postcode, we send just that postcode to postcodes.io to turn it into an approximate map position. That position is what lets us invite acts who play near you. Leaving the postcode blank is always allowed; it only limits who a paid invitation can reach.
You are the controller of the applications your venue receives. Once an act applies to you, their details are yours to use for booking that gig — and yours to look after.
If you're a performer
You never make an account with us. When you apply for a gig we hold the email address, act name, contact phone number, act type, asking price and link you typed into the form, plus anything you later add on your own status page (a short description of what you do, your gig type). We hold the applications you send, the bookings that result, and the out-of-five ratings venues give you after a gig.
Ratings are always visible to you on your own status page. We do not hold any review or score about you that you cannot see.
The lawful basis is contract: you applied for a gig, and we cannot pass your application to the venue without these details.
If we emailed you an invitation you didn't ask for
A venue can pay us a one-off fee to invite acts to apply for a specific date. If you got one of those, you did not give us your details directly, so here is where they came from: you previously applied for, or played, a pub gig booked through GigPlan at a venue within about 20 miles of the one that invited you, or at that venue itself. We used your email address, your act name, the type of act you are, and which venues you have played to decide to invite you.
The lawful basis is legitimate interests— ours and the venue's in filling a date, and yours in hearing about paid work near you. We think that's a fair balance, and you get to disagree: every invitation carries a one-click unsubscribe, and you can also use it before you get another one.
The venue never sees a list of who was invited, and cannot browse or search for you. The invitation email is the only thing that comes out of the matching.
Unsubscribing stops invitations only. Emails about gigs you apply for yourself — whether you got it, and any changes — keep coming, because they are not marketing and switching them off would mean you never hear back.
Who else sees your data
We do not sell personal data and we do not use it for advertising. We use these providers to run the service:
| Provider | What for | Where |
|---|---|---|
| Neon | Postgres database hosting — where venue, gig and applicant records live | EU/UK region |
| Vercel | Website and application hosting; server logs | USA (UK IDTA / EU SCCs) |
| Resend | Sending sign-in links, booking confirmations, declines and invitations | USA (UK IDTA / EU SCCs) |
| Stripe | Subscription and one-off payments. Stripe collects your card details directly — we never see or store them | USA (UK IDTA / EU SCCs) |
| Optional 'Sign in with Google' for venue accounts | USA (UK IDTA / EU SCCs) | |
| postcodes.io | Converting a venue postcode into an approximate map position, so nearby acts can be invited. Only the postcode is sent | UK |
Where a provider is outside the UK, the transfer is covered by the UK's International Data Transfer Addendum or equivalent standard contractual clauses.
We will also disclose data if the law requires it — a court order, or a lawful request from a regulator.
Cookies
We set one kind of cookie: the one that keeps a venue signed in, plus the short-lived cookies that make the sign-in itself work. They are strictly necessary for a service you asked for, so we do not ask for consent to them and there is no cookie banner to click through.
We run no analytics, no advertising pixels and no third-party trackers. Nothing follows you off this site. Performers are never given a cookie at all — the link in your email is what identifies you.
How long we keep it
Venue accounts and their gig history: for as long as the account exists, and 12 months after it is closed, so a reopened account still has its calendar. Billing and tax records: six years, as HMRC requires.
Performer records: while your applications remain relevant to a venue you have dealt with, and for 24 months after your last application. An unsubscribe is kept indefinitely — that is the only way to guarantee we don't email you again.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to us processing it, and ask for it in a portable format. Where we rely on legitimate interests — the invitation emails — you can object outright and we must stop.
Email gigplan@gigplan.co.uk and we will act on it. You do not need to give a reason, and it is free.
If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk, or call 0303 123 1113. We would rather you told us first so we can fix it.
Payment details
We never see your card. Card details are collected on Stripe's own hosted checkout page and stay with Stripe; all we store is a customer reference, your plan status and when the current period ends.
Changes
If we change this notice materially we will say so on this page and, for venues, by email before it takes effect. See also our terms and refunds and cancellation policy.