United Kingdom Privacy Policy for Gighead Users

1. ABOUT US

1.1 RUNEBYTE LTD is a company registered in England and Wales. These privacy policy terms are issued by RUNEBYTE LTD so when we mention Gighead, we, us or our in this privacy policy, we are referring to RUNEBYTE LTD.

1.2. We provide a platform for viewing, entering, and managing content for live music events (or "gigs"). We do not sell tickets or facilitate ticket transactions of any kind.

2. OVERVIEW

2.1. For the purpose of the EU General Data Protection Regulation (the "GDPR") (and any other applicable UK laws, such as the UK GDPR), Gighead is the "Data Controller" where you are using the Gighead Platform.

2.2. This privacy policy explains how we use your personal information and other data we collect when you use the Gighead Platform.

3. THE BASIS FOR THE PROCESSING OF YOUR DATA

3.1. Gighead processes your data to allow you to use, and us to deliver our services to you on the Gighead Platform. These services are governed by our Terms of Use.

3.2. Some of your data will be processed based on Gighead's legitimate interests, including photographs and images of events that you upload and choose to make public, to allow us to successfully provide the gig content management experience on the Gighead Platform. Legitimate interest is also our lawful basis for processing in-app analytics data (except where your consent is required) so we can enhance and monitor app performance, account activity, and prevent fraudulent or other malicious activities. We also rely on our legitimate interest to collect your date of birth to ensure you are over 18 years of age as required by our Terms of Use.

3.3. We will ask for your consent if we need to share your data with third parties for any reason not mentioned in this privacy policy which isn't absolutely necessary for you to be able to use the Gighead Platform. We will also ask for your consent to access your device's camera for image uploads and to send you notifications.

3.4. We may ask for your consent in other cases where we process your data. You can revoke your consent at any time by contacting us at support@gighead.com. Please note that the withdrawal of consent will not affect the lawfulness of processing based on consent before the withdrawal.

4. COLLECTED INFORMATION

4.1. To help us manage your registration and provide our services, we will process and store all personal information you give when you register on the Gighead Platform, and any personal information which is generated when you navigate and use the Gighead Platform. We also use this information to analyse trends in your behaviour as this helps us to determine your preferences for music events and artists.

4.2. The types of personal information we collect may include:

• Contact details – including your name, email address, phone number, and date of birth;
• Location data – we may collect your IP address, and if you allow us to connect to your device's geolocation functionality, we may collect your GPS data. We will use the location data to improve personalised recommendations on the Gighead Platform on what events are taking place near you. You can turn off the App's ability to access your geolocation at any time through your device's general or privacy settings;
• Your images – when you upload images related to music events, we store these images according to your privacy settings (private, friends-only, or public). Public images may be viewed by all users of the Gighead Platform;
• Your preferences – we may collect information about gig content you have viewed, created, or shared, artists and venues you follow, and any feedback you may give;
• Gig attendance information – we collect information about gigs you have attended, which you may choose to keep private or share with friends or make publicly available;
• Friend connections – information about users you have added as friends and your sharing preferences with those friends;
• Your interactions with us – for example if you send us information via email, customer service communications or other methods, this may be stored on our systems; and
• Technical information – when you use the Gighead Platform, we automatically receive and record information on our server logs from your browser or mobile platform, including the location, IP address, cookie information and details about the page you requested. We also collect information regarding your use of the Gighead Platform, mobile device information and browser information.

5. COOKIES

5.1. Our website and our app use cookies to distinguish you from other users of our website and our app. This helps us to provide you with a good experience when you browse our website and when you use our app and allows us to improve our site. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your device (if you agree). Cookies contain information that is transferred to your device hard drive.

5.2. We use the following cookies on our website and/or our app:

1. Strictly necessary cookies. These are cookies that we require to operate our website and app. They include, for example, cookies that enable you to log into secure areas of our website and app. You can contact us at support@gighead.com for further information.
2. Analytical/performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website and app when they are using it. This helps us to improve the way our website and app works, for example, by ensuring that users are finding what they are looking for easily.
3. Preference Cookies. These cookies help us to customise and improve your experience. They are used to recognise important information about your preferences so we can personalise our content for you. Although they are not vital for our website to run, without them, certain functions of our website may not be available.

5.3. When you use our website for the first time you are given the opportunity to accept or decline cookies which are not strictly necessary. By using the tick boxes on the cookie banner, you are consenting to or declining our use of cookies by category as set out in this policy. You can also change your cookie consents at any time by accessing the cookie banner or by emailing us onsupport@gighead.com.

5.4 The cookies described above will be installed when you download the app. If you have any questions about them, you can contact us at support@gighead.com before downloading the app. You can change your cookie preferences at any time by contacting us atsupport@gighead.com.

5.5 You can delete all cookies that are already on your device by clearing the browsing history of your browser. This will remove all cookies from all websites you have visited.

5.6 Our use of cookies is proportionate in relation to our intended outcome and limited to what is necessary to achieve our purpose.

• Session cookies. These cookies allow us to recognise and link the actions of a user during a browsing session. They are temporary and expire at the end of a browser session, normally when you exit the browser.
• Persistent cookies. This category encompasses all cookies that are stored on a user's device in-between sessions. The persistent cookies we use normally expire after six months. If you require more information regarding the duration of a particular cookie used by us, please contact us on support@gighead.com.

6. USE OF YOUR PERSONAL INFORMATION

6.1. As well as the purposes described above at Clause 4.1, we use your personal information to:

• run the Gighead platform or any other purposes required in order to allow us to provide the Gighead Platform to you;
• communicate with you via email, SMS, in-App notifications and push notifications about the Gighead Platform and gig-related content;
• provide better content, services, and support to you. For example, we may need to use your information to administer your account or provide you with information about gigs and artists you have expressed interest in;
• enable the friends feature, allowing you to connect with other users and share gig information, attendance data, and images according to your privacy settings;
• manage your image uploads and privacy settings for those images;
• analyse usage patterns to improve the Gighead Platform and provide better recommendations for gigs and artists.

6.2. We also use information that we collect about you for operational purposes, including:

• to provide customer service, including to respond to your enquiries and answer any of your requests for information;
• carry out verification checks, including to verify your identity and to check that you meet the minimum age requirement of 18 years;
• to send you important information regarding our services, or other technical notices, updates, security alerts, and support and administrative messages; and
• as we believe to be necessary or appropriate under any applicable law, to enforce our rights or to respond to requests from law enforcement and any other government authorities.

6.3. As explained in Clause 3, we use your personal data on the following legal bases:

• your consent where applicable;
• as necessary to perform a contract that you have entered;
• in our legitimate interests, including to improve the performance of the Gighead Platform and in order to enhance your experience of the Gighead Platform; and/or
• to comply with a legal obligation.

6.4. Where we rely on your consent to process your personal data, you can withdraw your consent at any time by emailing us at support@gighead.com or in any other way explained in this privacy policy. If you withdraw your consent, this will not affect the lawfulness of any processing which took place before the withdrawal.

7. MARKETING

7.1. We may send you marketing communications via email and push notifications. On registration, we will ask you if you consent to receiving updates about what is going on at Gighead, which can include updates about new features, gig-related content, and more. You can choose to opt in to marketing communications and push notifications when registering on the Gighead Platform. If you change your mind about receiving any marketing emails from us, you can unsubscribe from emails by following the unsubscribe directions provided in the footer of each one. If you do not want to receive push notifications from us, you can opt out by changing the appropriate settings directly on your mobile device.

7.2. Where you opt out of receiving these marketing communications, we may still process your personal data for other required purposes, as explained in Clauses 5 and 6 above.

8. DISCLOSURE OF YOUR INFORMATION

8.1. We will not rent or sell your personal information to anyone without your explicit consent, but, so we can perform our part of our contract with you based on our Terms of Use and our legitimate interests, we may share your personal information in the ways described below:

Agents and suppliers – We employ other companies/individuals to perform functions on our behalf, for example our hosting providers and data analytics services providers. We do not share your personal information with our agents or suppliers except as is necessary to enable them to provide us with a service.

We may disclose your personal data to the following categories of third-party recipients:

Third Parties – We may integrate with other third party products and services such as Google, Facebook, and Spotify for login authentication purposes only. We do not share your personal information with them except as is necessary to enable these login features.

Other reasons – We may also share your personal information with a purchaser or potential purchaser of our business and in some circumstances, we may have to disclose your personal information by law, either because a court or the police or other law enforcement agency has asked us for it, to enforce our legal rights, or to prevent fraud.

8.2. We may also provide our partners with anonymous information about how users, collectively, use the App and website so that they can understand how often people use their services, the App and the website.

9. INFORMATION ABOUT OTHER INDIVIDUALS

9.1. If you give us information (including personal information) on behalf of someone else, you confirm that the other person has given you permission to act on their behalf and has agreed that you can:

• provide their personal information to us;
• receive on their behalf any data protection notices; and
• give consent to the transfer of their personal data abroad.

9.2. We will need to see proof of this consent, so will ask you to provide Gighead with the written authorisation from them or the document which demonstrates power to represent them. If these documents are not available, we will be able to accept any appropriate alternatives.

10. SECURITY AND INTERNATIONAL TRANSFERS OF DATA

10.1. We are committed to ensuring that your information will be treated confidentially and securely, and we have put in place appropriate measures to ensure the security of your personal data.

10.2. The personal data that we collect from you may be transferred to, and stored at, destinations outside the European Economic Area (EEA) where the laws on processing personal data may be less stringent than in your country. It may also be processed by staff operating outside the EEA who work for us or for one of our agents or suppliers.

10.3. When your personal data is transferred to parties located outside of the EEA we will assess and take appropriate measures to ensure these third parties provide adequate security of such personal data and respect your rights to privacy. These safeguards are intended to ensure a similar degree of protection to your data wherever it may be transferred.

If you would like any more information on the safeguards used, feel free to contact us atsupport@gighead.com.

11. DATA RETENTION

11.1. We may hold on to your personal data for as long as we need to for the purposes for which it is processed or as is otherwise required by applicable law. If you terminate your account on the App and/or website, stop using the Gighead Platform, or our agreement with you under the Terms of Use is terminated, we will delete your information as it is no longer relevant, but we might need to continue to process your personal data as required under applicable law, in order to establish, exercise or defend legal claims where relevant.

11.2. We calculate the appropriate retention period for your data by considering the nature and sensitivity of the data, the purposes for which we are processing the data, and any applicable statutory retention periods. Using these criteria, we regularly review the personal data which we hold and the purposes for which it is held and processed. Once processing has been completed, we may securely delete or anonymise your personal data.

11.3. We may delete your account or specific information before deactivating your account if we believe it may no longer be relevant. Gig attendance history and user content may be deleted after 6 years.

11.4. We will action your preference changes, such as friend sharing settings or privacy controls, normally within 7 business days.

If you would like any more information about our retention periods, please contact us atsupport@gighead.com.

12. YOUR RIGHTS

Under the GDPR and any equivalent rules in the UK, you are entitled to certain rights relating to our handling of your personal data, as described below.

12.1. You can request details of the personal information that we hold about you under data protection laws. If you would like a copy of the information held about you please write to us atsupport@gighead.com.

12.2. If you think any information we have about you is incorrect or incomplete, please write to us atsupport@gighead.com as soon as possible. We will correct or update any information as soon as we can.

12.3. You have the right to erasure of your data, as well as a right to deactivate your account. We are not required to delete any information needed to establish, exercise or defend against legal claims, or that we need to retain in order to comply with the law.

12.4. You have the right of restriction of processing, where your data is wrongfully processed but should not be erased for a reason listed in Article 18 (1) of the GDPR.

12.5. You may exercise your right of data portability by obtaining your data, including your gig attendance history, uploaded images, and account information. You can request a data export by writing to us at support@gighead.com.

If you would like to exercise these rights, please write to us atsupport@gighead.com.

13. CONTACT AND COMPLAINTS

If you have any complaints about how we handle your personal information, please contact us atsupport@gighead.com. If we are unable to resolve your complaint and you wish to take your complaint further, you can do so by contacting the UK Information Commissioner's Office.