Skip to content

Privacy policy

Last updated 13 November 2026

This policy explains what personal data Bath Charity Hub ("we") collects, why, and what rights you have under UK GDPR. If you have any questions, please contact us.

What we collect

When you buy tickets

  • Your name and email address, so we can send your tickets and order confirmation.
  • Your order details: event, ticket types, quantities, amount paid and ticket check-in status.

Card payments are handled by Stripe. We never see or store your card number. Stripe's privacy policy explains how it handles payment data.

When a charity creates an account

  • Login email address and password (stored securely, never in readable form), or Google sign-in details.
  • Charity profile details: name, logo, description, charity number, website and contact details.
  • Payout setup is completed directly with Stripe. We only store the Stripe account reference and its status.

When you contact us or join our mailing list

  • Your name, email address and message, or just your email address for event updates.

Who receives your data

  • The charity running your event receives your name, email and ticket details so it can manage entry and contact you about the event.
  • Stripe processes payments and payouts.
  • Lovable hosts this website, its database and sign-in system, and sends our emails.
  • Google, only if a charity chooses to sign in with a Google account.
  • OpenStreetMap serves the maps on event pages. Loading a map sends your browser's IP address to OpenStreetMap's servers.

We never sell your data or share it for advertising.

Visitor analytics

We use Lovable's built-in visitor analytics to understand how the site is used. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify you. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

For every visitor, it records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year.

Why we use your data (legal basis)

  • Contract: to sell and deliver your tickets, and to run charity accounts.
  • Legitimate interests: to keep the site secure, prevent fraud and spam, and improve the service.
  • Consent: for our event update emails. You can unsubscribe at any time.
  • Legal obligation: to keep financial records.

How long we keep it

Order records are kept for six years for accounting purposes, then deleted. Mailing list entries are kept until you unsubscribe. Contact messages are kept for up to two years.

Your rights

You can ask us to give you a copy of your data, correct it, or delete it. Where we have to keep some records by law (for example, financial records of payments), we'll tell you. Use the form below and we'll respond within 30 days. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

See our cookies policy.