Privacy Policy
What personal data Artistover holds about you, why we hold it, who we share it with, and the control you have over it.
Version 2.1 · Effective 13 September 2026
The official legal document is provided in English.
Artistover is operated by Artistover Limited, a company registered in England and Wales with company number 17285593, whose registered office is at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.
Artistover Limited is the controller of the personal data described here, and is responsible to you for it under UK data protection law.
This is the general notice and covers everyone. Two fuller notices go deeper for particular groups: the Provider Privacy Notice for people listing on Artistover, and the Guest Privacy and Event Participation Notice for people invited to an event. The Cookie Policy covers what is stored on your device.
1. What we collect
What we hold depends on how you use Artistover. Someone browsing the marketplace leaves far less than someone running a venue.
- Account data: your name, email address, telephone number where you give it, sign-in credentials, and your settings and preferences.
- Waitlist and acquisition data: your email, optional role, signup and subscription status; with consent, campaign source, a browsing session identifier and its link to your signup. Declining tracking does not prevent signup.
- Profile data: anything you choose to add, including a photograph and a description.
- Listing and event data: descriptions, photographs and video, pricing, availability, menus, floor plans and event pages.
- Booking data: what was booked, when, the price agreed, the terms recorded at the time, and how it was completed.
- Payment data: the record of payments, refunds and payouts. Card details are handled by our payment provider and are not stored by Artistover.
- Identity and business data, for people who receive money: identity verification results, business name and number, tax country and payout details.
- Communication data: messages sent through Artistover, contact with our support team, and your notification preferences.
- Usage data: pages viewed, features used, device and browser information, approximate location derived from your network address, and diagnostics when something breaks.
- Location data, only if you ask for it: when you use a find-nearby feature, your browser shares your position for that search. It is used to find nearby places at that moment and is not stored on your profile. You can withdraw the permission in your browser at any time.
2. Why we use it, and on what basis
Every use has a lawful basis. These are ours.
- To provide the platform and do what we agreed: account, listing, booking and communication data. Basis: performance of a contract.
- To take payments and pay people: payment, identity and business data. Basis: performance of a contract, and legal obligation for the regulatory checks.
- To keep the marketplace safe and prevent fraud: identity, usage, booking and communication data. Basis: our legitimate interest in protecting users and the platform.
- To handle disputes, complaints and safety reports: booking, message and listing data. Basis: legitimate interests, and the establishment or defence of legal claims.
- To meet obligations placed on us, including tax, accounting and platform seller reporting. Basis: legal obligation.
- To improve the product and understand how it is used: usage data, aggregated wherever possible. Basis: legitimate interests, with consent for anything stored on your device.
- To measure public visits and waitlist conversions using PostHog and our session records: consent. To measure and improve Facebook and Instagram ads using Meta: separate advertising consent. You can withdraw either in Cookie settings.
- To send you messages about your account and your bookings. Basis: performance of a contract. These are not marketing and continue while you hold an account.
- To send you marketing about Artistover. Basis: consent for consumers, sole traders, unincorporated partnerships and other individual subscribers; legitimate interests only for incorporated business contacts where electronic marketing law permits. Every message includes a way to opt out.
Where we rely on legitimate interests we have weighed our interest against the effect on you, and you can object at any time using the contact details below.
3. Special category data
Some information can reveal something about health, which the law protects more strictly. On Artistover this is normally dietary requirements, allergies and accessibility needs given so an event can be run safely.
We hold it only because it has been provided for that purpose, share it only with the people who must act on it, such as the venue or the caterer, and do not use it for anything else.
5. Where your data is held
We host data in the United Kingdom and the European Economic Area wherever we can. Some of the providers above process data elsewhere, including the United States.
Where data leaves the UK or the EEA we rely on an adequacy decision, the UK International Data Transfer Agreement or Addendum, or Standard Contractual Clauses, with additional safeguards where they are needed.
6. How long we keep it
We keep data only as long as we need it, then delete or anonymise it. The main periods are below, and our Data Export, Account Closure and Deletion policy sets out the full position.
- Account and profile data: while your account is open, then up to 12 months after closure in case the closure was a mistake.
- Payment, payout and invoice records: 7 years, because tax law requires it.
- Identity verification results: 5 years after the relationship ends, under anti-money laundering rules.
- Booking and message records: 6 years, matching the period in which a contract claim can be brought.
- Usage analytics: up to 24 months, pseudonymised sooner where we can. AI prompt and response content held in PostHog: up to 30 days.
- Safety and fraud records: as long as needed to protect people and the platform, reviewed regularly.
7. Your rights
You have the right to be told what we hold and to get a copy of it, to have inaccurate data corrected, to have data erased where we no longer need it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent where we relied on it.
Some data cannot be erased on request because the law requires us to keep it, in particular payment records, tax records and identity verification results. Where that applies we will tell you exactly what was kept and why, rather than refusing the whole request.
To exercise a right, write to privacy@artistover.com. We respond within one month and will tell you if a complex request needs longer.
8. Automated processing
We use automated processing to rank search results, detect fraud and duplicate accounts, flag content for review, and produce AI suggestions.
No decision with a legal effect on you, or something similarly significant, is made by automated means alone. Removing a listing, closing an account and deciding a dispute all involve a person, and you can ask for any such decision to be looked at again.
9. Children
Artistover is not for children. You must be at least 18 to hold an account, and we do not knowingly collect data from children through an account.
Children do attend events, and an organiser may hold information about them for that purpose. Our Safety, Incidents and Safeguarding policy sets out the rules that apply.
10. Keeping data secure
We protect data in transit and at rest, restrict internal access to those who need it, and log administrative access to accounts.
No system is perfectly secure. If a breach occurs that is likely to put your rights at risk, we will tell you and the Information Commissioner as the law requires.
12. Changes to this notice
We update this notice as the product and the law change. The version and effective date at the top tell you which version you are reading, and we will tell you directly about a change that materially affects you.
13. Contact and complaints
Write to privacy@artistover.com, or by post to Artistover Limited, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner Office at ico.org.uk. We would rather you came to us first so we can put it right.