Draft: to be checked before launch

This page is a plain-English draft. It hasn't been reviewed by a lawyer yet and isn't legal advice. Details in square brackets are still to be filled in.

Privacy

This page explains what personal information Gigsaw holds, why, who it's shared with and what your rights are under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Gigsaw is booking software for music agencies, run from the UK at gigsaw.live by [company name, registered number and address]. You can contact us about privacy at [privacy contact email].

Two kinds of information

Information about agency accounts. When an agency signs up, we hold the names, email addresses, mobile numbers and passwords of the people who sign in, plus the agency's plan and billing details. For this, Gigsaw is the controller.

Information an agency puts into Gigsaw. Agencies add their acts, venue staff, customers and other contacts, with their bookings, fees, notes and messages. For this, the agency is the controller and Gigsaw is its processor: we only use it to run the service for that agency. If you're an act, a venue manager or a customer and have a question about your information, please ask the agency first. We'll help them answer.

What we collect and why

  • Contact details such as names, email addresses and phone numbers, so agencies can send offers, confirmations, reminders and changes.
  • Booking and money details such as dates, venues, times, fees and payments, so agencies can run their bookings and send statements and invoices.
  • Bank details that new acts choose to give when they apply to join an agency, so that agency can pay them. Only the agency can see them.
  • Location at check-in. When an act taps I'm on the way, I've arrived or I've left the venue, their phone can share its location so Gigsaw can check the distance to the venue. We don't track location at any other time, and the act's phone always asks first.
  • Phone notification settings, if an act turns on reminders, so we can send them to that phone.
  • A record of messages sent and an activity log on bookings, so agencies can see what was sent and who changed what.

Our lawful bases are: performing our contract with the agency; the agency's legitimate interest in running its bookings; and, for phone notifications and location at check-in, the person's choice to turn them on. [Lawful bases to be confirmed.]

Who we share it with

We don't sell personal information, and we don't use it for advertising. We use a small number of suppliers to run Gigsaw:

  • Hosting and database: Railway. [Hosting region to be confirmed.]
  • Email: Resend.
  • Text messages: Twilio.
  • Phone notifications: the push service built into the person's phone or browser, for example Apple or Google.
  • Payments for Gigsaw plans: [payment provider to be confirmed].

Some of these suppliers may handle information outside the UK. Where they do, we rely on the safeguards UK law requires, such as the UK's international data transfer agreement or adequacy regulations. [Details to be confirmed.]

Cookies

Gigsaw uses two cookies. One keeps you signed in. The other remembers whether you chose light or dark mode. Both are needed for the site to work as you expect, so we don't ask for consent for them. We don't use advertising or tracking cookies.

How long we keep it

We keep an agency's information while it has a Gigsaw account. When an account is closed, we delete it within [period to be confirmed], except anything we must keep for tax or legal reasons. Agencies can export their bookings, arrivals and reports to CSV at any time.

Your rights

Under UK data protection law you can ask to:

  • see the personal information held about you
  • have it corrected if it's wrong
  • have it deleted
  • restrict or object to how it's used
  • get a copy in a format you can take elsewhere
  • withdraw your consent where we rely on it, such as phone notifications

Contact us at [privacy contact email]. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this page in a way that matters, we'll tell agency admins by email. See also our terms.

Last updated: [date to be added at launch].

Privacy · Gigsaw