Privacy Policy

Last Updated: August 3, 2025

We are committed to protecting your privacy and handling your information with transparency and care. This Policy outlines the types of data we may collect, the purposes for which we use it, how we safeguard your information, and your rights regarding your personal data.

By using our Platform or engaging with our services, you consent to the practices described in this Policy. If you do not agree with our privacy practices, we kindly ask that you refrain from using our services.

Should you have any questions, concerns, or requests related to your personal data or this Policy, please do not hesitate to contact our dedicated Data Protection Officer ("DPO") at elliot@crowdsauce.co.

This Privacy Policy should be read together with our Evntree Terms of Service. Unless otherwise defined in this Policy, all capitalised terms shall have the same meanings as those set forth in the Terms of Service.

Definitions

Capitalised terms used in this Policy shall have the following meanings:

Personal Information You Provide

When you register on the Evntree Platform or otherwise interact with our services, we collect Personal Data that you voluntarily provide. The types of Personal Data we collect depend on your specific interactions with the Platform, the features you use, and the choices you make.

Such Personal Data may include, but is not limited to:

• Full name
• Email address
• Password
• Date of birth
• Phone number
• Residential address

We process this information strictly in accordance with applicable data protection laws, including the DPA and the retained aspects of the General Data Protection Regulation applicable in the UK ("UK GDPR").

Data Collected Automatically During Use

When you access or use the Platform, we may automatically gather certain technical and usage information that does not directly identify you personally but helps us operate and improve our services. This data is collected through your device and browser and includes:

Log and Usage Data:

Our servers automatically record service-related, diagnostic, and performance information when you use the Platform. This may include your IP address, browser type and settings, device information, pages visited, searches performed, time and date stamps, interaction with features, error reports, and system activity logs.

Device Information:

We collect details about the device you use to access Evntree, such as mobile phone, tablet, or computer identifiers. This may include IP addresses, unique device IDs, application version, device model, operating system, system configuration, browser type, internet service provider or mobile carrier, and hardware specifications.

Location Information:

We may collect geolocation data from your device, which could be precise or approximate depending on your device settings and permissions. This may include GPS data or location inferred from your IP address. You have control over whether you allow us to access your location data through your device settings.

Your Social Logins

The Evntree Platform may offer you the option to register for an account or log in using your existing account credentials from third-party social networking services such as Google, Facebook, Apple, or other similar platforms ("Social Logins").

If you choose to use a Social Login to access the Platform, we will receive certain profile information from your social networking service, which may include your name, email address, profile picture, and any other information you have made publicly available or authorised the service to share with us.

You can control the information shared with us by adjusting your privacy settings directly with the social networking service before or after linking your account.

Information Collected for Paid Events

If you register for a paid event through the Platform or via an organiser's linked ticketing system, you may be required to provide financial information - such as your credit card or payment card number, expiration date, billing address, and related details.

Event organisers using Evntree may also customise their event registration forms to collect additional information from attendees as part of their registration process. Evntree does not control an organiser's event registration process or the types of Personal Data they may collect from you.

When you register for an event or purchase a ticket through the Platform, that information will be made available to the organiser. The collection, storage, and use of your information by organisers is governed by their own privacy policies and practices, not by this Privacy Policy.

How We Use and Process Your Personal Data

We collect and process your Personal Data for a variety of purposes that are necessary to operate and improve the Evntree Platform, provide services to you, and ensure a safe and efficient user experience. The specific reasons for processing your data include:

• Account Management and Authentication - Enable you to register for an account, authenticate your identity, and manage your user profile
• Delivery of Services - Provide, facilitate, and personalise the services you request via the Platform
• Customer Support and Communication - Respond to your questions, concerns, or complaints related to the Platform
• Security and Fraud Prevention - Monitor, detect, and prevent fraudulent or unauthorised activity
• Service Improvement and Analytics - Analyse your usage data to understand how the Platform is used and to identify trends

Legal Basis for Processing Your Personal Data

Evntree processes your Personal Data only when we have a valid legal basis to do so under applicable data protection laws. Depending on the specific context, we rely on one or more of the following legal grounds:

Consent

In certain circumstances, Evntree will seek your explicit, informed consent before collecting and processing your Personal Data. You have the right to grant, refuse, or withdraw consent at any time.

Performance of a Contract

We process your Personal Data as necessary to enter into and perform our contractual obligations with you, including creating and managing your user account and facilitating your access to event-related services.

Legitimate Interests

We may process your Personal Data based on our legitimate interests as a platform provider, provided these interests do not override your rights or freedoms. Examples include maintaining security, improving our Platform, and enforcing our terms.

Payment Processing

We may process your information for payment processing purposes through our trusted third-party payment processor, Stripe. We do not store or collect your payment card details.

Compliance with Legal Obligations

Evntree may process your Personal Data to comply with applicable legal, regulatory, or judicial obligations.

Third-Party Data Sharing

Evntree is committed to safeguarding your privacy and ensuring your Personal Data is only shared when necessary and in accordance with applicable data protection laws. We do not sell or lease your Personal Data to third parties.

However, we may share your Personal Data in the following circumstances:

With Service Providers and Subprocessors

We engage trusted third-party service providers and subprocessors to perform functions on our behalf. All such providers are carefully vetted and contractually required to implement appropriate security measures.

With Event Organisers

When you register for or interact with an event hosted on the Platform, certain Personal Data you provide may be shared with the relevant event organiser for managing your participation in the event.

With Legal and Regulatory Authorities

We may disclose your Personal Data to government authorities, law enforcement agencies, or regulatory bodies when required to comply with legal obligations or protect rights and safety.

Consent for Uploading and Contacting Attendees or Fans

If you are an event organiser uploading contact details to the Platform, you are solely responsible for ensuring that you have obtained all necessary, valid, and verifiable consents from each individual whose Personal Data you upload or contact via the Platform.

Evntree does not verify the source or legality of contact data uploaded to the Platform and accepts no responsibility for your use of such data. You agree to indemnify and hold Evntree harmless from any claims arising from your failure to obtain appropriate consents.

Use of Cookies and Similar Technologies

The Platform uses Cookies and similar tracking technologies to enhance your user experience, analyse usage patterns, and improve the overall functionality of the Platform.

For detailed information about the types of cookies we use and how to manage them, please review our Cookies Policy.

Data Security

We take the security of your Personal Data seriously and have implemented appropriate and proportionate technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction.

These measures include:

• Encryption of Data in Transit: All data transmitted between your browser and our servers is encrypted using SSL and TLS protocols
• Encryption of Sensitive Keys: API keys and credentials are encrypted using pgsodium in Supabase
• Access Controls: Strict access control policies ensure only authorised personnel can access Personal Data
• Security Audits: We conduct periodic security audits and vulnerability assessments

While we implement robust safeguards, no method of electronic transmission or storage is entirely secure. We cannot guarantee that hackers or unauthorised third parties will not breach our security measures.

Data Retention and Storage

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Once your account is terminated or you cease using our services, we will retain your Personal Data for no longer than twelve (12) months, unless a longer retention period is required or permitted by law.

Data Transfers

As part of providing the Evntree Platform, your information, including Personal Data, may be transferred to, stored on, and processed by servers and service providers located in jurisdictions outside your country.

The Platform is hosted in the United Kingdom. If you are located outside the UK, your Personal Data will be transferred to and processed in the UK.

We take all reasonable and legally required measures to ensure your Personal Data remains protected during any cross-border transfer through adequacy decisions, contractual safeguards, and organisational and technical controls.

Your Privacy Rights

Depending on your location, you may have certain rights under data protection and privacy laws relating to the Personal Data we collect. These rights may include:

• Right to Access - Request confirmation and a copy of the data we hold about you
• Right to Rectification - Request correction of inaccurate or incomplete data
• Right to Erasure - Request deletion of your Personal Data where it is no longer necessary
• Right to Restrict Processing - Request that we limit processing in certain situations
• Right to Data Portability - Receive your data in a structured, machine-readable format
• Right to Object - Object to processing for direct marketing or based on legitimate interests
• Right to Withdraw Consent - Withdraw consent at any time where processing is based on consent

To exercise any of your privacy rights, please contact us at:

Additional Privacy Rights for California Residents

If you are a resident of California, you have specific privacy rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Your CCPA/CPRA rights include:

• Right to Know - Request disclosure of the categories and specific pieces of Personal Information we have collected
• Right to Delete - Request deletion of your Personal Information
• Right to Correct - Request correction of inaccurate Personal Information
• Right to Opt-Out - Opt out of the "sale" or "sharing" of your Personal Information
• Right to Non-Discrimination - We will not discriminate against you for exercising your rights

While Evntree does not sell Personal Information in exchange for money, certain data-sharing practices for analytics or advertising may be considered "sharing" under California law.

Children's Privacy

The Evntree Platform and services are intended for use only by individuals aged 18 years or older. We do not knowingly collect, solicit, or store Personal Data from individuals under 18 years of age.

If you are a parent or guardian and believe your child has provided us with Personal Data without your consent, please contact us to request deletion of that data.

Third-Party Links and Integrations

The Platform may contain links to third-party websites, applications, or services that are not owned or controlled by us. Once you click a link or interact with a third-party integration, you will be subject to the terms and privacy policies of that third party.

We do not monitor or have control over third-party sites or services and are not responsible for their practices or content.

Controls for "Do Not Track" (DNT)

Many browsers offer a "Do Not Track" (DNT) feature which sends a signal indicating a preference not to be tracked. Currently, there is no universally accepted standard for recognising and responding to DNT signals.

Evntree does not currently respond to DNT browser signals. If an industry or legal standard is adopted, we will update this Policy accordingly.

Changes in Ownership or Control

In the event that Evntree undergoes a change in ownership or control, your Personal Data may be transferred as part of the business assets. Any such transfer will be conducted in accordance with applicable data protection laws.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Each updated version will be indicated by a revised "Last Updated" date at the top of the Policy.

If we make material changes, we will take reasonable steps to notify you in advance. Your continued use of the Platform after such updates constitutes your acceptance of the revised Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your Personal Data, please contact us: