Privacy policy

Last updated: 21 October 2026

1. Who we are

Around is a local-experience discovery service that helps people find, save and purchase tickets for events and experiences, receive alerts, use personalised recommendations and, where available, buy a Mystery Ticket or subscribe to Around+.

For the purposes of UK and EU data-protection law, the controller of your personal data is[FULL LEGAL COMPANY NAME], trading as Around (“Around”, “we”, “us” or “our”).

Registered office: [REGISTERED ADDRESS]

Company number: [COMPANY NUMBER]

Privacy contact / Data Protection Officer: [PRIVACY EMAIL]

General support: [SUPPORT EMAIL]

UK representative, if required: [NAME AND CONTACT DETAILS / NOT APPLICABLE]

EU representative, if required: [NAME AND CONTACT DETAILS / NOT APPLICABLE]

This Privacy Policy applies to the Around website, app, communications and related services (together, the Service). It does not govern a ticket seller, venue, event organiser, payment provider or other third party that acts as a separate controller under its own privacy notice.

2. The personal data we collect

Depending on how you use the Service, we collect the following categories of personal data.

2.1 Account and identity data

Your name, email address, telephone number, date of birth or age-confirmation result, account credentials, account identifier, sign-in provider details, preferred language and country.

If you sign in through Apple, Google or another provider, we receive the information that you authorise that provider to share.

2.2 Profile and preference data

Your interests, preferred event categories, budget, preferred dates and times, accessibility requirements, preferred travel distance, location preferences, notification choices and other settings used to personalise the Service.

Please do not enter health information or other sensitive personal data in free-text fields. Where accessibility information may reveal health data, we will request your explicit consent where required and use it only to support the relevant search, recommendation, booking or attendance request.

2.3 Location data

A location that you type or select, such as a city or postcode, and, if you enable device location, your approximate or precise device location.

You can change location permissions through your device or browser settings. Around should remain usable with a manually selected location, although nearby results may be less accurate.

2.4 Discovery and usage data

Searches, filters, viewed listings, recommendations shown, clicks, saves, hides, follows, invitations, alerts, purchase journeys, Mystery Ticket choices, subscription activity, session data, referral pages and how you interact with the Service.

2.5 Transaction and subscription data

Products or tickets selected, order and booking identifiers, event details, quantity, price, currency, discounts, membership status, billing frequency, renewal and cancellation status, refund records, affiliate or referral identifiers and limited payment information such as payment status and the last four digits of a card.

Full card details are normally collected directly by our payment provider and are not stored by Around.

2.6 Invite and social data

If you invite another person, we process the contact detail you enter and your message for the purpose of sending or creating that invitation.

You must have the right to provide that information. We do not use invitee contact details for unrelated marketing unless that person separately opts in.

2.7 Communications and support data

Messages to customer support, complaints, survey responses, reviews, reports of illegal or unsafe content, requests to exercise privacy rights and records of our communications with you.

2.8 Device, network and cookie data

IP address, device and app identifiers, browser and device type, operating system, language, time zone, crash logs, security signals and information collected through cookies, SDKs, pixels and similar technologies.

2.9 Marketing, advertising and affiliate data

Marketing preferences, campaign interactions, the reason a sponsored placement was shown, and conversion information received from ticketing or advertising partners.

We distinguish clearly between organic recommendations and paid placements.

2.10 Publisher and business data

For event organisers, venues, publishers and advertisers: business name, business contact details, role, authority to act, tax and payment information, listing content, campaign settings, support history, moderation history and listing-performance data.

2.11 Safety, fraud and compliance data

Information used to verify accounts and publishers, prevent fraud, protect users, investigate misuse, comply with law and enforce our terms. This may include risk signals and records of account restrictions.

3. How we collect personal data

We collect personal data:

  • directly from you when you register, set preferences, search, save, purchase, subscribe, publish, contact us or adjust settings;
  • automatically from your device and use of the Service;
  • from ticket sellers, event organisers, venues, payment providers, identity providers, app stores, analytics providers and affiliate partners;
  • from another user who sends you an invitation;
  • from public event sources and authorised event-data providers; and
  • from corporate partners through which Around is offered, where they are permitted to share the data and have told you about the sharing.

If we receive personal data about you indirectly, we will provide the required privacy information within the period required by law, unless an exemption applies.

4. Why we use personal data and our legal bases

We use personal data only where we have a valid legal basis under the UK GDPR and/or EU GDPR.

PurposeData commonly usedLegal basis
Create and operate your account; authenticate you; provide saved events, invitations and settingsAccount, identity, profile, invite and usage dataPerformance of our contract with you
Show nearby events and apply the location, date, budget and interest filters you chooseProfile, preference, location and discovery dataPerformance of our contract; consent for precise device location where required
Rank and personalise recommendations, alerts and offersProfile, preference, discovery, transaction and location dataPerformance of our contract and our legitimate interests in making the Service relevant; consent where local law requires it for tracking or personalised advertising
Match and fulfil a Mystery Ticket within the guardrails you selectProfile, preference, location, transaction and accessibility dataPerformance of our contract; explicit consent if we need to process health-related accessibility data
Process ticket, membership and publisher transactions; prevent duplicate orders; issue refundsAccount, transaction, subscription and payment-status dataPerformance of our contract; compliance with legal obligations
Provide Around+ and administer renewals, reminders, cooling-off rights and cancellationsAccount, transaction, subscription and communications dataPerformance of our contract; compliance with consumer law
Send operational messages, booking information, security alerts and service noticesAccount, transaction and communications dataPerformance of our contract; legitimate interests in operating a secure service
Send marketing by email, SMS or push notificationContact details, preferences and engagement dataConsent, or legitimate interests where applicable law permits marketing to existing customers; you can opt out at any time
Display contextual sponsored placementsSearch context, selected location and current filtersLegitimate interests in funding the Service while protecting user expectations
Display behaviourally personalised sponsored placements or use non-essential advertising or affiliate trackingUsage, device, campaign and conversion dataConsent where required; we do not use special-category data for ad targeting
Measure performance, diagnose faults and improve the ServiceUsage, device, crash, support and aggregated transaction dataLegitimate interests in understanding and improving the Service; consent for non-essential cookies or SDKs where required
Verify publishers, moderate listings, investigate reports and protect against fraud or misuseIdentity, business, listing, usage, safety and communications dataLegitimate interests in safety and integrity; legal obligation where applicable
Comply with tax, accounting, consumer-protection, platform-safety and other legal dutiesIdentity, transaction, publisher, safety and communications dataLegal obligation
Establish, exercise or defend legal claims and manage corporate transactionsRelevant account, transaction, communications and compliance dataLegitimate interests and, where applicable, legal obligation

Where we rely on legitimate interests, we assess whether the processing is necessary and whether your rights override our interests. You may object as described in section 11.

Where we rely on consent, you may withdraw it at any time without affecting processing already carried out. Withdrawing consent may disable the feature that needs the relevant data, such as precise-location recommendations, but will not prevent you from using unrelated parts of the Service.

5. Personalisation, ranking and automated processing

Around ranks event listings to reduce long lists to a smaller set of relevant choices. Main inputs may include:

  • the location, date, time, budget, interests and accessibility preferences you select;
  • event availability, price, distance, freshness and suitability;
  • your saves, hides, clicks, purchases and previous interactions;
  • listing quality, popularity and reliability; and
  • whether a placement is sponsored.

Sponsored placements are labelled and payment may increase their prominence. Sponsorship does not guarantee that a listing will appear or that it will be the first organic recommendation.

Mystery Ticket matching uses the guardrails shown before purchase, such as date, location, budget, interests, ticket quantity and accessibility needs.

We do not use solely automated processing to make decisions that produce legal or similarly significant effects about you. If we introduce such processing, we will provide the information and safeguards required by law, including human review where applicable.

You can reduce personalisation by changing your profile and cookie settings, clearing or deleting activity where the feature permits, or contacting us.

6. Cookies and similar technologies

We use cookies, SDKs, pixels, local storage and similar technologies for:

  • strictly necessary purposes, such as sign-in, security, basket and consent preferences;
  • functional purposes, such as remembering language, location and display settings;
  • analytics, such as measuring use and diagnosing performance; and
  • advertising and affiliate measurement, such as attributing a purchase to an Around referral and measuring sponsored placements.

We request consent before using non-essential cookies or similar technologies where UK or EU law requires it. Rejecting non-essential technologies must be as easy as accepting them.

You can change your choices at any time through[COOKIE SETTINGS LINK].

The live cookie-preference centre should identify each technology, provider, purpose and duration. See[COOKIE NOTICE LINK] for the current list. Your browser and device may also allow you to block or delete technologies, but doing so can affect functionality.

7. Marketing and notifications

We may send service messages that are necessary for your account, booking, subscription, security or a material change to the Service. These are not marketing messages.

We send promotional email, SMS or push notifications only where permitted by law. You can opt out by:

  • using the unsubscribe control;
  • changing your notification settings;
  • withdrawing push permission in your device; or
  • contacting us.

We may retain a suppression record so that we honour your choice.

8. When we share personal data

We may share personal data with:

  • ticket sellers, event organisers and venues, to complete a booking, provide admission, support accessibility, manage a cancellation or resolve a problem;
  • payment and fraud-prevention providers, to authorise payments, prevent fraud and process refunds;
  • cloud, communications, customer-support, identity, security and software providers, acting under contract on our instructions;
  • analytics, advertising and affiliate partners, in accordance with your consent choices and applicable law;
  • corporate partners, where Around is provided through a partner-branded or white-label service and the relationship is explained at collection;
  • professional advisers, auditors, insurers and potential transaction parties, subject to appropriate confidentiality protections;
  • regulators, law-enforcement agencies, courts and other authorities, where required or legally permitted; and
  • a buyer, investor or successor, in connection with a merger, reorganisation, financing or sale, subject to applicable safeguards.

A ticket seller, venue, organiser, payment provider, sign-in provider or corporate partner may act as a separate controller. Its own privacy notice will explain its use of your data.

We do not sell personal data for money. If a legal definition of “sale” or “sharing” includes advertising or affiliate disclosures, we provide any required choice mechanism.

9. International transfers

Your personal data may be processed outside the country in which you live.

Where UK or EEA personal data is transferred to a country not recognised as providing adequate protection, we use an approved safeguard, such as:

  • the European Commission’s Standard Contractual Clauses;
  • the UK International Data Transfer Agreement or UK Addendum; and
  • supplementary technical or organisational measures where appropriate.

You may request information about the relevant safeguard by contacting us.

10. How long we keep personal data

We keep personal data only for as long as needed for the purposes described above, including legal, accounting, safety and dispute-resolution requirements.

The final production retention schedule must match the systems actually used. At launch, the schedule published here should specify at least:

RecordRetention rule
Active account and profileWhile the account is open; deletion or anonymisation within[30] days after closure, subject to the exceptions below and a backup cycle of up to[90] days
Search, recommendation and location history[12 months] from collection, unless you delete it earlier; precise live location should not be retained longer than needed for the session unless you explicitly save it
Saved events and alertsUntil removed by you or the account is closed
Unaccepted invitation contact detailsNo more than[30 days] after the invitation expires
Orders, refunds, subscriptions and tax recordsThe period required by applicable tax and accounting law—normally[6 years in the UK; insert each EU establishment’s period]
Support, complaints and moderation records[3 years] after closure, or longer where a dispute, safety issue or legal claim requires it
Security logs[12 months], unless needed for an active investigation
Marketing consent and suppression recordsFor the life of the consent and afterwards for as long as needed to demonstrate compliance and honour an opt-out

When retention ends, we delete or irreversibly anonymise the data. Anonymous statistical information may be retained because it no longer identifies you.

11. Your data-protection rights

Subject to applicable conditions and exceptions, you may have the right to:

  • receive information about how we use your data;
  • access a copy of your personal data;
  • correct inaccurate or incomplete data;
  • have data erased;
  • restrict our use of data;
  • object to processing based on legitimate interests;
  • object absolutely to direct marketing;
  • receive data you provided in a structured, commonly used and machine-readable format and transmit it to another controller;
  • withdraw consent at any time; and
  • obtain safeguards relating to solely automated decisions with legal or similarly significant effects.

To exercise a right, contact[PRIVACY EMAIL]. We may ask for information needed to verify your identity. You may authorise another person to act for you where local law allows.

We normally respond within one month, although the period may be extended where legally permitted.

You may complain to the UK Information Commissioner’s Office at ico.org.uk if the issue concerns UK processing.

In the EEA, you may complain to the supervisory authority in the country of your habitual residence, place of work or the alleged infringement. A list is available through the European Data Protection Board.

We would appreciate the opportunity to resolve the issue first, but this does not affect your right to complain.

12. Security

We use appropriate technical and organisational measures designed to protect personal data, including:

  • access controls;
  • encryption where appropriate;
  • logging and monitoring;
  • supplier due diligence;
  • secure development practices; and
  • incident-response procedures.

No service is completely secure. You must protect your credentials and tell us promptly at[SECURITY EMAIL] if you suspect unauthorised access.

13. Children

Around is not directed to children under 16, and people under 16 must not create an account.

Purchases and paid subscriptions may be made only by a person aged 18 or over or by a person who has the valid permission and payment authorisation of a parent or legal guardian, subject to local law and any event-specific age restrictions.

We do not knowingly use children’s data for behaviourally targeted advertising. If you believe a child has provided personal data contrary to this section, contact us.

14. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our processing or the law.

We will post the updated version and revise the date above. If a change materially affects your rights or how we use your data, we will provide additional notice before it takes effect where required.

15. Contact us

Questions, complaints and privacy requests should be sent to:

[FULL LEGAL COMPANY NAME]

[POSTAL ADDRESS]

[PRIVACY EMAIL]

[SUPPORT URL]