Privacy policy
Last updated: 21 October 2026
1. Who we are
Around is a local-experience discovery service that helps people find, save and purchase tickets for events and experiences, receive alerts, use personalised recommendations and, where available, buy a Mystery Ticket or subscribe to Around+.
For the purposes of UK and EU data-protection law, the controller of your personal data is[FULL LEGAL COMPANY NAME], trading as Around (“Around”, “we”, “us” or “our”).
Registered office: [REGISTERED ADDRESS]
Company number: [COMPANY NUMBER]
Privacy contact / Data Protection Officer: [PRIVACY EMAIL]
General support: [SUPPORT EMAIL]
UK representative, if required: [NAME AND CONTACT DETAILS / NOT APPLICABLE]
EU representative, if required: [NAME AND CONTACT DETAILS / NOT APPLICABLE]
This Privacy Policy applies to the Around website, app, communications and related services (together, the Service). It does not govern a ticket seller, venue, event organiser, payment provider or other third party that acts as a separate controller under its own privacy notice.
2. The personal data we collect
Depending on how you use the Service, we collect the following categories of personal data.
2.1 Account and identity data
Your name, email address, telephone number, date of birth or age-confirmation result, account credentials, account identifier, sign-in provider details, preferred language and country.
If you sign in through Apple, Google or another provider, we receive the information that you authorise that provider to share.
2.2 Profile and preference data
Your interests, preferred event categories, budget, preferred dates and times, accessibility requirements, preferred travel distance, location preferences, notification choices and other settings used to personalise the Service.
Please do not enter health information or other sensitive personal data in free-text fields. Where accessibility information may reveal health data, we will request your explicit consent where required and use it only to support the relevant search, recommendation, booking or attendance request.
2.3 Location data
A location that you type or select, such as a city or postcode, and, if you enable device location, your approximate or precise device location.
You can change location permissions through your device or browser settings. Around should remain usable with a manually selected location, although nearby results may be less accurate.
2.4 Discovery and usage data
Searches, filters, viewed listings, recommendations shown, clicks, saves, hides, follows, invitations, alerts, purchase journeys, Mystery Ticket choices, subscription activity, session data, referral pages and how you interact with the Service.
2.5 Transaction and subscription data
Products or tickets selected, order and booking identifiers, event details, quantity, price, currency, discounts, membership status, billing frequency, renewal and cancellation status, refund records, affiliate or referral identifiers and limited payment information such as payment status and the last four digits of a card.
Full card details are normally collected directly by our payment provider and are not stored by Around.
2.6 Invite and social data
If you invite another person, we process the contact detail you enter and your message for the purpose of sending or creating that invitation.
You must have the right to provide that information. We do not use invitee contact details for unrelated marketing unless that person separately opts in.
2.7 Communications and support data
Messages to customer support, complaints, survey responses, reviews, reports of illegal or unsafe content, requests to exercise privacy rights and records of our communications with you.
2.8 Device, network and cookie data
IP address, device and app identifiers, browser and device type, operating system, language, time zone, crash logs, security signals and information collected through cookies, SDKs, pixels and similar technologies.
2.9 Marketing, advertising and affiliate data
Marketing preferences, campaign interactions, the reason a sponsored placement was shown, and conversion information received from ticketing or advertising partners.
We distinguish clearly between organic recommendations and paid placements.
2.10 Publisher and business data
For event organisers, venues, publishers and advertisers: business name, business contact details, role, authority to act, tax and payment information, listing content, campaign settings, support history, moderation history and listing-performance data.
2.11 Safety, fraud and compliance data
Information used to verify accounts and publishers, prevent fraud, protect users, investigate misuse, comply with law and enforce our terms. This may include risk signals and records of account restrictions.
3. How we collect personal data
We collect personal data:
- directly from you when you register, set preferences, search, save, purchase, subscribe, publish, contact us or adjust settings;
- automatically from your device and use of the Service;
- from ticket sellers, event organisers, venues, payment providers, identity providers, app stores, analytics providers and affiliate partners;
- from another user who sends you an invitation;
- from public event sources and authorised event-data providers; and
- from corporate partners through which Around is offered, where they are permitted to share the data and have told you about the sharing.
If we receive personal data about you indirectly, we will provide the required privacy information within the period required by law, unless an exemption applies.
4. Why we use personal data and our legal bases
We use personal data only where we have a valid legal basis under the UK GDPR and/or EU GDPR.
| Purpose | Data commonly used | Legal basis |
|---|---|---|
| Create and operate your account; authenticate you; provide saved events, invitations and settings | Account, identity, profile, invite and usage data | Performance of our contract with you |
| Show nearby events and apply the location, date, budget and interest filters you choose | Profile, preference, location and discovery data | Performance of our contract; consent for precise device location where required |
| Rank and personalise recommendations, alerts and offers | Profile, preference, discovery, transaction and location data | Performance of our contract and our legitimate interests in making the Service relevant; consent where local law requires it for tracking or personalised advertising |
| Match and fulfil a Mystery Ticket within the guardrails you select | Profile, preference, location, transaction and accessibility data | Performance of our contract; explicit consent if we need to process health-related accessibility data |
| Process ticket, membership and publisher transactions; prevent duplicate orders; issue refunds | Account, transaction, subscription and payment-status data | Performance of our contract; compliance with legal obligations |
| Provide Around+ and administer renewals, reminders, cooling-off rights and cancellations | Account, transaction, subscription and communications data | Performance of our contract; compliance with consumer law |
| Send operational messages, booking information, security alerts and service notices | Account, transaction and communications data | Performance of our contract; legitimate interests in operating a secure service |
| Send marketing by email, SMS or push notification | Contact details, preferences and engagement data | Consent, or legitimate interests where applicable law permits marketing to existing customers; you can opt out at any time |
| Display contextual sponsored placements | Search context, selected location and current filters | Legitimate interests in funding the Service while protecting user expectations |
| Display behaviourally personalised sponsored placements or use non-essential advertising or affiliate tracking | Usage, device, campaign and conversion data | Consent where required; we do not use special-category data for ad targeting |
| Measure performance, diagnose faults and improve the Service | Usage, device, crash, support and aggregated transaction data | Legitimate interests in understanding and improving the Service; consent for non-essential cookies or SDKs where required |
| Verify publishers, moderate listings, investigate reports and protect against fraud or misuse | Identity, business, listing, usage, safety and communications data | Legitimate interests in safety and integrity; legal obligation where applicable |
| Comply with tax, accounting, consumer-protection, platform-safety and other legal duties | Identity, transaction, publisher, safety and communications data | Legal obligation |
| Establish, exercise or defend legal claims and manage corporate transactions | Relevant account, transaction, communications and compliance data | Legitimate interests and, where applicable, legal obligation |
Where we rely on legitimate interests, we assess whether the processing is necessary and whether your rights override our interests. You may object as described in section 11.
Where we rely on consent, you may withdraw it at any time without affecting processing already carried out. Withdrawing consent may disable the feature that needs the relevant data, such as precise-location recommendations, but will not prevent you from using unrelated parts of the Service.
5. Personalisation, ranking and automated processing
Around ranks event listings to reduce long lists to a smaller set of relevant choices. Main inputs may include:
- the location, date, time, budget, interests and accessibility preferences you select;
- event availability, price, distance, freshness and suitability;
- your saves, hides, clicks, purchases and previous interactions;
- listing quality, popularity and reliability; and
- whether a placement is sponsored.
Sponsored placements are labelled and payment may increase their prominence. Sponsorship does not guarantee that a listing will appear or that it will be the first organic recommendation.
Mystery Ticket matching uses the guardrails shown before purchase, such as date, location, budget, interests, ticket quantity and accessibility needs.
We do not use solely automated processing to make decisions that produce legal or similarly significant effects about you. If we introduce such processing, we will provide the information and safeguards required by law, including human review where applicable.
You can reduce personalisation by changing your profile and cookie settings, clearing or deleting activity where the feature permits, or contacting us.
6. Cookies and similar technologies
We use cookies, SDKs, pixels, local storage and similar technologies for:
- strictly necessary purposes, such as sign-in, security, basket and consent preferences;
- functional purposes, such as remembering language, location and display settings;
- analytics, such as measuring use and diagnosing performance; and
- advertising and affiliate measurement, such as attributing a purchase to an Around referral and measuring sponsored placements.
We request consent before using non-essential cookies or similar technologies where UK or EU law requires it. Rejecting non-essential technologies must be as easy as accepting them.
You can change your choices at any time through[COOKIE SETTINGS LINK].
The live cookie-preference centre should identify each technology, provider, purpose and duration. See[COOKIE NOTICE LINK] for the current list. Your browser and device may also allow you to block or delete technologies, but doing so can affect functionality.
7. Marketing and notifications
We may send service messages that are necessary for your account, booking, subscription, security or a material change to the Service. These are not marketing messages.
We send promotional email, SMS or push notifications only where permitted by law. You can opt out by:
- using the unsubscribe control;
- changing your notification settings;
- withdrawing push permission in your device; or
- contacting us.
We may retain a suppression record so that we honour your choice.
8. When we share personal data
We may share personal data with:
- ticket sellers, event organisers and venues, to complete a booking, provide admission, support accessibility, manage a cancellation or resolve a problem;
- payment and fraud-prevention providers, to authorise payments, prevent fraud and process refunds;
- cloud, communications, customer-support, identity, security and software providers, acting under contract on our instructions;
- analytics, advertising and affiliate partners, in accordance with your consent choices and applicable law;
- corporate partners, where Around is provided through a partner-branded or white-label service and the relationship is explained at collection;
- professional advisers, auditors, insurers and potential transaction parties, subject to appropriate confidentiality protections;
- regulators, law-enforcement agencies, courts and other authorities, where required or legally permitted; and
- a buyer, investor or successor, in connection with a merger, reorganisation, financing or sale, subject to applicable safeguards.
A ticket seller, venue, organiser, payment provider, sign-in provider or corporate partner may act as a separate controller. Its own privacy notice will explain its use of your data.
We do not sell personal data for money. If a legal definition of “sale” or “sharing” includes advertising or affiliate disclosures, we provide any required choice mechanism.
9. International transfers
Your personal data may be processed outside the country in which you live.
Where UK or EEA personal data is transferred to a country not recognised as providing adequate protection, we use an approved safeguard, such as:
- the European Commission’s Standard Contractual Clauses;
- the UK International Data Transfer Agreement or UK Addendum; and
- supplementary technical or organisational measures where appropriate.
You may request information about the relevant safeguard by contacting us.
10. How long we keep personal data
We keep personal data only for as long as needed for the purposes described above, including legal, accounting, safety and dispute-resolution requirements.
The final production retention schedule must match the systems actually used. At launch, the schedule published here should specify at least:
| Record | Retention rule |
|---|---|
| Active account and profile | While the account is open; deletion or anonymisation within[30] days after closure, subject to the exceptions below and a backup cycle of up to[90] days |
| Search, recommendation and location history | [12 months] from collection, unless you delete it earlier; precise live location should not be retained longer than needed for the session unless you explicitly save it |
| Saved events and alerts | Until removed by you or the account is closed |
| Unaccepted invitation contact details | No more than[30 days] after the invitation expires |
| Orders, refunds, subscriptions and tax records | The period required by applicable tax and accounting law—normally[6 years in the UK; insert each EU establishment’s period] |
| Support, complaints and moderation records | [3 years] after closure, or longer where a dispute, safety issue or legal claim requires it |
| Security logs | [12 months], unless needed for an active investigation |
| Marketing consent and suppression records | For the life of the consent and afterwards for as long as needed to demonstrate compliance and honour an opt-out |
When retention ends, we delete or irreversibly anonymise the data. Anonymous statistical information may be retained because it no longer identifies you.
11. Your data-protection rights
Subject to applicable conditions and exceptions, you may have the right to:
- receive information about how we use your data;
- access a copy of your personal data;
- correct inaccurate or incomplete data;
- have data erased;
- restrict our use of data;
- object to processing based on legitimate interests;
- object absolutely to direct marketing;
- receive data you provided in a structured, commonly used and machine-readable format and transmit it to another controller;
- withdraw consent at any time; and
- obtain safeguards relating to solely automated decisions with legal or similarly significant effects.
To exercise a right, contact[PRIVACY EMAIL]. We may ask for information needed to verify your identity. You may authorise another person to act for you where local law allows.
We normally respond within one month, although the period may be extended where legally permitted.
You may complain to the UK Information Commissioner’s Office at ico.org.uk if the issue concerns UK processing.
In the EEA, you may complain to the supervisory authority in the country of your habitual residence, place of work or the alleged infringement. A list is available through the European Data Protection Board.
We would appreciate the opportunity to resolve the issue first, but this does not affect your right to complain.
12. Security
We use appropriate technical and organisational measures designed to protect personal data, including:
- access controls;
- encryption where appropriate;
- logging and monitoring;
- supplier due diligence;
- secure development practices; and
- incident-response procedures.
No service is completely secure. You must protect your credentials and tell us promptly at[SECURITY EMAIL] if you suspect unauthorised access.
13. Children
Around is not directed to children under 16, and people under 16 must not create an account.
Purchases and paid subscriptions may be made only by a person aged 18 or over or by a person who has the valid permission and payment authorisation of a parent or legal guardian, subject to local law and any event-specific age restrictions.
We do not knowingly use children’s data for behaviourally targeted advertising. If you believe a child has provided personal data contrary to this section, contact us.
14. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to the Service, our processing or the law.
We will post the updated version and revise the date above. If a change materially affects your rights or how we use your data, we will provide additional notice before it takes effect where required.
15. Contact us
Questions, complaints and privacy requests should be sent to:
[FULL LEGAL COMPANY NAME]
[POSTAL ADDRESS]
[PRIVACY EMAIL]
[SUPPORT URL]