JGuide

Privacy Policy

Last updated: 2 June 2026

1. Who we are

JGuide ("we", "us", "our") is the data controller for the personal data we hold about you when you use the platform at jguide.co.uk. You can reach us at admin@jguide.co.uk.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it. It is written for users of the platform under the UK GDPR and the Data Protection Act 2018.

2. What data we collect

You give us:

  • Account data — email address, password (stored hashed by our authentication provider), first and last name, display name.
  • Booking data — your name, contact email, optional phone, number of tickets, the event you booked, and the time of booking.
  • Partner application data — name, organisation, role, website, phone, and a short description of what you plan to post.
  • Content you post — community/event titles, descriptions, images, locations, and any messages you send through the platform.

We collect automatically:

  • Technical data — IP address, browser type, device type, referring URL, pages visited. Used to operate, secure, and debug the platform.
  • Cookies & similar technologies — see our Cookies Policy for details.

From third parties:

  • Stripe — when you pay for an event, Stripe shares a confirmation that the payment succeeded, the amount, currency, and a payment reference. We do not receive or store your full card number, CVV, or bank details.

3. Why we use your data & legal basis

  • To provide the platform (creating your account, showing you events, processing bookings, running communities you join) — legal basis: performance of a contract with you.
  • To verify partners and prevent abuse — legal basis: our legitimate interest in keeping the platform safe and trustworthy.
  • To send transactional emails (account confirmation, partner approval, booking receipts via Stripe, notification updates) — legal basis: performance of a contract or legitimate interest.
  • To comply with law (responding to lawful requests, financial record-keeping for Stripe transactions, anti-fraud) — legal basis: legal obligation.

We do not sell your data, run advertising on the platform, or share your data with third-party advertisers or data brokers.

4. Who can see your data

  • You — through your account page and the standard data subject rights below.
  • Event organisers — when you book or RSVP to their event, the organiser sees the name, email, phone (if provided), and ticket count you submitted for that booking.
  • Community organisers — when you join their community, the organiser sees your display name and, where applicable, the email you used to apply.
  • JGuide admin — administrators of the platform may access your data to investigate abuse, respond to support requests, or comply with the law.
  • Service providers (processors) — see "Third-party services" below.
  • Law enforcement — where we are legally required to disclose information.

5. Third-party services we use

We use the following processors to run JGuide. Each has its own privacy policy:

  • Supabase — database, authentication, file storage. Servers located in the EU. Privacy.
  • Stripe — payment processing. Privacy.
  • Vercel — application hosting. Privacy.
  • Resend — transactional email delivery. Privacy.
  • OpenStreetMap / Nominatim — turning typed locations into map coordinates and displaying map tiles. Privacy.

6. International transfers

Some of our processors may transfer your personal data outside the United Kingdom and European Economic Area (in particular, Stripe and Vercel may use US-based infrastructure). Where this is the case the transfer is protected by Standard Contractual Clauses, adequacy decisions, or equivalent safeguards permitted under UK GDPR.

7. How long we keep your data

  • Account data — for as long as your account is active. When you delete your account we remove personal identifiers within a reasonable period, except where we are legally required to keep them.
  • Booking and payment records — kept for at least 6 years to comply with UK tax and accounting record-keeping obligations.
  • Partner applications — kept while you are a verified partner and for 12 months after the application is rejected or withdrawn, for audit purposes.
  • Notifications and content you posted — kept until you (or the organiser) delete it.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have your data erased ("right to be forgotten"), subject to legal exceptions.
  • Restrict how we use your data.
  • Receive your data in a portable format.
  • Object to processing based on our legitimate interests.
  • Withdraw consent where consent is the legal basis.

To exercise any of these rights, email admin@jguide.co.uk. We respond within one month.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use industry-standard measures to protect your data, including TLS-encrypted connections, hashed passwords, row-level access controls at the database, scoped API keys, and webhook signature verification for payments. No service is 100% secure; we cannot guarantee absolute security but we will notify you and the ICO of any breach where required by law.

10. Children

JGuide is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe we have, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above tells you when the current version came into effect. We will notify you of material changes by email or a prominent notice on the platform.

12. Contact

For privacy questions or to exercise any of your rights, email admin@jguide.co.uk.