Stagely Ltd Privacy Policy

This privacy notice outlines how Stagely Ltd ('we', 'our', 'us') collects, uses, and protects your personal information when you use our app and services. Stagely Ltd is a registered data controller with the Information Commissioner’s Office (ICO) under registration number ZB691522. We take security and data privacy seriously and implement stringent measures to protect your information.

Our contact details

Email daniel@stagely.app

What information we collect, use, and why

We collect and use the following information to provide and improve our services:

• Names and contact details: to create and manage your account, provide customer support, and communicate with you

• Email addresses: for account creation, login, and notifications

• User-generated content: including username, profile picture, photos, reviews, ratings, likes, check-ins, and comments related to theatre shows

• Theatre shows attended and interested in, including location and date: to provide personalised recommendations and timeline features

• Marketing preferences: to send you relevant updates and offers

• Website and app user journey information: to enhance user experience and functionality

• IP addresses: to improve security and prevent fraud

• Device information: to ensure app compatibility and performance

We may also collect and display information about theatre shows from public sources or contributed by our users.

Special Category Data Collection

We collect and use some additional information that is considered "Special Category Data" under the UK GDPR. Providing this information is entirely voluntary. This includes:

• Demographic information: This may include your ethnicity, disability status (physical, mental, or neurodivergent), and sexual orientation. We collect this information to support theaters and help them understand their audiences better. However, providing this information is entirely voluntary.
  
  

• Health information: We may collect limited health information if you choose to share it in user-generated content (e.g., by highlighting you have accessibility needs).

Lawful basis

Our lawful basis for collecting and using personal information are:

• Consent: for sending marketing communications and personalised recommendations

• Performance of a contract: for providing our services, processing payments, and managing user accounts

• Legitimate interests: for improving our services, ensuring security, and preventing fraud

• Legal obligations: for complying with legal and regulatory requirements

Where we rely on your consent, you have the right to withdraw it at any time.

Where we get personal information from

• People directly

• Publicly available sources

Data Retention and Security

Data Retention: We retain personal information only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Specific retention periods are as follows:

• User account information: retained as long as your account is active + 1 year.

• Transaction data: retained for 7 years for tax and accounting purposes

• Marketing data: retained until you opt-out or withdraw consent

• User-generated content: retained indefinitely unless you request its deletion

• Special Category Data: We retain Special Category Data for a maximum of 3 years after you last use Stagely or withdraw your consent.

Data Security: We implement robust technical and organizational measures to protect your data, including encryption, access controls, and regular security audits.

Data Visibility and Anonymisation

We believe in being transparent about what data is visible to others. Your privacy is protected through the following rules:

• Publicly Visible: Your username, profile photo, theatre reviews, ratings, and 'check-ins', favourite shows, wishlisted productions are visible to other users of the app.

• Strictly Private: Your email address, contact details, specific marketing preferences, and all Special Category Data (such as ethnicity, sexual orientation, or disability status) are never visible to other users, Stagely staff or customers.

• Aggregated Reporting: When we share insights with theatres or producers for example, we only provide anonymised, aggregate data. For example, a producer may see a report stating that "8% of tonight's audience could benefit from a captioned performance," but they will never be able to identify you personally from this data.

Account Deletion and Data Removal

In accordance with Apple’s App Store & Google's Play Store policies, Stagely provides users with a direct and easy way to delete their account from within the app. To delete your account and all associated personal data:

1. Navigate to the 'Settings' or 'Profile' section within the Stagely App.

2. Select 'Delete Account'.

3. Confirm your request.

Upon initiating account deletion, all personal data associated with your account—including your name, email address, and demographic information—will be permanently erased from our active databases. Any user-generated content (such as reviews or ratings) will be anonymised or removed. Please note that certain transaction data may be retained for a limited period as required by law for tax and accounting purposes. If you have any issues deleting your account via the app, you may also request deletion by contacting us at daniel@stagely.app.

Analytics and Tracking (Google & Firebase)

We use Google Analytics for Firebase to understand how our users interact with the Stagely app and to improve our services. This involves the collection of certain data, including:

• App-instance identifiers (a unique number generated for each app installation).

• Device identifiers (such as IDFA for iOS and Android Advertising ID).

• App usage events, session duration, and general geographic location (derived from IP addresses).

Google Analytics for Firebase helps us analyse user behaviour in an aggregated and pseudonymised manner. You can opt-out of certain Firebase features through your mobile device settings, such as your device advertising settings, or by following the instructions provided by Google in their Privacy Policy.

Who we share information with

We may share anonymised and aggregated data with third-parties providers to improve our services. We will never share your personal information with marketing partners without your explicit consent.

Data processors

Amazon Web Services, Inc. ('AWS')

We use AWS for data storage and processing. AWS acts as our data processor, storing and processing your data on our behalf. AWS ensures compliance with applicable data protection laws and implements robust security measures to protect your data.

Google LLC (Firebase & Google Analytics)

We use Google services to provide backend infrastructure (Firebase) and to track app usage and performance (Google Analytics). Google acts as a data processor on our behalf and complies with international data transfer regulations including the UK Extension to the EU-U.S. Data Privacy Framework.

Other organisations

• Publicly on our website, social media or other marketing and information media (where appropriate)

Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place, such as ensuring transfers are to countries deemed to provide an adequate level of data protection.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal data.

Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.

You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Security Breach Notification

In the event of a data breach that compromises your personal information, we will notify you as soon as reasonably practicable and take appropriate steps to mitigate the risk.

By creating an account, you agree to our Privacy Policy. Where you choose to provide Special Category Data (such as disability or ethnicity information), you are giving us your explicit consent to process that data for the purposes of anonymised reporting to theatres and producers. You can remove this data or withdraw your consent at any time within your account settings.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice. If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address: Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline number: 0303 123 1113 Website: https://www.ico.org.uk/make-a-complaint

Last updated 26 January 2026