Privacy policy

Who we are

Gig Spot UK is a live music listings site operated by The Stitch Factory Ltd., which is the data controller for the personal information described here.

We have not appointed a data protection officer. The quickest way to reach us about anything on this page is the contact form; you can also write to us at the address above.

What we collect, and when

You can browse the whole site without giving us anything. We only collect personal information when you choose to send it:

• Listing enquiries — when you use the “list your gigs” or “contact” forms we store the type of contact you are, your name, email address, the act, venue or company name you give, your town, your message, and whether you ticked the marketing box.
• Event submissions — when you submit a gig we store the venue name, your name, your email address and the event details you enter.
• Problem reports — when you report a problem with a listing we store which listing it was, what you said is wrong, your description, and your email address if you chose to give one. The email address is optional and the form works without it.

Why we hold it

Enquiries and submissions are kept as records, not just as messages, so that we can reply to you, check listings, and recognise you if you get in touch again. Our lawful basis is legitimate interests — running a listings site and answering the people who write to us.

Marketing email is different. We only send it if you tick the box, which is never ticked for you, and your consent is recorded with the date you gave it. You can withdraw it at any time, either from the unsubscribe link on any marketing email or by asking us through the contact form.

Where it is stored, and who else sees it

• Supabase hosts our database. Everything described above is stored there. Form submissions can be written but never read back by the public site.
• Cloudflare hosts and serves the site, and provides the anti-spam check on our forms (Cloudflare Turnstile). Turnstile checks that a submission comes from a person rather than a script; it may set a cookie of its own to do that.
• Brevo handles our email. If — and only if — you gave marketing consent, your name, email address and contact type are added to a mailing list there. Without that consent your details are not sent to any mailing list.

Supabase, Cloudflare and Brevo act as our processors: they handle this information on our instructions and for no purpose of their own. Where any of that processing happens outside the UK, it is covered by recognised safeguards — the UK International Data Transfer Agreement or standard contractual clauses.

We do not sell your information, and we do not share it with anyone else for their own marketing.

Cookies and tracking

We run no analytics, advertising or social media tracking on this site — there are no tags of that kind in our pages at all. The only cookie you may pick up is the one Cloudflare Turnstile sets when it runs the anti-spam check on a form.

Where our event listings come from

Gig listings are gathered from public sources — ticketing and listings APIs such as Skiddle, and information venues and promoters publish themselves — as well as from events people submit to us directly. Listings describe public performances. If you are an artist, promoter or venue and want a listing corrected or removed, use the “report a problem” link on the listing or the contact form, and we will deal with it.

How long we keep it

We keep enquiries, submissions and problem reports for 24 months after we last heard from you, and then delete them. If you get in touch again within that time the clock starts over, because the point of keeping them is to know who we are talking to. If you would rather we deleted yours sooner, ask us and we will.

There is one exception. If you gave us marketing consent, we keep your contact record and the record of that consent for as long as you are subscribed — that record is the evidence that you agreed.

Once you unsubscribe, that exception stops applying. We record the withdrawal against your contact record, and from then on it falls under the ordinary rule above: deleted 24 months after we last heard from you, the same as any enquiry that never opted in. If that is already more than 24 months ago, the next scheduled deletion removes it. You do not have to ask us separately — unsubscribing is enough — but you can ask, and we will delete it sooner.

Your rights

Under UK data protection law you can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, object to how we are using it, ask us to restrict its use, or ask for it in a portable form. Where we rely on your consent — that is, marketing email — you can withdraw it whenever you like, and doing so does not affect anything we sent before.

Use the contact form for any of these. If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

If we change what we collect or what we do with it, we will update this page and the date at the top.