Legal
Privacy policy
Rhythm Assembly app and website · Last updated 22 October 2026
This policy explains what personal information the Rhythm Assembly app and website collect, why, who sees it, how long we keep it and your rights. Rhythm Assembly is run by Hugh Haughton, trading as Rhythm Assembly, in the United Kingdom (“we”, “us”). We are the controller of your personal information. Contact us at hello@rhythmassembly.co.uk.
What we collect
- Account details: your name, optional alias, email address, password (stored scrambled), mobile number, town and date of birth (to check you are 18 or over).
- Tickets and purchases: the tickets you buy or are given, guest-list places, shop orders and refunds. Card details are entered on Stripe’s secure page and never reach us.
- At events: when your ticket is scanned at the door.
- Things you add: your profile photo, messages to the team or a promoter, after-event feedback, travel bookings and files you save in My trip, and clips you post in a Swarm.
- Delivery details if you choose to have a shop order posted.
- App use: the days you open the app (for Rewards points) and a device token so we can send you notifications.
Why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Running your account, selling and checking tickets, the shop, Rewards, messages and notifications you ask for | Contract – to provide the service |
| Checking you are 18 or over; preventing fraud and misuse | Legal obligation and legitimate interests |
| Keeping sales and refund records | Legal obligation (tax and accounting) |
| Offers and event news from promoters; your name on welcome screens at events; messages from promoters after events | Your consent – switch each on or off in Profile at any time |
| Emails about your account, such as your ticket or reminders to get the app if you joined at an event’s door | Contract and legitimate interests – each reminder email has a link to stop them |
Who sees your information
- Promoters whose events you buy tickets for see your first name and initial (or alias), membership number and ticket references. If you switch on promoter offers, promoters also see your town, age range and Rewards level. Promoters never see your full name, email address, phone number or date of birth. Promoters see after-event feedback without your name. If you block a promoter, they aren’t told who blocked them.
- A promoter’s supplier receives your name and delivery address if you choose to have a shop order posted.
- Door staff see your name, ticket and photo when checking you in.
- Service providers who work for us: Supabase (database and sign-in, hosted in London), Stripe (card payments), Resend (emails), Expo, Apple and Google (app notifications), and Cloudflare (website). They may only use your information to provide their service to us.
We never sell your information. Some providers may handle data outside the UK; where they do, they use safeguards approved under UK law, such as the UK’s international data transfer agreements.
How long we keep it
- Your account information is kept until you delete your account.
- When you delete your account, your personal details, photo, messages, trips, notifications and Rewards points are deleted straight away. See how to delete your account.
- Sales and refund records are kept, with your name removed, normally for six years as UK law requires.
- A record of your consent choices is kept so we can show we respected them.
Your rights
You can ask to see, correct or delete your information, object to how we use it, ask us to restrict it, or ask for a copy to take elsewhere. You can withdraw consent at any time in the app’s Profile – withdrawing never costs you anything, including Rewards points you have earned. To use any of these rights, email hello@rhythmassembly.co.uk. If you are unhappy with how we handle your information you can complain to the Information Commissioner’s Office at ico.org.uk.
Age
Rhythm Assembly is for people aged 18 and over. We don’t knowingly collect information from anyone younger.
On your phone and this website
The app stores your sign-in and a copy of your tickets on your phone so they work without signal at the door. Neither the app nor this website uses advertising or tracking cookies.
Changes
If we change this policy we will update the date above and tell you in the app if the change is important.