Privacy Policy

Who We Are

Hexlura is operated by Hexlura Ltd (Company No. 17102803), registered at 41 Junction Road, Northampton, England, NN2 7JA. We are registered with the Information Commissioner's Office (ICO). ICO Registration Number: [PENDING].

Contact: support@hexlura.com

What Data We Collect

We collect the following personal data:

• Account data: name, email address, password (encrypted)

• Booking data: ticket purchases, booking references, payment amounts

• Payment data: processed securely by Stripe — we never store card details

• Profile data: optional profile photo, organiser business details

• Technical data: IP address, browser type, device information, cookies

• Communications: emails you send to our support team

Why We Collect It (Legal Basis)

• Contract performance: to process bookings and deliver tickets

• Legal obligation: fraud prevention, financial record keeping

• Legitimate interests: platform security, preventing abuse

• Consent: marketing emails (you can unsubscribe at any time)

How We Use Your Data

• Process ticket bookings and send confirmation emails

• Generate PDF tickets and QR codes

• Process payments via Stripe

• Send transactional emails via Resend

• Communicate important account or booking updates

• Prevent fraud and ensure platform security

• Comply with legal obligations

Who We Share Data With

• Stripe: payment processing (their privacy policy applies)

• Supabase: secure database hosting (EU/US data processing agreement in place)

• Resend: transactional email delivery

• Vercel: website hosting

We do not sell your personal data to third parties.

Data Retention

• Account data: retained while your account is active + 7 years after closure

• Booking data: 7 years (legal/tax requirement)

• Marketing consent: until you withdraw consent

Your Rights (UK GDPR)

You have the right to:

• Access your personal data

• Rectify inaccurate data

• Erase your data ("right to be forgotten")

• Restrict processing of your data

• Data portability — receive your data in a machine-readable format

• Object to processing based on legitimate interests

• Withdraw consent at any time for consent-based processing

To exercise your rights, email support@hexlura.com. We will respond within 30 days.

Cookies

We use essential cookies only for authentication and payment processing. See our Cookie Policy for full details.

International Transfers

Some of our service providers process data outside the UK. We ensure appropriate safeguards are in place including Standard Contractual Clauses where required.

Changes to This Policy

We may update this policy periodically. We will notify you of significant changes by email or via a notice on our platform.

Contact & Complaints

Email: support@hexlura.com
Address: Hexlura Ltd, 41 Junction Road, Northampton, England, NN2 7JA

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the ICO at ico.org.uk.