PRIVACY POLICY

Last updated: March 2026

Who We Are

Hexlura is operated by Hexlura Ltd (Company No. 17102803), registered at 41 Junction Road, Northampton, England, NN2 7JA. We are registered with the Information Commissioner's Office (ICO). ICO Registration Number: [PENDING].

Contact: support@hexlura.com

What Data We Collect

We collect the following personal data:

Account data: name, email address, password (encrypted)
Booking data: ticket purchases, booking references, payment amounts
Payment data: processed securely by Stripe — we never store card details
Profile data: optional profile photo, organiser business details
Technical data: IP address, browser type, device information, cookies
Communications: emails you send to our support team

Why We Collect It (Legal Basis)

Contract performance: to process bookings and deliver tickets
Legal obligation: fraud prevention, financial record keeping
Legitimate interests: platform security, preventing abuse
Consent: marketing emails (you can unsubscribe at any time)

How We Use Your Data

Process ticket bookings and send confirmation emails
Generate PDF tickets and QR codes
Process payments via Stripe
Send transactional emails via Resend
Communicate important account or booking updates
Prevent fraud and ensure platform security
Comply with legal obligations

Who We Share Data With

Stripe: payment processing (their privacy policy applies)
Supabase: secure database hosting (EU/US data processing agreement in place)
Resend: transactional email delivery
Vercel: website hosting

We do not sell your personal data to third parties.

Data Retention

Account data: retained while your account is active + 7 years after closure
Booking data: 7 years (legal/tax requirement)
Marketing consent: until you withdraw consent

Your Rights (UK GDPR)

You have the right to:

Access your personal data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict processing of your data
Data portability — receive your data in a machine-readable format
Object to processing based on legitimate interests
Withdraw consent at any time for consent-based processing

To exercise your rights, email support@hexlura.com. We will respond within 30 days.

Cookies

We use essential cookies only for authentication and payment processing. See our Cookie Policy for full details.

International Transfers

Some of our service providers process data outside the UK. We ensure appropriate safeguards are in place including Standard Contractual Clauses where required.

Changes to This Policy

We may update this policy periodically. We will notify you of significant changes by email or via a notice on our platform.

Contact & Complaints

Email: support@hexlura.com
Address: Hexlura Ltd, 41 Junction Road, Northampton, England, NN2 7JA

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the ICO at ico.org.uk.