Privacy Policy

Attend is operated by KWAM2 LTD, company number 16339627, registered at 17 Fort Pitt Street, Chatham, England, ME4 6SX.

KWAM2 LTD is the data controller for the personal information described in this Privacy Policy.

For privacy questions or requests, contact Legal@KWAM2.Com.

1) About this policy

This Privacy Policy explains how Attend collects, uses, stores and shares personal information when you use Attend, create or attend events, purchase tickets, organise events, interact with other users or communicate with us.

It applies to Attend's website, progressive web application and related Attend services.

2) Age requirement

Attend is available to people aged 16 and over.

You must not create an Attend account if you are under 16.

Users aged 16 or 17 receive higher privacy protections by default. This includes private-by-default account settings, restrictions on profiling and personalised advertising, and additional protections around location information.

We may use date of birth or other proportionate age-assurance measures to establish whether these protections apply.

We do not publicly display your date of birth or whether you are under 18.

3) Information we collect

Account and profile information

We may collect your email address, first and last name, username, profile photo, biography, website, telephone number, date of birth, interests, social links, preferences, currency preference and privacy settings.

Location information

You may provide your country, state or region, city, street or postcode.

If you actively choose a location-detection feature, your device may provide coordinates so that we can identify your approximate location or support location-based Attend features.

Attend does not require continuous background location tracking.

Content and social activity

We process information you create or interact with on Attend, including posts, images, video, captions, comments, likes, reactions, stories, highlights, reposts, follows and other social interactions.

Events

If you create, manage or interact with an event, we may process event titles, descriptions, schedules, dates, venue and location information, ticket tiers, capacity, pricing, organiser information, speakers, performers and other event details.

Private-event functionality may also involve access links, invitations, access requests, messages, decisions and related records.

Tickets and payments

When you purchase a ticket, we process information relating to the order, event, ticket, amount, currency, payment status and identifiers supplied by our payment provider.

Full card numbers and card security codes are handled by Stripe, rather than being stored by Attend.

Refunds and disputes may involve payment references, reasons, amounts, evidence, status and outcomes.

Organiser payouts

Organiser payout onboarding and bank-account management are provided through Stripe Connect.

Stripe collects and verifies the bank and identity information required to provide these services. Attend receives information such as the connected-account identifier, verification status, payout status and outstanding requirements.

Attend does not require organisers to provide full bank-account details through their ordinary Attend profile.

Technical and security information

We may process IP address, user agent, referring page, request identifiers, authentication information, security events and technical information needed to operate, protect and troubleshoot Attend.

4) Why we use your information

We process personal information where necessary to:

• Provide your Attend account and the features you request.

• Allow you to create, discover, share and attend events.

• Provide tickets, purchases, refunds and organiser payouts.

• Provide social features and communications between users.

• Protect Attend, our users and event organisers from abuse, fraud, unauthorised access and other security threats.

• Provide customer support and investigate complaints or disputes.

• Meet legal, regulatory, accounting and tax obligations.

• Improve, maintain and understand the operation of Attend.

• Send marketing communications where permitted and where you have not opted out.

• Provide advertising where permitted by law and your privacy choices.

5) Our lawful bases

Depending on what we are doing, we rely on one or more lawful bases under UK data-protection law.

We rely on contract where processing is necessary to provide an Attend account, ticket, event or other service you have requested.

We rely on legal obligations where we must keep or process information to comply with applicable law, tax, accounting or regulatory requirements.

We rely on legitimate interests for activities such as protecting Attend from fraud and abuse, maintaining the service, resolving disputes and improving our systems where those interests are not overridden by your rights and interests.

Where a user is aged 16 or 17, we give additional weight to their interests and rights when assessing legitimate interests.

We rely on consent where consent is legally required, including certain cookies, advertising technologies, optional marketing activities or optional uses of precise location.

You can withdraw consent at any time where processing is based on consent.

6) Location

Location detection is optional and must be initiated by you.

Where precise coordinates are used, we limit their use to the feature that requires them and avoid retaining more precise information than is necessary.

For users aged 16 or 17, precise geolocation features are off by default and we apply additional restrictions to the retention and use of precise location.

Event locations and venue information may be publicly visible where an event organiser chooses to publish them.

7) Public and private information

Some Attend features are designed for sharing.

Information you choose to make public, such as a public profile, public event or public post, may be visible to other Attend users or visitors.

Private accounts and private events have additional access controls.

Users aged 16 or 17 start with high-privacy settings and must actively choose to make eligible information more widely visible.

8) Advertising and cookies

Attend may display advertising through Google AdSense.

We use Google's privacy and consent tools to manage advertising and related technologies where required.

Non-essential cookies or similar technologies requiring consent are not used until the required consent has been obtained.

You can change or withdraw applicable cookie choices.

Known users aged 16 or 17 are not subject to personalised advertising or behavioural profiling by default.

We do not currently use Google Analytics, Meta Pixel, TikTok Pixel, Mixpanel or Hotjar as part of the ordinary Attend web application.

9) Communications

We may send service communications including:

• Account and login messages.

• Ticket and purchase confirmations.

• Event invitations and updates.

• Cancellations.

• Refund information.

• Private-event and collaboration invitations.

• Organiser payout and verification communications.

• Safety, policy or legal notices.

These operational messages are different from marketing.

Where we send marketing communications, you can unsubscribe or change your marketing preference.

10) Who we share information with

We share personal information with service providers that help us operate Attend. Depending on the feature you use, these may include:

• Payment and payout providers.

• Cloud hosting, database, storage and content-delivery providers.

• Email and communications providers.

• Authentication providers.

• Location, mapping and geocoding providers.

• Advertising and consent-management providers.

• Artificial intelligence and other technology providers used to support limited Attend functionality.

• Professional, security, compliance and fraud-prevention service providers where required.

Where a provider is directly involved in a feature you use, we may identify that provider at the point the service is used or elsewhere in this Privacy Policy. For example, Stripe processes ticket payments and organiser payout services, and Google may provide sign-in and advertising services.

We only provide service providers with information reasonably necessary for their role, subject to appropriate contractual, security and data-protection requirements.

We may also disclose personal information where required by law, to protect Attend or its users, to investigate fraud, abuse or crime, to establish or defend legal claims, or in connection with a merger, acquisition, financing, restructuring or sale of all or part of the business.

We do not sell users' personal information.

11) International processing

Some of our service providers operate internationally.

This means personal information may sometimes be processed outside the United Kingdom.

Where UK data-protection law requires additional safeguards for an international transfer, we use an appropriate recognised transfer mechanism or other legally permitted safeguard.

12) How long we keep information

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected and for applicable legal, security and dispute-resolution requirements.

Ordinary account and profile information is generally retained while your account remains active.

When an account is deleted, information that is no longer required is deleted or anonymised within 30 days.

Deleted posts, comments, stories and associated media are ordinarily removed from the service immediately and purged within 30 days, unless there is a legitimate legal, security or safety reason to retain specific information.

Ordinary application and request logs are generally retained for up to 90 days.

Security and privileged-administration audit information may generally be retained for up to 12 months, or longer where required for an active security investigation.

Payment, refund, payout, transaction and associated accounting information may be retained for up to 6 years, or longer where required by law or an active dispute or investigation.

Stripe webhook payloads are ordinarily retained for up to 90 days.

Where you opt out of marketing, we may retain limited suppression information so that we can continue to respect your request.

Backup copies may remain temporarily within our ordinary disaster-recovery backup cycle before being overwritten or deleted.

13) Deleting your account

You can request deletion of your Attend account through the available account controls or by contacting us.

When account deletion begins, we disable the account and remove ordinary public access to the profile and associated content.

We then delete or anonymise personal information that we no longer require.

Some records may need to be retained for legal obligations, financial records, refunds, disputes, fraud prevention, safety investigations or the establishment, exercise or defence of legal claims.

Where possible, retained records are separated from the deleted account or reduced to the information genuinely required for that purpose.

14) Your rights

Depending on the circumstances, UK data-protection law may give you rights to:

• Access personal information we hold about you.

• Correct inaccurate information.

• Ask us to delete information.

• Restrict certain processing.

• Object to certain processing.

• Receive certain information in a portable format.

• Withdraw consent where we rely on consent.

• Complain about how your information is being handled.

Children have data-protection rights in their own name. Users aged 16 or 17 can contact us directly about their privacy rights.

To make a request, contact Legal@KWAM2.Com.

We may need to verify your identity before fulfilling a request.

You also have the right to complain to the UK Information Commissioner's Office.

15) Security

We use technical and organisational measures designed to protect personal information.

These include encrypted network connections, authentication controls, access restrictions, role-based administrative permissions, provider security controls, audit records and measures designed to prevent unauthorised access.

No internet service can guarantee absolute security.

16) Changes to this policy

We may update this Privacy Policy when Attend changes, when our processing changes or when legal requirements change.

Where a change is significant, we will provide appropriate notice.

The effective date at the top of this policy shows when it was last updated.

17) Contact us

For privacy questions, data-protection requests or concerns, contact:

KWAM2 LTD Company number: 16339627 17 Fort Pitt Street Chatham England ME4 6SX

Email: Legal@KWAM2.Com