← Back to Events

Privacy Policy — Tooting Newsie Events Page

Draft prepared 20 July 2026. This is a starting draft, not legal advice — see the note at the end before publishing.

1. Who we are

This policy covers the Tooting Newsie Events page only (not the wider Tooting Newsie social media accounts or newsletter, which are covered separately). The data controller is:

Tooting Newsie

Contact: tooting@localnewsie.co.uk

2. What data we collect

When you submit an event listing, we collect:

  • business/organiser name
  • event details (name, date, time, venue, description, category)
  • your contact email address
  • a photo or flyer you upload
  • if you pay for a listing, basic payment confirmation from our payment provider (Stripe) — we do not see or store your full card number, expiry date, or CVV; Stripe handles this directly.
  • if you create an account for a subscription, your login email and subscription tier.

3. Why we collect it, and our lawful basis

We use this data to publish and manage your listing, process payment, and contact you about your listing if needed (e.g. a query about your submission). This is necessary to perform the contract you enter into when you submit a paid or free listing.

4. How long we keep it

Once an event's date and end time have passed, we automatically delete the listing and all associated data — including the photo/flyer, contact email, and event details — from our systems, within 7 days of the event ending. We don't keep an ongoing record of past events or the personal data submitted with them.

If you hold an active subscription, your account email and subscription status are kept for as long as your subscription is active, and deleted within 7 days of cancellation.

5. Who we share it with

We use two third-party processors to run the Events page:

  • Supabase (database and file storage) — stores listing data and uploaded photos while a listing is live.
  • Stripe (payments) — processes card payments; we never see your full card details.

We don't sell or share your data with anyone else, and we don't use it for advertising or marketing beyond the Events page itself.

6. Your rights

Under UK data protection law, you have the right to:

  • ask what personal data we hold about you and get a copy (right of access);
  • ask us to correct inaccurate data;
  • ask us to delete your data (though if an event is still upcoming, this may mean removing your listing);
  • object to or restrict certain processing;
  • complain to the Information Commissioner's Office (ICO) — the UK's independent data protection regulator — at ico.org.uk, if you're ever unhappy with how we've handled your data. (This is a standard right included on every UK privacy policy; it doesn't imply anything's wrong, just tells you who to go to if it ever were.)

To exercise any of these, contact tooting@localnewsie.co.uk.

7. Cookies & similar technology

The Events page does not use cookies, analytics, or any advertising/tracking technology.

The only thing stored in your browser is a login session — if you sign in as a subscriber, our system (Supabase) saves a small piece of data locally on your device so you stay logged in between visits. This isn't a cookie in the technical sense, and it isn't used to track you or for advertising — it exists purely so the account feature works. It's removed if you sign out or clear your browser data.

8. Children

Many events listed on the Events page will of course be aimed at children and families — that's not the issue this section covers. This section is about who *submits* a listing: the submission form is intended to be filled in by an adult (a business owner, event organiser, school staff member, or parent/guardian booking on a child's behalf), not by a child submitting their own details. We don't knowingly collect personal data directly from anyone under 18 through the listing form itself.

9. Changes to this policy

We may update this policy from time to time; the current version will always be available on the Events page.

10. Contact

Questions about this policy, or to exercise your data rights: tooting@localnewsie.co.uk

Note: this draft is written to match the actual data practices of the Events page as built (Supabase for storage, Stripe for payments, automatic post-event deletion). That last point — automatic deletion — currently needs to be built into the system to match what this policy says; the policy shouldn't go live claiming deletion happens automatically until it actually does. This document is not a substitute for review by a qualified solicitor, particularly given that payments and personal data are involved.