Privacy Policy

1. Data controller

For the purposes of this Privacy Policy, the data controller is GigxMatch. Contact details: [email protected].

2. Personal data we collect

We may collect and process the following categories of personal data:

• Account information – username, email address, password (hashed if set), first and last name, contact phone, selected role. If you sign in with Google, we may receive identifiers from your Google account (for example, Google account ID, email address and display name).
• Profile information – for artists and venues, profile descriptions, performance or venue details, approximate location, links to websites or social media.
• Usage data – pages viewed, actions taken on the platform, approximate device and browser information, IP address and timestamp.
• Communication data – messages you send via our platform, enquiries, feedback and support requests.
• Transactional and administrative data – basic records of bookings, matches or interactions on the platform, and related notifications we send you.

Where practicable, we try to minimise the amount of directly identifiable personal data we collect and to keep sensitive details in private dashboards rather than on public pages.

3. Purposes and manner of collection (PDPO DPP1)

We collect personal data by lawful and fair means, for purposes directly related to operating and improving the Service. Where required, we will inform you of whether providing certain data is mandatory or voluntary, and the consequences of not providing it.

4. How we use your personal data (PDPO DPP3)

We use your personal data for purposes including:

• creating and managing your account, and providing the Service you request;
• facilitating matching, discovery and communication between artists, venues and event organizers;
• sending transactional emails, such as verification emails, notifications and important updates about your account or listings;
• maintaining the security, integrity and performance of the Service;
• responding to your enquiries and support requests;
• analysing aggregate usage patterns to improve the Service;
• complying with legal and regulatory obligations, including responding to lawful requests from authorities.

5. Direct marketing

If we use your personal data for direct marketing, we will do so in accordance with the PDPO. Where required, we will obtain your consent (or indication of no objection) before sending marketing messages.

You may opt out at any time by using the unsubscribe link in our emails or by contacting us at [email protected].

6. How we share your personal data

We may share your personal data in the following circumstances:

• With other users – limited profile information necessary to enable discovery and contact on the platform (for example, artist or venue profiles).
• Service providers – trusted third parties who help us operate the Service, including email and hosting providers, analytics services, and providers of third-party object storage for media (for example, Aliyun OSS), under contractual obligations of confidentiality and data protection.
• Legal and regulatory – where required by law, regulation, court order or governmental request, or to protect our rights, property or safety, or that of our users or the public.
• Business transfers – in connection with a merger, acquisition, restructuring or sale of assets, subject to appropriate safeguards.

We do not sell your personal data to third parties for their own direct marketing purposes.

7. International transfers

The Service may be hosted or processed in locations outside your jurisdiction. Media you upload and underlying infrastructure may also be processed or stored outside your jurisdiction. Where we transfer personal data internationally, we aim to take appropriate steps so that your data receives an adequate level of protection consistent with applicable privacy laws.

8. Data retention and accuracy (PDPO DPP2)

We keep your personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by law. In general, this means:

• account and profile data – for as long as your account is active and for a reasonable period afterwards for backup, audit and dispute-handling;
• transactional and log data – for periods consistent with legal limitation periods and our operational needs;
• communications – for a period necessary to address your requests and maintain records.

We take reasonable steps to keep personal data accurate and up to date. You can update certain information in your account settings.

We aim to anonymise or aggregate data where possible so that it no longer identifies you personally when detailed data is no longer needed.

Account deletion process: If you start an account deletion request in the Security section of your account settings, we will send a confirmation link to your registered email. During the 24-hour cooling-off period after you start the request, your account remains active and you may continue to sign in. You may cancel the deletion request at any time during this period from account settings or via the confirmation link.

During the cooling-off period, you may complete a short exit questionnaire via the confirmation link to tell us why you are leaving. Responses are used only for internal service improvement and aggregate analysis.

When the cooling-off period ends (24 hours after the request):

• If you completed the questionnaire and did not cancel — we will automatically close your account: sign-in will be disabled, public artist or venue profile content will be removed, and identifiable account data will be anonymised;
• If you did not complete the questionnaire and did not cancel — the deletion request will be automatically cancelled and your account will remain active; we will email you to confirm the cancellation.

After closure, historical show invitations, gig requests, and match records involving other users may be retained in de-identified form (for example, displayed as “Deleted artist”) so those users’ records remain intact. If you cannot use email or the self-service flow, contact [email protected]; we may need to verify your identity before processing your request.

9. Your rights (PDPO DPP6)

Subject to applicable law, you may have rights in relation to your personal data, including:

• the right to request access to the personal data we hold about you;
• the right to request correction of inaccurate or incomplete data;
• the right to request deletion of certain data, subject to legal or contractual obligations;
• the right to object to or restrict certain processing, where applicable; and
• the right to withdraw your consent, where processing is based on consent.

To exercise your rights or to raise a question about your personal data, please contact us at [email protected]. We may need to verify your identity before responding to your request.

10. Security (PDPO DPP4)

We use reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your password and account details confidential, and for logging out of your account after use, especially on shared devices.

11. Cookies and similar technologies

We may use cookies and similar technologies to operate the Service, remember your preferences and analyse how the Service is used. Details of the specific cookies and configuration may be provided in a separate cookie notice or within this Policy in a later, lawyer-reviewed version.

12. Third-party links

The Service may contain links to third-party websites or services. These are governed by the privacy policies of the respective third parties. We are not responsible for the privacy practices of such third parties, and we encourage you to review their policies before providing personal data.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will take steps we consider reasonably appropriate to notify you, for example by updating this page and, where appropriate, providing a notice in the Service.

Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the updated Policy.

14. Contact

If you have questions or concerns about this Privacy Policy or our handling of your personal data, please contact:

Email: [email protected]