LCNA Ticketing Privacy Notice

Who is responsible

The LCNA committee is responsible for how LCNA ticketing information is used.

Contact address:
LCNA
58 Donnington Road
London
NW10 3QU

Information we use

Squarespace collects the buyer information requested at checkout and manages your order. Stripe processes your payment details.

LCNA uses order and contact information to provide tickets, answer enquiries and manage events and their accounts. Without the necessary order and contact details, we may be unable to complete or deliver your purchase.

When our QR ticketing system is used, each purchased ticket receives its own QR code. Brevo processes the recipient’s email address and ticket message to deliver tickets and help resolve delivery problems.

The ticket register hosted by Supabase does not store buyer names, email addresses, postal addresses or phone numbers. It holds order references, purchase and ticket details, amounts, processing status and check-in records. Order references can be linked to buyers in Squarespace, so we still protect these records as personal information.

Why we use your information

We use information needed to fulfil ticket purchases and handle related enquiries on the basis of our contract with the buyer.

Ticket validation, check-in, security and error records support our legitimate interests in managing admission, preventing duplicate ticket use and keeping the system reliable.

Where applicable, we retain accounting records to meet legal obligations. We do not use these ticketing records for marketing.

Who can access information

Squarespace, Stripe, Supabase, Brevo and the payment provider process the information needed to provide their respective services.

Access to buyer contact details in Squarespace is restricted to the website admin. The admin and treasurer use order references for sales reconciliation.

Authorised Registration, Fundraising and Events Committee members can scan QR codes or look up order numbers to check people in. Registration Committee members can also view attendance information and reports.

Volunteers can scan QR codes or look up ticket or order numbers to check people in. They cannot access buyer contact details or the dashboard.

Reports shared more widely contain totals and quantities, without buyer details or order references. We may also disclose information where required by law.

How long we keep information

We review ticket and attendance records 90 days after each event and delete or anonymise records that are no longer needed.
Records needed for unresolved enquiries or disputes are kept until those matters are resolved. Finance records are retained for the period required by applicable accounting obligations.

Your rights

Email londonconventionna@gmail.com to request access to, correction of, deletion of or restrictions on the use of your personal information. You may also request a portable copy where applicable, or object to processing based on legitimate interests.

These rights depend on the circumstances. Some records may need to be retained to meet legal obligations.

You can also complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.

OVERSEAS PROCESSING

Our service providers may process ticketing information outside the UK. Applicable safeguards include UK adequacy arrangements or approved contractual safeguards, depending on the provider and destination.

Brevo stores its databases in the EU. Recipient email addresses, ticket messages and delivery logs may also be accessed for necessary support and maintenance in the United States, Canada and India, or processed by its subprocessors elsewhere. Brevo confirms that relevant overseas transfers are covered by applicable adequacy arrangements, including the UK Extension to the Data Privacy Framework where applicable, or Standard Contractual Clauses with the UK Addendum.

Brevo’s Data Processing Agreement and subprocessor list are available at https://www.brevo.com/legal/termsofuse/. Contact londonconventionna@gmail.com for further information about the safeguards used for your data.