Privacy Policy

Privacy Policy

Your privacy is important to us. It is Cinematik Limited's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://www.cinematik.app, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

This policy is effective as of 16 May 2022.
Last updated: 5 August 2026.

Information We Collect

Information we collect falls into one of two categories: 'voluntarily provided' information and 'automatically collected' information.

'Voluntarily provided' information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.

'Automatically collected' information refers to any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device's Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.

Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem.

Device Data

When you visit our website or interact with our services, we may automatically collect data about your device, such as device type, operating system, unique device identifiers, and approximate (city-level) location. Data we collect can depend on the individual settings of your device and software.

Personal Information

We may ask for personal information — for example, when you register for an account, book a ticket, subscribe to our newsletter, or contact us — which may include one or more of the following:
• Name
• Email address
• Date of birth
• Phone/mobile number
• Postcode
• Payment details (processed securely by our payment provider; see below)

Legal Bases for Processing Your Personal Information

We only collect and use your personal information when we have a lawful basis for doing so. Depending on the activity, our lawful bases are:
• Performance of a contract — to create and manage your account, process your bookings, and take payment.
• Consent — to set analytics and advertising cookies and share activity with our advertising partners (see "Analytics and advertising" below), and to send you marketing communications where consent is required. You can withdraw consent at any time.
• Legal obligation — for accounting, tax, and fraud-prevention purposes.
• Legitimate interests — to keep our service secure, to understand and improve how it is used through our own first-party measurement, and to respond to your enquiries, balanced against your rights and freedoms.

Collection and Use of Information

We may collect, hold, use and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:
• to provide you with our platform's core features and services, including ticketing and checkout
• to enable you to customise or personalise your experience of our website
• to contact and communicate with you
• for analytics and to understand and improve our website, applications, and campaigns
• for advertising and marketing, where you have consented
• for internal record keeping, security, and administrative purposes

Analytics and Advertising

We use both our own first-party analytics and, with your consent, third-party analytics and advertising services.

Sparkline (our own analytics). We operate our own first-party measurement, "Sparkline". For visitors who do not accept analytics cookies, it measures your visit without cookies and without any persistent identifier, and your IP address is masked. Visitors who accept analytics cookies are given a first-party identifier so we can recognise return visits.

Third-party analytics and advertising. Where you accept analytics and advertising cookies, we use:
• Meta (Facebook and Instagram) — we send Meta records of key actions on our site (such as page views, add-to-cart, registrations, purchases, and newsletter sign-ups), both from your browser and directly from our servers. This includes your email address in hashed (irreversible) form — and for purchases your name, postcode and country, also hashed — together with your IP address and browser user-agent. Meta uses this to measure and attribute advertising.
• Google Analytics and Google Ads — we send Google measurement events and, for conversions, your email address in hashed form, so Google can measure the performance of our advertising.

If you decline analytics and advertising cookies, none of the above third-party sharing takes place, and only our cookieless first-party measurement runs. You can change or withdraw your choice at any time using the "Cookie settings" link in the footer of our website. Please also see our Cookie Policy.

Service Providers We Share Information With

We use a number of trusted third parties to operate our platform. Where they process personal information, they do so on our behalf and under contract, or as independent controllers under their own policies:
• Stripe — payment processing. Your card details are provided directly to Stripe and are never stored on our systems.
• Amazon Web Services (SES) — delivery of our transactional and, where you have opted in, marketing emails.
• Google Maps Platform — we send the postcode you provide to look up an approximate location, for example to show events near you.
• Google Calendar — if you book a demonstration of our platform, your name and email are added to our booking calendar.
• AppSignal — error monitoring, configured to exclude personal data.
• Railway — our hosting and infrastructure provider, which processes data on our behalf within the EU.
• Meta and Google — as described under "Analytics and Advertising" above.

We may also disclose personal information to our professional advisers, to a purchaser of our business or assets, and to courts, regulators, or law enforcement where required by law or to establish, exercise, or defend our legal rights.

International Data Transfers

Some of our providers, including Meta and Google, are based in the United States. Where personal information is transferred outside the UK and the European Economic Area, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, and the EU–US / UK–US Data Privacy Framework, to ensure your information remains protected.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services.

How Long We Keep Your Personal Information

We keep personal information only for as long as we need it for the purposes set out in this policy:
• Account and booking information — for as long as you hold an account with us, and afterwards where we need to meet legal, accounting, tax, or reporting obligations.
• Marketing preferences — until you unsubscribe or ask us to stop.
• Analytics information linked to you — for as long as needed to understand and improve our service; where it is linked to your consent, we delete the analytics records associated with you if you withdraw that consent.

When personal information is no longer required, we will delete it or make it anonymous by removing the details that identify you.

Children's Privacy

We do not aim any of our products or services directly at children under the age of 13, and we do not knowingly collect personal information about children under 13.

Your Rights and Controlling Your Personal Information

Your choice: By providing personal information to us, you understand we will collect, hold, use, and disclose it in accordance with this privacy policy. You do not have to provide personal information to us, but if you do not, it may affect your use of our website or the services offered through it.

Your rights: Subject to applicable law, you have the right to request access to the personal information we hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on consent, you can withdraw it at any time — including by using the "Cookie settings" link in the footer for analytics and advertising cookies, or by unsubscribing from marketing emails.

Non-discrimination: We will not discriminate against you for exercising any of your rights over your personal information.

Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide full details of the alleged breach. We will investigate and respond to you in writing. You also have the right to lodge a complaint with a data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).

Unsubscribe: To unsubscribe from our email database or opt out of marketing communications, please use the opt-out facility provided in the communication, or contact us using the details below.

Use of Cookies

We use cookies to collect information about you and your activity across our site. Please refer to our Cookie Policy for full details of the cookies we use and how to control them.

Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy.

Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy. If the changes are significant, or if required by applicable law, we will contact you with the new details.

Contact Us

For any questions or concerns regarding your privacy, or to exercise any of your rights, you may contact us at:
Cinematik Limited
privacy@cinematik.app