Privacy policy

Draft — pending legal review. Last updated October 2026.

This policy explains what personal data deckgigs collects, why, and your rights under UK GDPR (and, where applicable, US state privacy laws and Canada's PIPEDA).

What we collect

• Account data: name, email, password hash, country, account type.
• Profile data (DJs): stage name, bio, location (town and postal area), rates, genres, mix links, Instagram handle.
• Marketplace data: gig posts, pitches, messages, bookings, reviews, reports.
• Technical data: IP address, browser, and a security activity log used to detect abuse.

How we use it

To run the marketplace: showing DJ profiles publicly, matching gigs, enabling messaging and bookings, sending transactional email (verification, alerts, review invites), moderating abuse, and meeting legal obligations. We do not sell your data.

Third parties

We use Stripe for payments (they process card data, we never see it), and embed Mixcloud and SoundCloud players on profile pages — those services may set their own cookies when you press play. Hosting and email are provided by our infrastructure providers under contract.

Retention

We keep your data while your account is active. You can export your data or request deletion in account settings; deletion is processed after a short grace period. Security logs are kept for up to 90 days.

Your rights

You may request access, correction, export, or deletion of your data at any time via hello@deckgigs.com. You can also complain to the ICO (UK) or your local authority.