Privacy policy

DECK, based in the United Kingdom, is responsible for your information. For the information described in this policy we are the "controller", which means we decide how and why it is used, except for the contacts DJs add themselves, explained in section 6.

Questions, requests or complaints about privacy go to info@deckofficial.com. We apply the UK GDPR and the Data Protection Act 2018, the EU GDPR where it applies, and the privacy laws of other places where our users live.

If you are a DJ with an account:

• Account details: your name, email address and password. Your password is handled by our login provider and we never see it.
• Your page: stage name, booking handle, city, country, genres, bio, fee range, links, mixes, residencies, gigs, rider and anything else you add.
• Your business: home currency, the legal name, business address and payment details you put on contracts.
• Your bookings: enquiries, offers, contracts, deposits, balances, gig sheets, reviews, contacts and notes.
• What you give our AI features: messages you paste in and conversations with the assistant.
• Your plan: which plan you are on, its status and billing dates. Your card details are held by Stripe, not by us.
• Messages you send us.

If you are a promoter or venue using a DJ's link:

• What you put in an enquiry: your name, email, phone number, organisation, the event, the fee you offer and your message.
• Offers and counter offers you make.
• When you sign a contract: the name, company, role and email you give, the time of signing and the internet address the signature came from.
• Gig sheet details and any review you leave, with the name you give.

From everyone, automatically:

• Technical information our servers record, such as internet address, browser and device type and the pages requested, used to keep DECK secure and working.
• The essential cookies and storage described in section 10.

Data protection law asks us to explain the legal reason for each use. These are ours:

Running your account, your booking page and your bookings, and sending the emails that go with them

To perform our contract with you, or for a promoter, to take the steps they asked for

Taking payment for plans and preventing fraud

To perform our contract, and our legitimate interest in preventing fraud

Keeping a record of signatures so a contract can be relied on

Our legitimate interest, and that of the DJ and promoter, in having evidence of what was agreed

Showing verified gigs, ratings and reviews

Our legitimate interest in giving promoters and DJs information they can trust

Keeping DECK secure, fixing problems and improving it

Our legitimate interest in running a reliable service

Keeping tax and accounting records

Our legal obligations

Product news and offers

Only with your permission, and you can stop them at any time

We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

The other side of a booking. A promoter sees the DJ's public page and, for their booking, the DJ's offers, contract, legal name and, once signed, the payment details the DJ provides. A DJ sees everything a promoter sends through their link, including the signature record.

The public. Anything a DJ publishes on their booking page can be seen by anyone with the link, including reviews and the name a reviewer gives.

The providers who help us run DECK, only for that purpose and under contracts that protect your information:

Supabase

Database, login and file storage

Lovable

Hosting the app, and routing requests to our AI provider

Google

The AI model behind the assistant and reading pasted messages

Stripe

Subscription payments, tax, receipts and fraud prevention

Resend

Delivering DECK's emails

We may also share information if the law requires it, to protect people's safety or our rights, or with someone who takes over DECK, who would have to respect this policy.

We do not sell personal information and we do not share it for advertising.

We do not use your content to train AI models.

DJs can add promoters, venues and other people to their contacts. For those entries the DJ decides what is kept and why, so the DJ is the controller and DECK stores the information on their behalf. DJs should only add people they have a genuine reason to contact, and should deal with any request from those people. We will help them do so.

Some of our providers store or process information outside the UK, including in the European Union and the United States. When that happens we rely on countries the UK recognises as protecting personal information properly, or on approved contract clauses, such as the UK International Data Transfer Addendum, that require the same level of protection.

Your account, page and bookings

While your account is open. Deleted within 90 days of closing it

Signed contracts and their signature records

Up to 6 years after the event, because either side may need them as evidence

Billing and tax records

As long as tax law requires, usually 6 years

Enquiries a DJ never acts on

While the DJ's account is open

Records of emails we have sent

Up to 2 years

Server logs

Up to 90 days

When we no longer need information, we delete it or remove anything that identifies you.

Everything travels encrypted. Each DJ's information is walled off so only their account can read it, and private booking links use long random codes that cannot be guessed. Passwords are handled by our login provider and are never visible to us.

No system is perfectly secure. If something goes wrong that puts your information at risk, we will tell you and the regulator when the law requires it.

Wherever you live, you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct anything that is wrong;
• delete your information;
• stop or limit how we use it, or object to a use based on our legitimate interests;
• send your information to you or someone else in a usable format.

Email info@deckofficial.com. We reply within one month, and we may ask you to confirm who you are first. Some rights have limits, for example we may need to keep a signed contract the other side relies on.

If you are in the UK and unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk. In the European Union you can complain to the regulator where you live. We would like the chance to put things right first.

If you live in the United States, including California, you have the right to know what we collect, to ask us to delete or correct it, and not to be treated differently for using these rights. We do not sell or share personal information as those laws define it.

DECK only uses storage it needs to work:

• keeping you signed in;
• remembering choices such as your currency;
• Stripe's cookies on the checkout page, which it uses to keep payments secure and stop fraud.

We do not use advertising cookies or cookies that track you across other websites. Because these are essential, we do not ask for your consent to use them.

DECK sends emails that are part of the service, such as new enquiries, offers, contracts ready to sign, signed copies, reviews and billing. These come with having an account or making a booking, so you cannot switch them off while you use DECK.

We only send news and offers if you have agreed to receive them, and every one of those emails lets you stop them.

DECK is not for anyone under 18. If we learn we have information about someone under 18, we delete it.

We will update this policy when DECK or the law changes. If a change matters, we will email account holders before it takes effect. The date at the top shows when it last changed.