Privacy policy

showme. is run by [to be confirmed], [to be confirmed]. For the purposes of UK data protection law, the operator of showme. is the controller of the personal data described here. ICO registration: [to be confirmed].

Questions about this policy or your data: [to be confirmed].

• Your account. Your email address, the name you choose to display, and optionally a photo, a one-line description and a short bio.
• Where you are. Your postcode and how far you are willing to travel, if you give them, so we can show you shows nearby. We store the postcode and the coordinates of that postcode. Only you can see them.
• Vendor and organiser profiles. The trading name, description, links, stock and logo you publish, and for organisers a contact email. These are public.
• Shows and applications. The shows you list, the applications you send, the tables you are given, and the shows and vendors you follow.
• Messages. What you send to an organiser or a vendor through showme. The other person in the conversation can read it; nobody else can, except our staff when a message is reported.
• Payments and tickets. Where a show takes payment through showme.: what you paid for, how much, when, and Stripe’s reference for it, and the tickets and vendor passes that came with it. Your card details go to Stripe and never reach us.
• Reports. What you report and why.
• Technical data. The basic request information any website receives (IP address, browser type, time), kept by our hosting provider for security and reliability.
• Errors and usage. When something breaks, a report of what broke, on which page and in which browser or app version. And counts of which pages are visited and how fast they load, without cookies and without anything that identifies you.

We do not collect special category data, and we ask you not to put any in your profile.

Before showme. opens, the holding page asks for your email address, whether you are an organiser, a vendor or a collector, and optionally your Instagram handle.

• Why: to invite you when showme. opens to people like you, to send you news about the launch, and to ask some of you for feedback that helps shape the product. Our lawful basis is legitimate interests: you asked to hear from us.
• Who sees it: only the showme. team. It is not shared with organisers, vendors or anyone else, and not used for advertising.
• How long we keep it: until you have been invited and made an account, or twelve months after you registered if you have not, whichever comes first. Then we delete it.
• To be removed sooner, write to [to be confirmed] from the address you registered and we will delete it.

• To provide the service you asked for (contract): signing you in, showing shows near you, sending your application to an organiser, delivering your messages.
• To tell you about things you followed or applied to (contract and legitimate interests): an application being accepted or declined, a show you favourited changing or being cancelled, a vendor you follow appearing at a show near you. You can turn each of these emails off in your profile, except the outcome of an application you sent.
• To keep the service safe (legitimate interests): preventing abuse, handling reports, and removing content that breaks the acceptable use policy.
• To fix and improve showme. (legitimate interests): finding out what broke and which pages are slow, from error reports and anonymous page counts.
• To take payment for a table or a ticket (contract), where the show does so through showme.
• To meet legal obligations, where they apply, such as keeping payment records.

We do not sell your data, and we do not use it for advertising.

These companies process data for us, under contract and only on our instructions, except Stripe, which is responsible for payment data itself:

• Supabase — our database, sign-in and image storage, hosted in London.
• Vercel — hosts the website, and counts page visits and page speed without cookies (Web Analytics and Speed Insights).
• Sentry — receives the error reports described above, from the website and the app.
• Resend — sends our emails, including your sign-in link.
• Stripe — takes card payments for shows that use them, on behalf of the organiser, whose own Stripe account receives the money. Stripe collects your card details itself and is responsible for them under its own privacy policy.
• postcodes.io — turns a postcode into coordinates. It receives the postcode, not who you are.
• OpenFreeMap — serves the map tiles. Your browser requests them directly, so it sees your IP address.

Some of these providers process data outside the UK. Where they do, the transfer is covered by the UK’s adequacy regulations or by the standard contractual safeguards approved for that purpose.

Organisers see the details of the vendors who apply to their shows, including the contact email given on the application. Each organiser is responsible for how they use it.

• Your account and everything in it: until you delete your account.
• Shows, and the public record of which vendors were at them: kept after the show has ended, because a vendor’s history is part of their profile.
• Reports: kept after the reporter’s account is deleted, without their identity.
• Payments: Stripe keeps its record of every payment for as long as the law requires. If you delete your account, our record of a ticket order stays, without your name, so the show’s takings still add up.
• Error reports: up to 90 days.
• Technical logs: for as long as our hosting provider retains them, typically days.

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to move it elsewhere. Two of these you can do yourself:

• Download your data from your profile, as a JSON file.
• Delete your account from your profile. It removes your profile, vendor and organiser identities, applications, follows and notifications. Messages you sent are removed with it.

For anything else, write to [to be confirmed]. We reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.

You must be 16 or over to have an account. If you believe someone younger has signed up, tell us and we will remove the account.

We use only the cookies needed to keep you signed in and remember your postcode. See the cookie policy.

When this policy changes in a way that matters, we will tell account holders by email or in the app before it takes effect.