Privacy policy

• Gigz Hub is a trading name of Heritage Planning Specialists Ltd, a company registered in Jersey, registration number 157763.
• We are a registered data controller with the Jersey Data Protection Authority, data protection registration reference 101842.
• Email: enquiries@gigzhub.je — for anything about your personal information, including a request to see, correct or delete it.
• Website: gigzhub.je.

We are the data controller for the information described in this policy. Where a musician or venue contacts you directly after using the site, they become a separate controller of that conversation.

We only ask for what the service actually needs. Everything below is information you give us, unless stated otherwise.

• Your account: your email address and display name, and either a password (held in hashed form by our sign-in provider) or, if you choose Google sign-in, the name and email address Google shares with us. We also record whether your account has admin access.
• Musician profiles: act name, parish, music styles, line-up size, typical budget, your pitch and bio, the photos, videos and audio you upload, and links to your merch and social pages. We also hold a booking email address and phone number, which are not printed on your page.
• Venue profiles: venue name and address, contact phone number and email address, and the hire details you choose to add — description, facilities, equipment, capacity, hire fee, opening hours, photos and logo.
• Gig adverts: venue, act names, date, times, entry price, ticket link, description and poster artwork.
• Enquiries and applications: booking requests (your name, email, the venue, date, budget and message), hire enquiries (name, email, phone, event type, preferred date, guest numbers and message), open-slot applications (act, email, phone and message), line-up invitations (email address, act name and who sent it), sponsor enquiries (business, contact name, email, phone, website and message) and early access requests.
• Reports: if you tell us about a problem, we hold your name, email, phone number, your role, the details you give and who or what the report is about.
• Reviews: the reviewer's display name, rating and review text, linked to the act they reviewed.
• To stop spam and abuse: a short-lived, internal record that a form was submitted and how often, so we can rate-limit it. We do not use this to build a profile of you.

We do not collect payment card details on this website — listing, advertising and booking enquiries are all free.

Under the Data Protection (Jersey) Law 2018 we need a lawful basis to process personal information (Article 9). Ours are:

• Consent (Article 9(2)(a)): creating your account, publishing your profile, photos, videos and tracks, and the contact details you choose to give us. You can withdraw consent at any time by editing or deleting a listing, or by closing your account.
• Contract and pre-contract steps (Article 9(2)(b)): handling an enquiry you send or receive, replying when you get in touch, and sending you an invite or a decision you have asked us for.
• Legitimate interests (Article 9(2)(f)): keeping the directory accurate and safe — approving new profiles and adverts, spotting fake listings, spam and fraud, and investigating concerns reported to us.
• Legal obligation (Article 9(2)(c)): keeping accounting records for the period Jersey law requires.

We do not sell or rent personal information, we do not share it for advertising, and we do not make automated decisions about you or profile you.

• Musician profiles, venue listings, gig adverts and the monthly What's On calendar are public — that is the purpose of the site.
• A musician's booking email address and phone number are not shown on their page. People send a message through the booking form; we store it and email it to the musician, with the sender's address set as the reply-to.
• A venue's phone number and email address are not shown in the Hire a venue listing.
• New profiles, adverts and reviews are checked by an administrator before they appear, so our team can see what has been submitted until a decision is made.
• Once something is published, other people may already have seen, copied or shared it. We can remove it from Gigz Hub, but we cannot control copies made elsewhere — so please think before you publish.

• One entry that keeps you signed in to your account, and a small preference cookie that remembers interface settings.
• No advertising cookies, no tracking pixels and no third-party analytics. We do not monitor what you do on other websites, and we do not let advertisers follow you around Gigz Hub.

Deleting these cookies will sign you out, but the site still works while you are signed out.

• The musician or venue you contact: an enquiry is stored and emailed to their registered address, and they then handle it in their own right.
• Our service providers: the platform that hosts this website and its database (Amazon Web Services, EU region), the service that runs sign-in and delivers email, and the storage service that holds your photos, videos and audio. They process information on our instructions as processors (Article 19 of the Law) and are not allowed to use it for their own purposes.
• Authorities: the police, courts or the Jersey Data Protection Authority, where we are legally required or permitted to disclose.

We do not sell, rent or trade personal information, and we do not share it with advertisers.

Gigz Hub records are held on servers in data centres in the European Union.

Jersey holds a European Commission data adequacy decision, first adopted on 8 May 2008 and reconfirmed on 15 January 2024, and is covered by UK adequacy regulations. Information can therefore flow between Jersey, the EU and EEA and the UK without further safeguards.

If information is ever sent somewhere outside those areas, we require the safeguards set out in Part 8 of the Data Protection (Jersey) Law 2018 to be in place first.

• Accounts, profiles and adverts: while your account is open. You can edit or delete a musician or venue profile and any advert from your own dashboard at any time. Ask us at enquiries@gigzhub.je to close your account and we will remove it.
• Enquiries, applications and reports: for as long as they are relevant to the booking, the hire or the concern. Ask us and we will delete them.
• Accounting records: for the period Jersey law requires.
• Spam and abuse prevention records: cleared automatically after a short period.

• The site is served over HTTPS, so information travels encrypted.
• Access to the site's records is limited to the people who run Gigz Hub, and admin access is restricted to a small number of accounts.
• Uploads are limited by file type and size, and large media is stored privately rather than openly listed.
• No method of transmission or storage is completely secure. Please do not publish information you would rather keep private.

Part 6 of the Data Protection (Jersey) Law 2018 gives you these rights over your own information:

• Right to be informed (Article 12) — this policy is how we do that.
• Right of access (Article 28) — a copy of the information we hold about you.
• Right to rectification (Article 31) — correct anything that is wrong.
• Right to erasure (Article 32) — ask us to delete it.
• Right to restriction of processing (Article 33) — pause our use of it in set circumstances.
• Right to data portability (Article 34) — receive the information you gave us in a usable format.
• Right to object (Articles 35 to 37) — including to direct marketing, which we do not do.
• Rights about automated decision-making (Article 38) — we do not use it, so it does not apply to you.

Email enquiries@gigzhub.je to exercise any of these. There is no charge. We respond without undue delay and at the latest within one month, and we may need to confirm who you are before we answer.

Please tell us first, so we can put it right: enquiries@gigzhub.je.

If you are not satisfied with our answer, you can complain to the Jersey Data Protection Authority, whose functions are carried out by the Jersey Office of the Information Commissioner:

• Jersey Office of the Information Commissioner, 2nd Floor, 5 Castle Street, St Helier, Jersey JE2 3BT
• Telephone: +44 (0) 1534 716530
• Email: enquiries@jerseyoic.org
• Online: jerseyoic.org

Complaints are made under Article 19 of the Data Protection (Jersey) Law 2018. The Authority will usually ask you to raise the matter with us first.

The service is not aimed at children. Registering a musician profile asks you to confirm the act has no under-18 members, and we do not knowingly collect children's information.

If you tell us we hold a child's information, we will delete it.

If we change this policy we will update the "last updated" date above, and for significant changes we will tell you by email or with a notice on the site.