GIGPIG
PRIVACY AND COOKIE NOTICE
(Last updated July 2026)
1. INTRODUCTION
Who are we?
GigPig Ltd (“GigPig”, “we”, “us”, and “our”) is a company incorporated in
the United Kingdom with company number 13994282 and registered
address Unit 22 Field Farm Business Centre, Launton, Bicester, United
Kingdom, OX26 5EL. Where we decide the means or purpose of
processing personal data, we are the "controller."
What’s this notice about?
This notice covers processing activities relating to the following:
● our website https://gigpig.uk (the “Website”); and
● any services provided via the Website, including enabling
venues and bookers to discover and book artists for gigs, and
giving artists a platform to find, play and get paid for gigs (the
“Platform
Services”)
(together, the “Platform”).
We process the following individuals’ personal data in relation to the
Platform:
● artists who feature on the Platform, or who have registered an
interest in featuring on the Platform (the “Artists”); and
● the employees, contractors or other personnel of venues who
feature on the Platform, or who have registered an interest in
featuring on the Platform (the “Venue Personnel” and “Venues”
respectively),
The Platform allows:
● Artists to use our Platform to create a profile and accept bookings;
and
● Venues to use our Platform to create a profile in order to discover
Artists available for bookings and manage bookings.
We update this notice from time to time so please check back in.
How do you contact us?
(if you have questions about this
notice or to exercise your rights)
Write to us at: support@gigpig.uk
If we can’t resolve your issue, you can also get in touch with the
Information Commissioner’s Office: https://ico.org.uk/concerns
(or if you live in a European country privacy@gigpig.ukother than the UK,
you can submit a complaint to the supervisory authority in your country).
2. HOW WE USE PERSONAL DATA
Personal data
How we use it
Sources and recipients
Enquiry and Message Data
Purpose of Processing and Legal basis
Sources
We collect the following
categories of personal data in
relation to Artists and Venue
Personnel:
● name;
● contact details;
● other personal data sent
as part of enquiries; and
● logs of service messages
sent by Gigpig to Artists
and Venues*.
*Note: Artists and Venues are
not able to respond to such
messages in-Platform.
We process this information to respond
to enquiries relating to the Platform, and
to record the messages broadcast to
Venues and Artists.
We process this personal data using the
following legal bases:
● in accordance with the terms of our
contract with Artists or to take
steps at their request prior to
entering into a contract with them,
where we need this information to
provide the Platform; and/or
● to pursue our legitimate interests
of responding to Artist and Venue
requests and questions,
broadcasting service messages to
Artists and Venues, understanding
how Artists and Venues use the
Platform and of improving our
Platform.
We collect this information
directly from the relevant
Artist or Venue Personnel.
Recipients
We send service messages to
Artists and Venues via a third
party tool, Intercom.
Venue Personnel Data
Purpose of Processing and Legal basis
Sources
We collect the following
categories of personal data in
relation to Venue Personnel:
● names;
● email address;
● mobile phone number;
and
● Venue they are
associated with, and
whether such Venue has
been brought to the
Platform via, or used in
connection with, one of
our Platform Partners.
We process this information to onboard
Venue Personnel onto the Platform,
provide them with access to the
Platform and provide the Platform
Services.
We also process Venue Personnel Data
for the purpose of collaborating on the
provision of online booking services with
our Platform Partners (as defined in
Section 4 below).
For these processing activities, we rely
on our legitimate interests, being:
● to provide the Platform
Services to Venues, via their
Venue Personnel,
● improve our Platform for Artists
and Venues, including via our
collaboration with Platform
Partners (specifically, in
respect of the online booking
services provided by
expanding the Artists and
Venues available on the
Platform) and
● developing our business.
We may collect this
information directly from the
relevant Venue Personnel (or
colleagues of the relevant
Venue Personnel).
We may also collect this
information from our Platform
Partners, in respect of Venue
Personnel working for
Venues which have been
uploaded/onboarded to the
Platform in connection with
our collaboration with our
Platform Partners.
Recipients
We share some of this
information with Stripe, Inc
for the purpose of them
managing our payments
processes.
We share some of this
information with Auth0, Inc
for the purpose of them
providing security login
services.
We may share this
information with our Platform
Partners in connection with
our collaboration with our
Platform Partners on the
provision of online booking
services.
Artist Data
Purpose of Processing and Legal basis
Sources
We collect the following
categories of personal data:
● names;
● addresses;
● email address;
● mobile phone number;
● links to social media
profile pages;
● location information
(using the Artist’s
postcode data);
● photographs;
● videos of the Artist’s
work;
● information on the Artist’s
work such as the genre,
type and style of their
music;
● whether an Artist has
been brought to the
Platform via, or used in
connection with, one of
our Platform Partners.
We process this information to upload
and onboard Artists onto the Platform,
provide them with access to the
Platform and provide the Platform
Services.
We also process Artist Data for the
purpose of collaborating on the
provision of online booking services with
our Platform Partners.
Where the Artist is an individual, we
undertake certain of these processing
activities on the legal basis of
performance of the terms of our contract
with the relevant Artist, or to take steps
at the request of the relevant Artist prior
to entering into a contract with them, as
described in further detail at
https://gigpig.uk/legal/gigpig_terms_artis
ts.pdf.
Otherwise, we rely on our legitimate
interests, being:
● to provide the Platform
Services to Artists;
● improve our Platform for Artists
and Venues, including via our
collaboration with Platform
Partners (specifically, in
respect of the online booking
services provided by
expanding the Artists and
Venues available on the
Platform); and
● developing our business.
We may collect this
information directly from the
relevant Artist, their agent or
other representative and
publicly accessible sources
(such as social media
platforms).
We may also collect this
information from our Platform
Partners, in respect of Artists
which have been
uploaded/onboarded to the
Platform in connection with
our collaboration with our
Platform Partrners.
Recipients
We share some of this
information with Stripe, Inc
for the purpose of them
managing our payments as
our payment providers.
We share some of this
information with Auth0, Inc
for the purpose of them
providing security login
services.
We may share this
information with our Platform
Partners in connection with
our collaboration with our
Platform Partners on the
provision of online booking
services.
Analytics Data
Purpose of Processing and Legal basis
Sources
We collect the following
categories of personal data in
relation to Venue Personnel
and Artists:
● IP address;
● browser type and
version;
● time-zone preferences;
● device make, operating
system and settings;
● clickstream to, through
and from our Platform;
● page response times;
● errors;
● scrolling, clicks
and mouse-overs data;
● methods used to leave
the Platform;
● pages visited;
● length of visits to the
Platform; and
● whether they have
previously logged in to
the Platform.
We process this information to
understand use of, engagement and
interaction with our Platform, to conduct
retargeted advertisements through third
party platforms, and to help us improve
and maintain our Platform and address
bugs.
We also process information regarding
previous log-ins to the Platform in order
to facilitate Artists and Venue Personnel
logging in to the Platform and avoid the
requirement to re-input login details
each time the Platform is accessed.
We process this personal data using the
legal basis of the Artist’s or Venue
Personnel’s consent.
Consent can be withdrawn at any time,
by emailing: support@gigpig.uk.
We collect this information
using cookies and similar
technology, provided by
Google, Crazy Egg and
Auth0 povided by Okta..
Recipients
We may use Platform such
as Google Ads (Google LLC),
Twitter Inc and Facebook
(Meta Platforms, Inc) to
provide retargeted
advertisements,
indirectly through their
platforms.
More information
You can find out more about
how Google uses data by
clicking here. Artists or Venue
Personnel can withdraw their
consent for Google Analytics
by using the following link:
Google Analytics.
You can find out more
information about how Crazy
Egg uses personal data by
clicking here.
We use Auth0, provided by
Okta, and Artists and Venue
Personnel can access their
privacy notice here.
3. COOKIES, ANALYTICS AND SIMILAR TECHNOLOGIES
Cookies, pixels and other technologies store and access data on devices to help websites and apps work.
This table explains their purpose, how long they last, and who else can access their data. We get consent to
use them unless they’re essential to the Platform.
Most browsers allow control over cookies, for more information: Google Chrome | Microsoft Edge | Mozilla
Firefox | Microsoft Internet Explorer | Opera | Apple Safari.
Cookie/data
Purpose
Access
The following third parties may have
access to the information collected
using their technology
_ga
Used to distinguish between
Artists and Venue Personnel
anonymously.
We use Google Analytics, and Artists
and Venue Personnel can access
their privacy notice here.
_gid
Used to distinguish between
Artists and Venue Personnel
anonymously.
We use Google Analytics, and Artists
and Venue Personnel can access
their privacy notice here.
_ga_2243145
03
-1
Used to persist session state.
We use Google Analytics, and Artists
and Venue Personnel can access
their privacy notice here.
_gac_gb_
224314503-1
Contains campaign related
information. If an Artist or Venue
Personnel has linked their
Google Analytics and Google
Ads accounts, Google Ads
website conversion tags will
read this cookie unless they
opt-out.
We use Google Analytics, and Artists
and Venue Personnel can access
their privacy notice here.
auth0.[unique]
.i
s.authenticate
d.
Used to persist logins to the
Platform.
We use Auth0, provided by Okta, and
Artists and Venue Personnel can
access their privacy notice here.
F24_autoID
This is a temporary identifier on
a local machine or phone
browser that helps us track
anonymous information to be
later married up with
f24_personid. If this is left
anonymous it will be deleted
after 6 months . Non-essential,
first party, 10 years, persistent.
Our organisation utilises Force24’s
marketing automation platform.
Force24 cookies are first party
cookies and are enabled at the point
of cookie acceptance on this website.
The cookies are named here.
The information stored by Force24
cookies remains anonymous until:
● Our website is visited via
clicking from an email or SMS
message, sent via the Force24
f24_personId
This is an ID generated per
individual contact in the
Force24 system to be able to
platform and cookies are
accepted on the website.
● A user of the website completes
a form containing email address
from either our website or our
Force24 landing pages.
The Force24 cookies will remain on a
device for 10 years unless they are
deleted.
Other Tracking
We also use similar technologies
including tracking pixels and link tracking
to monitor your viewing activities
Device & browser type and open
statistics
All emails have a tracking pixel ( a tiny
invisible image ) with a query string in the
URL. Within the URL we have user
details to identify who opened an email
for statistical purposes.
Link Tracking
All links within emails and SMS
messages sent from the Force24
platform contain a unique tracking
reference, this reference help us identify
who clicked an email for statistical
purposes.
track behaviour and form
submissions into the Force24
system from outside sources
per user. This is used for
personalisation and ability to
segment decisions for further
communications. Non-essential,
first party, 10 years, persistent.
cookie-consen
t
Stores an individual's cookie
consent preferences so they are
remembered on future visits.
First-party cookie. No third party has
access to this information.
_ttp
Used by the TikTok Pixel to
measure and improve advertising
performance, attribute
conversions, and personalise
advertising.
We use TikTok Pixel. Artists and Venue
Personnel can access TikTok's privacy
notice here:
https://www.tiktok.com/legal/privacy-pol
icy.
tt_chain_token
Internal TikTok token used to
maintain requests during a
browsing session and support
TikTok Pixel functionality.
tta_attr_id_mir
ror
Stores an advertising attribution
identifier to improve conversion
measurement and campaign
attribution for TikTok Ads.
ttwid
Stores a TikTok web identifier for
analytics, conversion
measurement and advertising
performance.
__cf_bm
Cloudflare bot management
cookie used to distinguish
legitimate visitors from automated
traffic and protect LinkedIn
services.
LinkedIn and Cloudflare may access
this information. LinkedIn's privacy
notice is available at
https://www.linkedin.com/legal/privacy-
policy.
bcookie
Browser identifier used by
LinkedIn to recognise devices,
improve security and enable
advertising and analytics.
We use LinkedIn Insight Tag. Artists
and Venue Personnel can access
LinkedIn's privacy notice here:
https://www.linkedin.com/legal/privacy-
policy.
dfpfpt
Used by LinkedIn for fraud
prevention, security and session
integrity.
li_mc
Stores consent preferences for
LinkedIn marketing technologies.
liap
Used by LinkedIn to authenticate
members and improve account
security.
sdui_ver
Stores LinkedIn interface/version
information to support delivery of
LinkedIn services.
__cf_bm
Cloudflare bot management
cookie used to distinguish
legitimate visitors from automated
traffic and protect HubSpot
services.
HubSpot and Cloudflare may access
this information. HubSpot's privacy
notice is available at
https://legal.hubspot.com/privacy-polic
y.
__cf_bm
Cloudflare bot management
cookie used to protect
HubSpot-hosted assets and
services from malicious traffic.
HubSpot and Cloudflare may access
this information. HubSpot's privacy
notice is available at
https://legal.hubspot.com/privacy-polic
y.
csrf.app
Security cookie used to protect
forms and APIs against
Cross-Site Request Forgery
(CSRF) attacks.
We use HubSpot. Artists and Venue
Personnel can access HubSpot's
privacy notice here:
https://legal.hubspot.com/privacy-polic
y.
FPID
Stores a first-party identifier to
recognise returning visitors and
improve analytics accuracy.
hs_c2l
Indicates whether a visitor has
accepted cookie categories and
enables HubSpot functionality
accordingly.
hs_login_email
Remembers the email address of
a logged-in HubSpot user for
future logins.
hs_login_meta
data
Stores information required to
maintain secure HubSpot login
sessions.
hubspotapi-csr
f
Security cookie used to protect
HubSpot API requests against
Cross-Site Request Forgery
(CSRF) attacks.
hubspotapi-pre
fs
Stores user preferences for
HubSpot-hosted content and
services.
hubspotutk
6 months
Stores a unique identifier for a
visitor to support analytics,
identify returning visitors, and
associate form submissions with
browsing history.
__cf_bm
30 minutes
Cloudflare bot management
cookie protecting Meta-hosted
resources from automated traffic.
Meta and Cloudflare may access this
information. Meta's privacy notice is
available at
https://www.facebook.com/privacy/polic
y/.
datr
2 years
Used by Meta to identify web
browsers, enhance security,
prevent fraud, and improve
advertising measurement.
We use Meta Pixel. Artists and Venue
Personnel can access Meta's privacy
notice here:
https://www.facebook.com/privacy/polic
y/.
ps_l
90 days
Used by Meta to support browser
identification, advertising
attribution and measurement.
ps_n
90 days
Used by Meta to support browser
identification, advertising
attribution and measurement.
sb
2 years
Used by Meta to securely identify
browsers and help prevent
fraudulent activity.
4. DATA RETENTION, TRANSFERS AND DISCLOSURE
How long do we
keep
personal data?
We will only keep personal data for as long as it is necessary to do so. Specifically:
● We will only retain Artist Data, Venue Personnel Data and Analytics Data
for two years from the last time the Artist or Venue Personnel logged in to
our Platform, unless some data is necessary to be retained in order for us
to comply with our legal
obligations.
● We will only retain Marketing Data until the Artist or Venue Personnel has
opted-out of marketing communications.
Transfers
The personal data described in this notice is generally stored in the UK or European
Economic Area. Where we use data processors outside the UK and European
Economic Area, and transfer personal data to a country which the European
Commission or the
Information Commissioner’s Office in the UK (the “ICO”) has found does not provide
an adequate level of protection, we use contracts approved by the European
Commission or the ICO which give personal data protection similar to that which it
has in Europe and the UK (as applicable).
For more information drop us a line using the contact details at the start of this
notice.
Disclosure
Other than as set out above, we may disclose personal data described in this notice:
● Where required by law, government, competent authorities or the courts or to
establish, exercise or defend our legal rights, and for the purposes of preventing
crime and fraud (for example, we may share personal data with our professional
advisors, investigators, or credit reference agencies). We do this on the legal
basis of our legal obligation.
● With suppliers and subcontractors, as necessary for the purposes set out in this
notice. WE do this on the legal basis of our legitimate interests in engaging
suppliers and subcontractors to assist our provision of the Platform or Platform
Services, or as set out elsewhere in this notice.
● With our Platform Partners, which includes the following Genre Music Limited.
We do this on the legal basis of our legitimate interest in improving and
expanding the Platform and Platform Services through collaboration with such
Platform partners.
● If involved in an investment, merger, acquisition, or sale of our organisation or
assets, personal data we hold may be shared on the basis of the legitimate
interests of us, our shareholders, customers and other parties to a transaction,
unless those interests are outweighed by prejudicial impacts upon the Artist or
Venue Personnel (as applicable).
5. DATA SUBJECT RIGHTS
The right to
rectification
Artists and Venue Personnel have the right to request a copy of the personal data
we hold about them and to have any inaccuracies corrected.
We will use reasonable efforts to the extent required by law to supply, correct
or delete personal data held about Artists and Venue Personnel on our files
(and with any third parties to whom it has been disclosed to).
The right to object
Artists and Venue Personnel can ask us to restrict, stop processing, or to delete
their personal data if:
● they consented to our processing the personal data, and have withdrawn that
consent;
● we no longer need to process that personal data for the reason it was
collected;
● we are processing that personal data because it is in the public interest or it is
in order to pursue a legitimate interest of ours or of a third party, they don’t
agree with that processing and there is no overriding legitimate interest for us
to continue processing it;
● the personal data was unlawfully processed;
● they need the personal data to be deleted in order to comply with legal
obligations; or
● the personal data is processed in relation to the offer of a service to a child.
The right to data
portability
Artists and Venue Personnel have a right to obtain a machine-readable coy of their
personal data, which they can use with another service provider.
If we are processing data in order to perform our obligations to Artists or Venue
Personnel, or because they consented, or if that processing is carried out by
automated means, we will help them to move, copy or transfer their personal data
to other IT systems.
If Artists or Venue Personnel request, we will supply them with the relevant
personal data in a commonly used, machine-readable and interoperable
format. Where it is technically feasible, they can ask us to send this
Information directly to another IT system provider if they prefer.
The right to make a
complaint to a
supervisory authority
If Artists and Venue Personnel are unhappy with the way we are processing their
personal data, they can contact us using the contact details provided in this notice.
If Artists or Venue Personnel do not agree with the way we have processed
their personal data or responded to their concerns, an alternative is to submit
a complaint to a data protection supervisory authority. In the UK, this is the
Information Commissioner’s Office with whom we are registered:
https://ico.org.uk/concerns, or they can submit a complaint to the supervisory
authority in their country.