Privacy
Policy
This version is effective from: 1 Jan 2026
1 Introduction
The Website (at theeventverse.com), the Crew Hub platform (at crewhub.io), the AccredTix platform (at accredtix.com and accredtix.io), the Better Connections platform (at betterconnections.co.uk), the Phillip Morris International Ticketing platform (at pmltickets.com) and their respective apps (collectively, the “Platforms”) are event administration platforms provided by The Event Verse to enable event organisers and their suppliers (“Event Organisations”) to effectively manage, operate and supply events.This privacy notice (the “Privacy Notice”) explains how your personal data is processed in connection with your use of the Platforms
The Platforms are intended for use by Event Organisations to collect, store, and manage crew and workforce data for events they host and/or supply, and your access to the Platform will have been granted by the particular Event Organisation by whom you are engaged.
We are therefore acting on behalf of the relevant Event Organisation in providing you access to the Platforms, and that Event Organisation will have the right to: (i) control and administer your access to the Platforms; and (ii) access and process any personal data you submit or provide through use of the Platforms. For the purpose of EU/UK data protection law, TEV should be treated as a processor, and the Event Organisation should be treated as a controller, of your personal data for the majority of processing activities set out in this Privacy Notice. For this reason, this Privacy Notice should be read in conjunction with the privacy notices of the relevant Event Organisation who you work for or otherwise engage with. However, there will be limited processing activities (which we have identified below) where we act as a controller. These include where we process your personal data for our own service improvement, and/or insights and analytics purposes. Please take a moment to read this Privacy Notice as it provides you with important information about your personal data, including the rights you have in relation to it. Your access to and use of our Platforms is also subject to our Terms of Use. Any changes we make to this Privacy Notice in the future will be posted on our Platforms. Please check this page frequently to see any updates or changes to our Privacy Notice.
2 About us
The Platforms are made available by The Event Verse Limited (“TEV”, “we”, “us, “our”) acting on behalf of Event Organisers. TEV is an English company (a company incorporated in England and Wales under company number 15734295), with its registered office at 3rd Floor Colwyn Chambers, 19 York Street, Manchester, England, M2 3BA.
We are a technology-first, global event operations company, supporting the live event industry with our bespoke event technology. We work with our clients to provide an innovative approach to event organisation and crew management.
3 How to contact us
If you have any questions about this Privacy Notice or would like to exercise your rights listed in this Notice, you can contact our Privacy Officer using the following methods:
| support@theeventverse.com | |
|---|---|
| Post | The Event Verse Limited 3rd Floor Colwyn Chambers 19 York Street Manchester M2 3BA |
If you have a concern about any aspect of our privacy practices, including the way we have handled your personal data, you can also report any issues or concerns to a national supervisory authority. For more information on how you can do this please see the Your Rights as a Data Subject section.
Please note that where we are processing your personal data on behalf of an Event Organisation, we may need to refer you to the relevant Event Organisation for further information.
4 How we collect and receive personal data
We collect and receive personal data through the following methods:
| Personal data you provide to us | You may give us your personal data directly, for example, when you engage with our Platforms. |
|---|---|
| Personal data we collect automatically, including through cookies and other similar technologies | When you access and use our Platforms we may collect Technical data and Usage Data automatically, including through our use of cookies and other similar technologies. For more information about this data please see our Processing Activities Schedule. For more information about our use of cookies and other similar technologies, please see the Cookies section. |
| Personal data we receive from third parties | We may receive personal data from third parties for example your Event Organisation may give us your personal data on your behalf, or if you have been named next of kin by one of our Platform users. |
5 The personal data that we process
We may process the following personal data:
| Category | Description |
|---|---|
| Identity Data | First name; and last name. |
| Contact Data | Email address; telephone number; social media handle; and postal/delivery address. |
| Billing Data | Details of services provided to Event Organisations, payment information (such as payment card details, bank account details and billing address). |
| Professional Data | Job title and organisation that you represent; date of birth; gender; your personal pronouns; your next of kin; accessibility requirements; dietary requirements; country of residence; nationality; details of your eligibility to work (including documents and information that we may collect to verify this); your work preferences (including areas and dates where you are available for work); skills, qualifications, training and work history; any personal data which appears in your curriculum vitae or application; and any personal data that you volunteer or we infer during an interview or your interactions with us, or as part of specific responses you provide when applying for certain roles through us. |
| Profile Data | Profile picture, images, avatar or video recordings that you (or Event Organisations, on your behalf) upload to our Platforms; information about your interests, affiliations and preferences (which may be voluntarily provided by you (either directly or through Event Organisations), or derived from your use of our Services and/or Usage Data); data that you use to access the Platforms (such as your username; password; security questions and answers; any other personal data that you may provide to register an account with us); data that we may need to verify you (such as your passport, driver licence, national identity number); other information that you supply in connection with your use of our Platforms, or in your communications with us, including through your provision of feedback and survey responses; or the content of any communications when you contact us. |
| Usage Data | Data observed or collected in relation to: browsing activity on our Platforms, interaction with our emails. This may include information about pageviews and events on our Platforms, information about the webpage or other source that users were previously on before reaching our Platforms, information about when the session started and ended, together with other identifiers associated with a user or their device (e.g. a device’s IDFA (iOS) or AAID (Android). |
| Technical Data | IP address; details of the Platform(s) that you are viewing, such as full web page URL; browser type, device type and operating system and any other information available to us about the device you are using; geolocation; diagnostic data (including crash logs, launch time, hang rate and energy use, and any other data collected for technical diagnostics purposes), and any relevant unique identifiers assigned to a device or browser (including cookie identifiers). |
| Other Data | Any other data that an Event Organisation requests or provides about you, in connection with an event. |
6 Our processing activities
We process your personal data for the following purposes: (a) to enable you to access and use the Platforms and to provide the Services; (b) to deal with user enquiries; and (c) to carry out insight and analytics on our Platforms. For more information about our processing activities, including the personal data that is processed in connection with those activities, please see our Processing Activities Schedule. 7 Cookies Where indicated in this Privacy Notice, we and our third-party partners use cookies, web beacons, pixel tags and other similar technologies (“Cookies”) for certain of the purposes described in this Privacy Notice. To find out further information about the Cookies that we use on our Platforms, and how you can manage your consent to our use of non-essential Cookies, please contact hello@theeventverse.com.
8 Sharing Personal Data
We only share personal data with others when we are legally permitted to do so. When we share personal data with others, we put contractual arrangements and security mechanisms in place to protect the personal data shared and to comply with our data protection, confidentiality and security standards and obligations.
When processing your personal data, we may need to share it with third parties, as set out in the table below. This list is non-exhaustive and there may be circumstances where we need to share personal data with other third parties.
| Third-party suppliers who provide applications/ functionality, data processing or IT services | We share personal data with third parties who support us in providing our Platforms and help provide, run and manage our internal IT systems. Such third parties may also include, for example, providers of information technology, cloud-based software-as-a-service providers, identity management, website design, hosting and management, data analysis, data back-up, security and storage services. The servers powering and facilitating that cloud infrastructure are located in secure data centres around the world, and personal data may be stored in any one of them. We also share your personal data with third-party service providers to assist us with insight analytics. Given the nature of their services, data will be shared with such third party suppliers on a regular basis. |
|---|---|
| Event Organisation | We will share your data with the relevant Event Organisation or such third parties as the Event Organisation may require. For more information about the third parties Event Organisations may ask us to share your personal data with, please see the relevant Event Organisation’s privacy notice. We will share personal data with the relevant Event Organisation (or third parties that the Event Organisation may require) regularly for the period for which we are providing services in connection with their event(s). |
| Other third parties | Occasionally, we may receive requests from third parties with authority such as law enforcement and/or governmental departments to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, or to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation. When we share personal data in responses to requests from third parties with authority, we will typically only share this data on a one-off basis. However, we may need to share data more regularly, depending on the nature of the request. |
9 Your rights as a data subject
Where we act as a controller of your personal data, you have the following rights:
| Your right of access | If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data (along with certain other details). |
|---|---|
| Your right to rectification | If the personal data we hold about you is inaccurate or incomplete, you are entitled to have it rectified. |
| Your right to erasure | You can ask us to delete or remove your personal data in some circumstances, such as where we no longer need it or where you withdraw your consent (where applicable). |
| Your right to restrict processing | You can ask us to “block” or suppress the processing of your personal data in certain circumstances such as where you contest the accuracy of that personal data or you object to us processing it for a particular purpose. This may not mean that we will stop storing your personal data but, where we do keep it, we will tell you if we remove any restriction that we have placed on your personal data to stop us processing it further. |
| Your right to data portability | You have the right, in certain circumstances, to obtain personal data you have provided to us (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer it to your chosen third party. |
| Your right to object | You can ask us to stop processing your personal data, and we will do so if we are: (i) relying on our own or someone else’s legitimate interest to process your personal data, except if we can demonstrate compelling legal grounds for the processing; or (ii) processing your personal data for direct marketing purposes. |
| Your rights in relation to automated decision-making and profiling | You have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for the entering into, or the performance of, a contract between you and us. |
| Your right to withdraw consent | If we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time. You can exercise your right of withdrawal by contacting us using our contact details in the How to contact us section or by using any other opt-out mechanism we may provide, such as an unsubscribe link in an email. |
| Your right to lodge a complaint with the supervisory authority | If you have a concern about any aspect of our privacy practices, including the way we have handled your personal data, please contact us using the contact details provided in the How to contact us section. You can also report any issues or concerns to a national supervisory authority in the Member State of your residence or the place of the alleged infringement. You can find a list of contact details for all EU supervisory authorities at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. As we are incorporated in the United Kingdom, our regulatory authority is the Information Commissioner’s Office (“ICO”). Contact details for the ICO can be found on its website at https://ico.org.uk. If you are based in the Kingdom of Saudi Arabia, you can also report an issue to SDAIA. Contact details for SDAIA can be found on its website at https://sdaia.gov.sa. |
| Your right to claim compensation | Where we are in breach of applicable law in respect of your data processing that causes you harm, you may also have the right to claim compensation for any material (i.e., financial) or non- material (i.e., moral or non- financial) damage or distress you suffer as a result. |
Where we act as a processor of your personal data please see the relevant Event Organisation’s Privacy Notice for further information about how you may exercise your rights.
10 Information security
We are committed to keeping the personal data you provide to us secure and we have implemented information security policies, rules and technical measures to protect the personal data under our control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss. In addition, all our personnel and data processors (i.e. those who process your personal data on our behalf) are obliged to respect the confidentiality of the personal data of all users of our Platforms and those who purchase our Services. Please contact us using the contact details set out in the How to contact us section if you have any questions about, or would like further information on, the technical and organisational measures that we implement
11 How long we keep your personal data and how we store it
Where we act as a controller, we will only keep your personal data for as long as necessary for the purposes set out in this Privacy Notice. We will store data on third party servers located in the United Kingdom . Where we store or process your data on behalf of Event Organisations, we will retain your personal data in line with their instructions. Please see your relevant Event Organisation’s Privacy Notice for more information about how long they keep your personal data.
12 Third-party links and services
This Privacy Notice only applies to personal data processed by us through your use of our Platforms. However, from time to time, the Platforms may contain links to third-party websites and services. We have no control over these websites and services and this Privacy Notice does not apply to your interaction with the relevant third parties.
13 Personal data of minors
While our Platforms are not intended for use by, or targeted at, minors (individuals under the age of 18), we may from time to time collect personal data of minors. Accordingly, we will comply with all applicable laws and regulations relating to the processing of personal data of minors.
14 If you fail to provide your personal data
Where we or our Event Organisation is required by law to collect your personal data, or we or your Event Organisation need to collect your personal data under the terms of a contract we or relevant Event Organisation have with you, and you fail to provide that personal data when requested, this may affect your ability to work or attend a particular event.
15 International transfers
We may transfer personal data to third parties (as described in the Sharing Personal Data section) that are located in countries that do not have data protection laws that protect personal data to the same standard as UK and/or EU data protection laws, or data protection laws in the Kingdom of Saudi Arabia.
Crew Hub is mainly used by Event Organisations located in the Middle East, and therefore if you are engaging with our Platforms with respect to an event in the Middle East, your data will be passed to the relevant Middle Eastern territory. Similarly, as TEV are based in the UK, we may transfer your personal data out of the country or territory in which you provided it, to store or otherwise process it in the UK and/or EU. When transferring personal data, we usually rely on one of the following:
a) Adequacy decisions:
We may transfer your personal data to countries or organisations that have been deemed to provide an adequate level of protection for personal data by the European Commission, the UK Government, the Saudi Data and AI Authority (SDAIA), or any other relevant government body. This may include transfers to organisations that participate in the Data Privacy Framework as set out here.
b) Contractual safeguards:
We may use specific contracts approved by the European Commission, the UK Government, or any other relevant governmental body to safeguard personal data. The contracts that we usually rely on are referred to as “Standard Contractual Clauses” or “SCCs”, although we may from time to time use other approved mechanisms. To find out more about the SCCs we use, please see here (EU), here (UK), and here. You can also contact us using the contact details set out in the How to contact us section.
In addition, where we disclose personal data that we process in connection with our participation in the EU-U.S. Data Privacy Framework and/or the UK Extension to that framework, we remain liable under those frameworks in relation to our onward transfer of personal data to these countries, unless we can show that we are not responsible for the event giving rise to the damage.
Processing Activities Schedule
This Schedule sets out detailed information about our purposes for processing personal data, and the lawful bases we rely on for doing so where we act as a controller.
Why we process personal data and our lawful basis
We process the personal data described in this Privacy Notice for the purposes detailed below. For a summary of these purposes, please see Our processing activities section.
Provision of Platforms (where we act as controller)
| Purpose | Personal Data Processed | Description | Lawful Basis |
|---|---|---|---|
| Delivery of the Platforms | Technical Data | To provide our Platforms to you, including to ensure that we’re showing you the correct notices and information and to record your preferences in relation to our use of non-essential cookies and other similar technologies as described in the Cookies section. | Legitimate interests – to provide our Platforms effectively. |
| Support, maintenance and security | Identity Data Contact Data Technical Data |
To administer and protect our Platforms (including troubleshooting, dealing with errors, data analysis, testing, system maintenance, support, and security, including for fraud monitoring and prevention).
To respond to user enquiries/offer support to users. We may use your information to respond to your inquiries and solve any potential issues you might have with the use of our Platforms. To request feedback and to contact you about your use of our Platforms. Essential cookies and other similar technologies are used for this purpose. Please see the Cookies section for further information. |
Legitimate interests – to run our business and to protect us and our users from harm.
Compliance with a legal obligation. |
| Insight and analysis | Technical Data Usage Data Professional Data Profile Data |
To carry out insight and analytics, including:
· to carry out Platforms insight and analytics, including counting users, gaining general insights about their interests and browsing habits, and learning what content and features of our Platforms are most popular; and |
Legitimate interests – to develop and improve our Platforms and our Services and to support other activities described in this Privacy Notice (where non-essential cookies and other similar technologies are not used).
Consent (where non-essential cookies and other similar technologies are used). |
**Provision of Services (where we act as processor on behalf of the Event Organisation)
| Purpose | Personal Data Processed | Description | Lawful Basis |
|---|---|---|---|
| Set up and manage user accounts | Identity Data Contact Data Professional Data Profile Data Technical Data |
To set up and manage user accounts, including to verify users when logging into accounts and secure areas of our Platforms and keep them in working order.
To contact users about accounts. |
Performance of a contract.
Legitimate interests – to provide secure and effective access to the Platforms. |
| Onboarding you on the Platforms | Identity Data Contact Data Professional Data Profile Data |
To register you as workforce for an event on the Platforms, and present your information and details to Event Organisations in connection with the events and Services | Performance of a contract
Legitimate interests – to provide the Services in an effective and efficient way |
| Facilitating payments | Identity Data Contact Data Billing Data Professional Data |
To facilitate payments between you and the Event Organisation in connection with the events. | Performance of a contract
Legitimate interests – to provide the Services in an effective and efficient way |
| Managing event communication and dealing with event queries | Identity Data Contact Data |
To manage communications about an event with you, including:
· to respond to any queries you have in relation to an event; and |
Performance of a contract
Legitimate interests – to ensure any necessary information about an event is conveyed to you in an efficient way, and to provide a good standard of service |
| Managing logistic arrangements in connection with the event | Identity Data Contact Data Professional Data Profile Data Other Data |
To provide Event Organisations with accreditation, reporting and logistic services, such as:
· organising travel arrangements; |
Performance of a contract
Legitimate interests – to provide the Services in effective and efficient way |