Privacy Policy

1. Who we are

VenueReady is operated by Flexpublisher LTD ("we", "us", "our"), a company registered in England and Wales (company number 16448597, registered office: 424 Margate Road, Westwood, Ramsgate, Kent, CT12 6SJ). For the purposes of UK data protection law, we are the data controller of the personal data you provide through this service.

2. What data we collect

When you use VenueReady, we collect the following information:

• Account data: email address and name, collected when you register an account.
• Venue details: venue name, address, type, capacity, opening hours, staff count, layout information (entry/exit points, number of floors), CCTV status, and fire evacuation plan status — all provided through the compliance wizard.
• Contact information: responsible person name, role, email, and phone number; senior individual details (where applicable); and on-site contact / duty manager details.
• Payment information: payment card details and billing information are collected and processed entirely by Stripe, our payment processor. We do not see or store your full card number or CVC. We receive a confirmation of your payment along with limited billing details (name and email) from Stripe.
• Chat data: messages you send through the in-app AI assistant.
• Security and monitoring data: we log IP addresses, device information (such as browser type and User-Agent strings), login times, and access attempts. This data is collected for the purposes of security, fraud prevention, and protecting the integrity of the service.

3. How we use your data

We use your data solely for the following purposes:

• To generate your venue's tailored Martyn's Law compliance pack (procedures and documents).
• To provide the in-app AI assistant with context so it can answer your questions about compliance.
• To process your one-off payment via Stripe.
• To send you service-related communications (such as confirmation of your payment and access).
• To monitor for security threats and fraudulent activity, and to protect the integrity of the service.

We do not sell, rent, or share your personal data with any third parties, except for Stripe (which processes your payment) and the infrastructure providers that host our service (who act as data processors on our behalf). We do not use your data for marketing, advertising, or profiling.

4. Lawful basis

We process your personal data on the basis of contractual necessity (to provide the service you have requested) and legitimate interest (account security, service improvement). Where required, we will seek your explicit consent.

5. How long we keep your data

We retain your venue data, account data, and generated documents for as long as your account remains active, or for up to seven years after your last interaction with the service (whichever is shorter), to meet any legal or regulatory obligations. Payment records are retained by Stripe in accordance with their own retention policies. Security and monitoring data is retained for up to 12 months after your last interaction with the service. You may request deletion of your data at any time (see section 6).

6. Your rights under UK GDPR

As a data subject in the UK, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — request that we erase your personal data (the "right to be forgotten").
• Portability — receive your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, please email venueready@proton.me. Please note that this email address is for formal data protection requests only — it is not a general product support channel, and we cannot respond to compliance or how-to questions here. Responses may take a few days, as this inbox is not staffed as a live support desk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.

7. Cookies and tracking

Our service uses only essential session cookies required for authentication and security. We do not use tracking cookies, analytics cookies, or advertising cookies.

8. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. Where changes are material, we will notify you via the email address associated with your account.