Lineup Lab

Privacy notice

Last updated: [date]

Draft for legal review. Items highlighted like this must be completed, and the whole document should be checked by a solicitor before Lineup Lab is sold.

Lineup Lab is provided by [Nicoby Studios — full legal name, company number, registered address] (“we”, “us”). This notice explains how personal data is handled when you use Lineup Lab or our website.

Two different roles

For agencies that use Lineup Lab (our customers), each agency decides what information goes into its workspace — its shows, its performers' names and contact details, their availability, lineups, fees and notes. The agency is the controller of that data and we are its processor: we only use it to run the service for that agency, under our data processing agreement. If you are a performer, client or event contact of an agency, please contact that agency about your data; we will help them answer you.

For our own business, we are the controller of the limited data in the table below.

Data we control

Whose dataWhatWhy (lawful basis)How long
People who request a demoName, agency, email, phone, messageTo reply and arrange a demo (legitimate interests / steps before a contract)Up to 24 months after last contact
Customer account contacts and team membersName, email, role, sign-in timesTo provide the service, sign you in, bill and support you (contract; legitimate interests)For the life of the account, then up to 6 years for accounting records
Anyone using the siteA strictly-necessary sign-in cookie; basic server logs (IP address, time, page)Security and keeping you signed in (legitimate interests)Session cookie up to 30 days; logs up to 30 days

We do not use advertising or analytics cookies, and we never sell personal data.

Who we share data with

Only the suppliers we need to run the service, each under a contract that protects your data:

Where a supplier is outside the UK, we rely on the UK's adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

Security

Each agency's data is held separately from every other agency's. Connections are encrypted (HTTPS), there are no passwords to leak (sign-in uses one-time emailed codes), access within an agency is controlled by roles, and we keep off-site backups.

Your rights

You can ask to access, correct or delete your data, object to or restrict our use of it, or ask for a copy to take elsewhere. Contact us at [privacy contact email]. If your data sits in an agency's workspace, we will pass your request to that agency. You can also complain to the Information Commissioner's Office (ico.org.uk).

Contact

[Nicoby Studios — full legal name, company number, registered address]
Email: [privacy contact email]
ICO registration number: [ZA…]