Privacy Policy

Last updated 27 September 2026

This notice explains how VenueGazette uses personal data when you browse, create an account, access reports or contact us.

Data controller and contact

IFS GROUP KFT, Beke 14, 2681 Galgagyork, Hungary; company registration 13-09-184804; EU VAT HU25843033, operates VenueGazette and controls the account and product data described here. Privacy requests: ashley.harper@venuegazette.com.

Data we use and why

• Accounts: email, name, account identifier and securely stored login credentials, to create and protect your account and deliver the service you request (contract).
• Purchases and access: order references, package, amount, currency, payment/refund status, credit balance, report unlocks and expiry dates, to fulfil purchases and manage access (contract), maintain required records (legal obligation), and prevent duplicate grants or misuse (legitimate interests).
• Billing details: address, company and VAT information where supplied or required, for checkout, tax and accounting (contract and legal obligation). We do not store full payment-card numbers or card security codes.
• Support: your contact details and correspondence, to answer requests, resolve problems and handle complaints (contract or our legitimate interest in customer support).
• Technical data: IP address, browser/device details, request times and security logs processed by our website and hosting services, to deliver pages, diagnose faults and protect the service (legitimate interests).

We receive information directly from you, from your use of the site, and from the payment provider where you make a purchase. Required account or transaction details are necessary to provide the relevant service; you can browse the public collection without buying a report. We do not sell your personal data.

Service providers and external content

Hostinger provides website hosting and email infrastructure. WordPress, WooCommerce and the installed email software support accounts and transactional messages. Authorised service providers may process data needed to operate these functions. Professional advisers and authorities may receive records where necessary for accounting, legal compliance or the protection of legal rights.

Some venue images load from external source websites. When your browser loads an image, that provider receives technical information such as your IP address. Links to venue websites and galleries lead to independently operated sites with their own privacy policies.

Our current payment setup includes Stripe through WooCommerce, although purchases remain closed. If you use a Stripe payment flow when offered, Stripe processes payment and fraud-prevention information under its privacy policy. If checkout instead identifies Paddle as seller, Paddle processes checkout, billing, tax and payment information under its own privacy notice; we receive the order and customer information needed to deliver access and support. Paddle checkout is not yet active. No payment details are requested through our support email.

Cookies and communications

Account, session and security cookies support login, checkout and site operation. Browser settings let you remove or block cookies, although account functions may stop working. This notice does not constitute consent to optional tracking. Any optional analytics or advertising cookies that require consent must be offered with a separate choice before being activated.

Account setup, access, security and purchase emails are service messages. Buying a report is not consent to marketing; any marketing subscription will offer a separate choice and an unsubscribe route.

Retention and international processing

We retain account and entitlement records while your account or purchased access requires them. After closure, data no longer needed is deleted or anonymised, except records required for accounting, fraud prevention, disputes or legal claims. Support correspondence is retained while the enquiry and any related complaint or claim remain relevant. Security logs are retained only as needed for security and troubleshooting; backup copies may remain until the backup cycle replaces them. Retention is assessed by purpose, statutory duties and applicable claim periods, rather than by keeping every record indefinitely.

Providers may process information outside the EEA. Where required, such transfers must rely on an adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. Contact us for information about safeguards relevant to your data. Payment providers describe their own international processing in their linked notices.

Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Email us to exercise your rights; we may need proportionate identity verification. We normally respond within one month, with any permitted extension explained.

You may complain to your local supervisory authority or Hungary’s National Authority for Data Protection and Freedom of Information (NAIH). We do not use solely automated decisions producing legal or similarly significant effects about you. Automated credit allocation and access checks implement your purchase.

Updates

We will update this notice when the service or its processing changes and show the revision date above. Material changes will be brought to your attention where required.