Privacy Policy
Who are we?
We are Adorable Dorks Events Limited (referred to as Adorable Dorks, Us, We, or Our).
Our registered office is:
Adorable Dorks Events Limited
167-169 Great Portland Street
5th Floor
London
W1W 5PF
England
Our Companies House number is 16349404.
We are registered with the Information Commissioner's Office (ICO), the UK's data protection authority, under the number ZC032847.
For any relevant data protection queries, please email our data protection officer at [email protected].
How to contact us
You can contact us via email for anything official at [email protected].
For data protection queries, please email our Data Protection Officer at [email protected].
For general account enquiries, you can use our email for an official response, or our Discord server for general assistance.
How we'll contact you
In the event we need to contact you, we'll use a few ways to do this.
- For issues that affect just your account, we'll contact you via your registered email.
- For more widespread issues, we may use our Discord server in combination with an email notification.
- In emergencies, we'll use the phone number and/or emergency phone number you can provide to us in your profile.
We will never use your personal information for marketing unless you expressly ask us to.
All of our mandatory email is transactional, for example:
- Password reset emails ("forgot password" links).
- Ticket purchase receipts, and QR codes.
- Notifications generated from chargebacks or refunds.
- Two-factor email confirmations
We also encrypt your personal information (except your email address) at rest so any access is auditable.
To opt out of mandatory emails, you can delete your account or email us at [email protected] from the email associated with your account.
Your Rights
You have the right to:
- access data we hold about you, or request a copy of it.
- ask for a copy of your information in a machine-readable format.
- ask us to correct inaccurate data - this is available via self-serve in your profile.
- ask us to delete your data, though this will not include character data.
- Complain to the Information Commissioner's Office. Please contact us prior to this.
- Restrict processing of your data (though we will likely just delete your account to accomplish this)
To do any of these things, please get in touch with us using the details above.
You have additional rights under GDPR, but these are not covered here as we do not do automated decisions or use your data for marketing.
Legal basis for processing
The law says we need a lawful basis for collecting personal information.
In our case, these are always one or more of:
- your consent (all data you give).
- a legal obligation (e.g. data we must send our payment processors by law).
- legitimate interest (e.g. sending IPs and browser flags for fraud prevention).
Where we store your data
We may store the data we collect from you outside the UK, or transfer it to organisations outside the UK. When we do this, we make sure that your data is protected and that:
- the UK Government has deemed the country or organisation to provide an adequate level of protection for personal data
- we have agreement in place with the processor which gives your data the same protection as the UK.
Your personal data is stored encrypted at rest, and all payments data is held by Stripe (our payment processor).
None of your financial data is ever handled by us; we get a secure confirmation from Stripe of payment statuses.
Companies that help us to process your data include:
- Cloudflare (network and DNS)
- DigitalOcean (server hosting, database hosting)
- Zoho (transactional email)
- Sentry (error reporting)
- Google Workspace (back-office/email/admin)
Ways we process your data
The ways we process your data depend on the legal basis used for that data.
Consent
We ask for your consent to:
- Create an account for you, and allow you to log in and add personal information.
- Store your email so that we can send you important information about your account.
- Send you reminders about upcoming events and deadlines.
Legitimate Interest
Legitimate interest is when we use your data in a way that you'd expect from the context.
We use a legitimate interest basis to:
- Prevent fraud via sending information about your session to our payment provider.
- Send your personal information to our payment processor so that you can make a payment.
Vital Interest
Vital interest is when you cannot or do not consent to us using your data, but we continue regardless to prevent danger/threat to someone's life or wellbeing.
We use a vital interest basis to:
- Contact the emergency services and give them your information in the event of a serious accident or incident.
- Inform your emergency contact if you become seriously unwell or injured.
- Arrange transport for you home in the event you are removed from an event for serious misconduct.
- Keep records of severe misconduct even after you have requested data deletion to keep our events safe.
Legal Obligation
Legal obligations are things we are required to do by law.
These include (but are not limited to):
- Keeping financial records of you as a customer for a term of 5 years.
- Keeping records of investigations where we have contacted the police.
- Accident reports involving you for Health & Safety laws, redacted as much as legally allowed.
Updating our Privacy Policy
We will update this policy if anything changes, giving 28 days notice if they materially change.
By continuing to attend our events, you agree to the new policy.
You'll also be asked to accept this when purchasing a ticket.
To reject the new updates to our privacy policy, you can choose the "Delete Account" option in your dashboard.