Data processing agreement

Version 2026-10. Between the organiser (the "Controller") and All One Planet Ltd, company no. 11017373, Blackhall Mill, Newcastle upon Tyne NE17 7LH, ICO reference ZC188092 (the "Processor"). This agreement forms part of the Organiser Terms of Service.

1. What is processed

• Guests' names and email addresses, and phone numbers where you ask for them.
• Booking and payment records. We never see card numbers: Stripe holds them.
• Answers to the booking questions you set, which may include health information if you ask for it.
• The emails we send to guests on your behalf.
• The names and email addresses of the people you give admin logins to.

2. Purpose and instructions

We process this data only to run your booking site: taking bookings, sending the emails you have set up, reminders, refunds, and giving you and your guests access to their records. How you set up your site is your instruction to us. We do not use your guests' data for our own purposes, and we never sell it.

3. Health information

Where you ask health questions:

• answers are shown only in your admin and are never sent by email;
• they are deleted automatically 30 days after the event, unless the guest asked you to keep them for future events;
• you are responsible for having a lawful basis to ask.

4. Security

• Encrypted connections (HTTPS) for every page.
• Each organiser's data is kept separate, and an automated test checks that one organiser can never see another's.
• Two-step login is available to every admin login.
• Nightly backups, with the off-site copies encrypted before they leave the server.
• Server access is restricted to us, and security updates are applied automatically.

If we become aware of a personal-data breach affecting your data, we will tell you without undue delay.

5. Sub-processors

• Stripe: card payments. These go through your own Stripe account.
• Brevo: email delivery.
• Hostinger: the server the site runs on, in the UK.
• Google: storage for encrypted backup copies. Google cannot read them.

We will tell you before we add or change a sub-processor, and you may object.

6. Confidentiality

Only we can access the data, and only to run and support the service.

7. Guests' rights

Guests can download their own data from their My bookings page. We will help you with other requests (access, correction, deletion) within a reasonable time.

8. Return and deletion

At the end of the agreement you can export everything from your admin. We delete your data within 60 days, except where the law requires us to keep it. Encrypted backup copies expire within a further 60 days.

9. Audit

On reasonable request, we will give you the information you need to check that we meet these obligations.