Privacy Policy

Stage Monkey is a free service that lists live performing-arts productions across the UK. This policy explains what personal data we collect, why, how we protect it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

We take no payments. When you book, you follow a link straight to the venue or society's own box office — Stage Monkey never sees your card details.

1. Who we are

Stage Monkey (“we”, “us”, “our”) is the data controller for the personal data described in this policy. For any privacy question or to exercise your rights, contact us at privacy@stage-monkey.com.

2. What we collect

• Account details — if you create an account: your email address, an optional display name, and your password (stored only as a secure one-way hash, never in plain text). If you sign in with Google instead, we receive your name and email address from Google in place of a password.
• Your watchlist & alerts — the shows you choose to follow. If you follow a show, we email you when a new UK production of it is listed. You can turn these emails off any time via the unsubscribe link in every email or by contacting us.
• Listings you submit — if you list a production, the details you provide (organisation name, venue, town, dates, prices, booking link and a contact email). Once approved, a listing is shown publicly on the site.
• Location for “nearest” search— if you allow your browser's location or type in a postcode, we use it to sort results by distance. The postcode or coordinates are sent to our maps provider to look up a location. We do not store your location.
• Technical data — your IP address and standard server logs, used to operate the site, keep it secure, and limit abuse (for example, rate-limiting repeated requests).
• Cookies — if you sign in, a single session cookie keeps you logged in. We do not use advertising or third-party tracking cookies, and we do not run analytics that profile you.

3. Why we use it, and our legal bases

• To provide the service and manage your account — performance of a contract.
• To publish and manage the listings you submit — performance of a contract and our legitimate interests in running a public listings service.
• To keep the service secure and prevent abuse — our legitimate interests.
• To sort results near you — consent, which you give by allowing location access or entering a postcode.

4. Who we share it with

We do not sell your personal data. We rely on a small number of service providers (“subprocessors”) to host and run the site — you can see the full list, what each does and where they are, on our Subprocessors page. Each is bound to handle personal data securely on our behalf.

Booking links take you to the venue or society's own website. Those organisations are independent data controllers with their own privacy policies, which apply once you leave Stage Monkey.

5. International transfers

Some of our providers are based outside the UK, including in the United States. Where personal data is transferred outside the UK, it is protected by appropriate safeguards — typically the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the provider's certification under the UK extension to the EU–US Data Privacy Framework.

6. How long we keep it

We keep your account data until you delete your account or ask us to remove it. Listings you withdraw or that are rejected are removed from public view. Technical logs are kept only for a limited period for security and troubleshooting.

7. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it;
• receive a copy of your data in a portable format; and
• withdraw consent (for example, location-based search) at any time.

You can manage your own listings at My productions and your saved shows on your watchlist. To exercise any other right, email privacy@stage-monkey.com. If you believe we have mishandled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

Passwords are stored as secure one-way hashes, the site is served over HTTPS, and we set standard browser security protections. No online service can be completely secure, but we take reasonable technical and organisational measures to protect your data.

9. Children

Stage Monkey is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above and, for significant changes, take reasonable steps to let you know.

11. Contact

Questions about this policy or your data? privacy@stage-monkey.com.