Privacy Policy

Privacy Policy Last Updated: September 29, 2026 Welcome to Reggiee's Privacy Policy ("Policy"). This Policy explains how Reggiee ("we," "us," or "our") collects, stores, uses, and shares your personal information when you register for, access, or otherwise interact with our website available at https://www.reggi.ee (the "Platform"), as well as through other related services and communications we provide. We are committed to protecting your privacy and handling your information with transparency and care. This Policy outlines the types of data we may collect, the purposes for which we use it, how we safeguard your information, and your rights regarding your personal data. By using our Platform or engaging with our services, you acknowledge the practices described in this Policy. Where the law requires your consent (for example for optional cookies or marketing messages) we ask for it separately and you can withdraw it at any time. If you do not agree with our privacy practices, please do not use our services. Should you have any questions, concerns, or requests related to your personal data or this Policy, please contact our privacy team at hello@reggi.ee. This Privacy Policy should be read together with our Reggiee Terms of Service. Unless otherwise defined in this Policy, all capitalised terms shall have the same meanings as those set forth in the Terms of Service. Who is responsible for your data There are two different situations and it matters which one applies to you. Reggiee as controller. For the people who use Reggiee itself (event organisers and their team members, and visitors to Reggiee's own website), E Labs Ventures Ltd is the controller. This Policy explains how we handle that data. Reggiee as processor. When an organiser uses Reggiee to run an event page, collect registrations, keep a contact list or send messages, the organiser is the controller of that attendee, registrant and contact data and Reggiee is their processor. We handle that data only on the organiser's instructions under our Data Processing Addendum. If you registered for an event and want to see, correct or delete your data, or stop receiving messages, please contact the organiser first. You can also use the link in any message we deliver for them, or the "Your data" options on your preferences page. If you contact us instead, we will pass your request to the organiser. Company number: 17050248 Registered office: 128 City Road, London, EC1V 2NX. ICO registration number: ZC106812 Related documents: Data Processing Addendum (/legal/dpa), Subprocessors (/legal/subprocessors), International Data Transfers (/legal/transfers), Security (/legal/security), Cookies Policy (/legal/cookies). Definitions Capitalised terms used in this Policy shall have the following meanings: Cookie(s): A small data file stored on a User's device by their web browser when accessing the Platform. Cookies are used to improve the User experience, remember preferences, analyse usage patterns, and facilitate certain functionalities. Data Controller: As defined under the Data Protection Laws, the entity that determines the purposes and means of processing Personal Data. For Reggiee, this refers to E Labs Ventures Ltd Data Processor: An entity that processes Personal Data on behalf of the Data Controller. This includes third-party service providers, technology partners, and subcontractors. Data Protection Laws: All applicable laws, regulations, and legal requirements relating to the protection, privacy, and security of Personal Data, including but not limited to the UK Data Protection Act 2018, the GDPR, the CCPA, PIPEDA, and any other relevant national or international data protection legislation. Personal Data/Information: Any information relating to an identified or identifiable individual User, including but not limited to name, email address, postal address, telephone number, payment information, and any other data provided by the User. Platform: The Reggiee website and all related web pages, applications, features, and services operated by E Labs Ventures Ltd User: Any individual who accesses, registers on, or otherwise uses the Platform, including event organisers and attendees. Personal Information You Provide When you register on the Reggiee Platform or otherwise interact with our services, we collect Personal Data that you voluntarily provide. The types of Personal Data we collect depend on your specific interactions with the Platform, the features you use, and the choices you make. Such Personal Data may include, but is not limited to: Full name Email address Password Date of birth Phone number Residential address We process this information strictly in accordance with applicable data protection laws, including the DPA and the retained aspects of the General Data Protection Regulation applicable in the UK ("UK GDPR"). Data Collected Automatically During Use When you access or use the Platform, we may automatically gather certain technical and usage information that does not directly identify you personally but helps us operate and improve our services. This data is collected through your device and browser and includes: Log and Usage Data: Our servers automatically record service-related, diagnostic, and performance information when you use the Platform. This may include your IP address, browser type and settings, device information, pages visited, searches performed, time and date stamps, interaction with features, error reports, and system activity logs. Device Information: We collect details about the device you use to access Reggiee, such as mobile phone, tablet, or computer identifiers. This may include IP addresses, unique device IDs, application version, device model, operating system, system configuration, browser type, internet service provider or mobile carrier, and hardware specifications. Location Information: We may collect geolocation data from your device, which could be precise or approximate depending on your device settings and permissions. This may include GPS data or location inferred from your IP address. You have control over whether you allow us to access your location data through your device settings. Your Social Logins The Reggiee Platform may offer you the option to register for an account or log in using your existing account credentials from third-party social networking services such as Google, Facebook, Apple, or other similar platforms ("Social Logins"). If you choose to use a Social Login to access the Platform, we will receive certain profile information from your social networking service, which may include your name, email address, profile picture, and any other information you have made publicly available or authorised the service to share with us. You can control the information shared with us by adjusting your privacy settings directly with the social networking service before or after linking your account. Information Collected for Paid Events If you register for a paid event through the Platform or via an organiser's linked ticketing system, you may be required to provide financial information - such as your credit card or payment card number, expiration date, billing address, and related details. Event organisers using Reggiee may also customise their event registration forms to collect additional information from attendees as part of their registration process. Reggiee does not control an organiser's event registration process or the types of Personal Data they may collect from you. When you register for an event or purchase a ticket through the Platform, that information will be made available to the organiser. The collection, storage, and use of your information by organisers is governed by their own privacy policies and practices, not by this Privacy Policy. How We Use and Process Your Personal Data We collect and process your Personal Data for a variety of purposes that are necessary to operate and improve the Reggiee Platform, provide services to you, and ensure a safe and efficient user experience. The specific reasons for processing your data include: Account Management and Authentication - Enable you to register for an account, authenticate your identity, and manage your user profile Delivery of Services - Provide, facilitate, and personalise the services you request via the Platform Customer Support and Communication - Respond to your questions, concerns, or complaints related to the Platform Security and Fraud Prevention - Monitor, detect, and prevent fraudulent or unauthorised activity Service Improvement and Analytics - Analyse your usage data to understand how the Platform is used and to identify trends Legal Basis for Processing Your Personal Data Reggiee processes your Personal Data only when we have a valid legal basis to do so under applicable data protection laws. Depending on the specific context, we rely on one or more of the following legal grounds: Consent In certain circumstances, Reggiee will seek your explicit, informed consent before collecting and processing your Personal Data. You have the right to grant, refuse, or withdraw consent at any time. Performance of a Contract We process your Personal Data as necessary to enter into and perform our contractual obligations with you, including creating and managing your user account and facilitating your access to event-related services. Legitimate Interests We may process your Personal Data based on our legitimate interests as a platform provider, provided these interests do not override your rights or freedoms. Examples include maintaining security, improving our Platform, and enforcing our terms. Payment Processing We may process your information for payment processing purposes through our trusted third-party payment processor, Stripe. We do not store or collect your payment card details. Compliance with Legal Obligations Reggiee may process your Personal Data to comply with applicable legal, regulatory, or judicial obligations. Third-Party Data Sharing Reggiee is committed to safeguarding your privacy and ensuring your Personal Data is only shared when necessary and in accordance with applicable data protection laws. We do not sell or lease your Personal Data to third parties. However, we may share your Personal Data in the following circumstances: With Service Providers and Subprocessors We engage third-party service providers and subprocessors to perform functions on our behalf. We list them at /legal/subprocessors. They are contractually required to implement appropriate security measures and to use data only for the services they provide to us. With Event Organisers When you register for or interact with an event hosted on the Platform, certain Personal Data you provide may be shared with the relevant event organiser for managing your participation in the event. With Legal and Regulatory Authorities We may disclose your Personal Data to government authorities, law enforcement agencies, or regulatory bodies when required to comply with legal obligations or protect rights and safety. Consent for Uploading and Contacting Attendees or Fans If you are an event organiser uploading contact details to the Platform, you are solely responsible for ensuring that you have obtained all necessary, valid, and verifiable consents from each individual whose Personal Data you upload or contact via the Platform. Reggiee does not verify the source or legality of contact data uploaded to the Platform and accepts no responsibility for your use of such data. You agree to indemnify and hold Reggiee harmless from any claims arising from your failure to obtain appropriate consents. Use of Cookies and Similar Technologies The Platform uses Cookies and similar tracking technologies to enhance your user experience, analyse usage patterns, and improve the overall functionality of the Platform. For detailed information about the types of cookies we use and how to manage them, please review our Cookies Policy. Data Security We take the security of your Personal Data seriously and have implemented appropriate and proportionate technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction. These measures include: Encryption of Data in Transit: All data transmitted between your browser and our servers is encrypted using SSL and TLS protocols Encryption of Sensitive Keys: API keys and credentials are encrypted using pgsodium in Supabase Access Controls: Strict access control policies ensure only authorised personnel can access Personal Data Security Audits: We conduct periodic security audits and vulnerability assessments While we implement robust safeguards, no method of electronic transmission or storage is entirely secure. We cannot guarantee that hackers or unauthorised third parties will not breach our security measures. Data Retention and Storage We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. We delete short-lived technical data on a schedule: visitor IP addresses and cities after 30 days, registrant IP addresses and browser details after 90 days, webhook message bodies after 30 days and operational error logs after 90 days. When a brand or account is deleted, we remove its contacts, registrations, messages and uploaded files promptly and provider cleanup completes as part of the same process. Encrypted backups are overwritten within 35 days. We keep billing and tax records for six (6) years, as UK law requires, and a minimal suppression record (an email address or number with no other details) for as long as needed to honour an opt-out or erasure request. A longer retention period applies only where required or permitted by law. Data Transfers As part of providing the Reggiee Platform, your information, including Personal Data, may be transferred to, stored on, and processed by servers and service providers located in jurisdictions outside your country. The Platform is hosted in the United Kingdom. If you are located outside the UK, your Personal Data will be transferred to and processed in the UK. We protect data that leaves the UK or EEA using adequacy decisions or approved contractual safeguards such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses. See /legal/transfers for details. Artificial intelligence features Reggiee includes optional AI tools, for example to suggest ad copy, event descriptions, images and privacy policy drafts. When you use them, the text and prompts you type are sent to our AI providers (currently Anthropic and fal.ai) to produce the result. We do not send registrant or contact details to these providers, and we do not use your content to train our own models. AI output can be inaccurate, so please review it before you publish it. Any brand administrator can turn all AI tools off in Settings > Business. WhatsApp and connected messaging tools Organisers can connect WhatsApp and other messaging tools. WhatsApp Communities connected through Whapi.Cloud use an unofficial connection method that WhatsApp's owner does not endorse, so the number can be restricted or banned. Organisers must read and accept a risk notice before using it, and we never add people to groups without them joining themselves. If you are contacted by an organiser you did not expect, you can reply STOP, use the unsubscribe link, or report it to us. Programmatic access (API and MCP) Organisers can give API keys and AI assistants (through the Reggiee MCP server) access to their own data. When they do, the organiser is responsible for what that tool can see and do. We limit what these tools can read (for example, dates of birth, IP addresses and consent evidence are not returned), but organisers should only connect tools they trust. Your Privacy Rights Depending on your location, you may have certain rights under data protection and privacy laws relating to the Personal Data we collect. These rights may include: Right to Access - Request confirmation and a copy of the data we hold about you Right to Rectification - Request correction of inaccurate or incomplete data Right to Erasure - Request deletion of your Personal Data where it is no longer necessary Right to Restrict Processing - Request that we limit processing in certain situations Right to Data Portability - Receive your data in a structured, machine-readable format Right to Object - Object to processing for direct marketing or based on legitimate interests Right to Withdraw Consent - Withdraw consent at any time where processing is based on consent To exercise any of your privacy rights, please contact us at the address below. If your data was collected by an event organiser, we will forward your request to them as they decide what happens to it. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to your local data protection authority. Email: hello@reggi.ee Postal Address: 128 City Road, London, EC1V 2NX Additional Privacy Rights for California Residents If you are a resident of California, you have specific privacy rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Your CCPA/CPRA rights include: Right to Know - Request disclosure of the categories and specific pieces of Personal Information we have collected Right to Delete - Request deletion of your Personal Information Right to Correct - Request correction of inaccurate Personal Information Right to Opt-Out - Opt out of the "sale" or "sharing" of your Personal Information Right to Non-Discrimination - We will not discriminate against you for exercising your rights While Reggiee does not sell Personal Information in exchange for money, certain data-sharing practices for analytics or advertising may be considered "sharing" under California law. We load advertising and analytics tools only if you accept them in our cookie choices, and we treat a Global Privacy Control signal from your browser as a request not to accept them. You can change your choice at any time using "Your privacy choices" in the footer. Children's Privacy The Reggiee Platform and services are intended for use only by individuals aged 18 years or older. We do not knowingly collect, solicit, or store Personal Data from individuals under 18 years of age. If you are a parent or guardian and believe your child has provided us with Personal Data without your consent, please contact us to request deletion of that data. Third-Party Links and Integrations The Platform may contain links to third-party websites, applications, or services that are not owned or controlled by us. Once you click a link or interact with a third-party integration, you will be subject to the terms and privacy policies of that third party. We do not monitor or have control over third-party sites or services and are not responsible for their practices or content. Controls for "Do Not Track" (DNT) Many browsers offer a "Do Not Track" (DNT) feature which sends a signal indicating a preference not to be tracked. Currently, there is no universally accepted standard for recognising and responding to DNT signals. Reggiee does not respond to Do Not Track signals but does respect Global Privacy Control signals as described above. If an industry or legal standard is adopted, we will update this Policy accordingly. Changes in Ownership or Control In the event that Reggiee undergoes a change in ownership or control, your Personal Data may be transferred as part of the business assets. Any such transfer will be conducted in accordance with applicable data protection laws. Updates to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Each updated version will be indicated by a revised "Last Updated" date at the top of the Policy. If we make material changes, we will take reasonable steps to notify you in advance. Your continued use of the Platform after such updates constitutes your acceptance of the revised Policy. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your Personal Data, please contact us: E Labs Ventures Ltd 128 City Road London, EC1V 2NX Email: hello@reggi.ee For more information about how we use cookies and tracking technologies, please review our Cookies Policy and Terms of Service.