Privacy Policy

Last updated: September 7, 2026

Introduction

EventFlick ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our event management platform.

Information We Collect

Personal Information

We collect the following personal information that you provide to us:

• Email address: Required for account creation and communication
• First and last name: Used for account identification and personalization
• IP addresses: Collected automatically for security and analytics purposes
• Payment information: Processed securely through Stripe (we do not store credit card details)

Technical Information

• Browser type and version
• Device information
• Usage data and analytics
• Cookies and similar technologies

How We Use Your Information

We use your personal information for the following purposes:

• Account management: Creating and maintaining your account
• Service delivery: Providing event management features
• Communication: Sending important updates, notifications, and marketing materials
• Payment processing: Managing subscriptions and transactions
• Security: Protecting against fraud and unauthorized access
• Legal compliance: Meeting regulatory requirements

Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contract: To provide our services as agreed in our Terms of Service
• Legitimate interests: For improving our services and security
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We may share your information with:

• Service providers: Stripe for payment processing, AWS for hosting and file storage, our email delivery provider, and PostHog for privacy-conscious product analytics (only after you accept analytics cookies)
• Event participants: Your name may be visible to other event participants
• Legal authorities: When required by law or to protect our rights

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Photos of Event Guests

Event organizers and photographers upload photos that may show people attending an event who never created an EventFlick account. For that content:

• The event organizer or photographer who uploads the photos is responsible for having a lawful basis, such as consent obtained at the event, to have the photos taken and shared
• EventFlick processes these photos on the organizer's instructions, under a data processing agreement, to provide hosting, moderation, watermarking, and gallery display
• If you appear in a photo and want to exercise your rights, please contact the event organizer or photographer first; we assist them where required by law

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Export your data in a machine-readable format
• Right to object: Object to certain types of processing
• Right to withdraw consent: Withdraw consent for processing based on consent

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Data Retention

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements

Account data is typically retained for 7 years after account closure for legal and tax purposes.

International Transfers

Your data may be transferred and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

• European Commission adequacy decisions
• Standard contractual clauses
• Other appropriate safeguards

Cookies

We use cookies and similar technologies to:

• Maintain your logged-in session
• Remember your preferences
• Analyze usage patterns
• Improve our services

You can manage cookie preferences in your browser settings. For the full list of cookies we use, see our Cookie Policy.

Contact Information

For questions about this privacy policy or to exercise your rights, contact us at:

Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data properly.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through our platform.