Privacy Policy

Effective: 25 August 2026

This policy explains how Requestor handles personal information when you visit requestor.co.uk, create or manage an account, use a Requestor event, contact us, or receive email from us.

1. Information we collect

Account information

When an account is created we collect information such as your first and last name, email address, organisation or DJ name, chosen Requestor URL, password in hashed form, optional telephone number, email-verification status and account timestamps.

Preferences and consent records

We record whether you have opted into optional marketing email, when that preference changes, and when required signup acknowledgements were recorded.

Event and request information

Requestor stores information needed to operate your events, rooms, requests, queues, displays, event history and related settings. Guest requests may include a requester's name and the requested dance or item, together with status and timing information.

Technical and security information

Our server may process IP addresses, browser/request metadata, session identifiers, security/rate-limit information and server logs needed to deliver, protect and troubleshoot the service.

Communications

If you contact us, we process the information in your message and any information reasonably needed to respond.

2. Why we use personal information

• To provide the service and account: create and manage accounts, provision Requestor URLs, authenticate users and operate requested features.
• To keep accounts secure: email verification, password reset, abuse prevention, rate limiting, diagnostics and security notices.
• To communicate about the service: transactional and important account/service messages.
• To improve and administer Requestor: maintain functionality, investigate problems and understand service operation.
• Optional marketing: send Requestor news, feature updates and offers only where you have opted in; you can withdraw this at any time.
• Legal obligations and legitimate protection: comply with applicable law, establish or defend legal rights, and protect users, Requestor and third parties.

3. Lawful bases

Depending on the activity, we rely on performance of a contract or steps requested before entering one, legitimate interests in operating and securing the service, legal obligations, and consent for optional marketing communications. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing.

4. Account holders and guest-request data

For account information used to operate the Requestor service, Requestor determines why that account information is processed. For personal information an account holder chooses to collect from guests through their own events, the account holder may have separate responsibilities under data-protection law. Event organisers should avoid collecting information they do not need and should give guests appropriate information where required.

5. Sharing information

We do not sell personal information. Information may be shared with hosting, email, infrastructure or professional service providers where reasonably necessary to operate Requestor, with authorities or advisers where legally required or necessary to protect rights and security, or as part of a genuine business reorganisation subject to appropriate safeguards.

6. International transfers

Where a supplier processes information outside the United Kingdom, we will use an appropriate legal mechanism or safeguard where required by UK data-protection law.

7. Retention

We keep information only for as long as reasonably necessary for the purpose for which it was collected, including account operation, event history, security, dispute handling and legal obligations. Verification and password-reset tokens are time-limited. Server/security logs and rate-limit records may be retained for shorter operational periods. You can request account deletion by contacting us; some information may need to be retained where required by law or for legitimate legal/security records.

8. Security

Passwords are stored using one-way password hashing rather than in plain text. Requestor also uses authenticated sessions, email verification, time-limited password-reset links and rate limiting. No internet service can guarantee absolute security, so account holders should use a strong unique password and keep access details private.

9. Your rights

UK data-protection law may give you rights to access personal information, correct inaccurate information, request deletion or restriction, object to certain processing, obtain certain information in portable form, and withdraw consent. Rights depend on the circumstances and are subject to legal exceptions. Contact contact@requestor.co.uk to exercise a right.

You can also complain to the UK Information Commissioner's Office (ICO) if you believe your information has been handled unlawfully. We would appreciate the opportunity to address your concern first.

10. Marketing preferences

Marketing email is optional and separate from essential service communications. You can change the marketing checkbox in your Requestor profile at any time. Turning it off does not stop necessary verification, security, password-reset or account-service messages.

11. Cookies and browser storage

See our Cookie Policy for details of the storage used to keep users signed in and operate the service.

12. Changes to this policy

We may update this policy as Requestor changes or legal requirements develop. The effective date above identifies the current version. Material changes may also be communicated to account holders.

13. Contact

Privacy questions and requests: contact@requestor.co.uk.