Privacy policy

What we collect

• Your account: your email address, and when you created the account.
• When you buy: your name and mobile number, the tickets you chose, what you paid and the status of your order.
• From our payment provider: whether your payment succeeded and its reference number. We never receive or store your card number.
• At the event: when each ticket was scanned at the door.
• Your email choice: whether you asked for news about future events, and when.
• Technical data: your IP address and the type of browser and device you use, recorded when you sign in and to protect the site against abuse.

Why we use it

• To create your account, sell you tickets, take payment and let you in at the door.
• To email you your sign-in codes, order confirmations and tickets, and to contact you if there's a problem with your order or the event changes.
• To keep the site secure, for example to stop bots and repeated sign-in attempts, and to prevent fraud.
• To keep the financial records the law requires.
• To email you about future events, only if you ticked the box asking for this. You can stop these emails at any time from your account page.

We don't sell your data, and we don't use it for advertising.

Who we share it with

Only with the services that run the site for us, and only what each needs:

• Paymob, our payment provider: your name, email, mobile number and the amount, to process your payment.
• Resend: your email address and the content of our emails to you, to deliver them.
• Vercel (website hosting) and Neon (our database): they store and process the data above for us.
• Cloudflare: technical data about your browser, for the robot check when you sign in.

We may also share data when the law requires it, for example with the authorities of the Sultanate of Oman.

Where it's stored

Some of these providers store and process data outside Oman, in the European Union (including our database in Germany) and the United States. We use well-established providers that protect the data they handle for us, and we transfer data only as Omani law allows.

How long we keep it

• Orders and payment records: 10 years, to meet accounting and tax rules.
• Your account: until you ask us to delete it. We then delete it, except for order records we're required to keep.
• Sign-in data (IP address and browser): while you're signed in. Sign-in codes expire after 10 minutes.
• Your choice to get news about future events: until you turn it off.

Cookies

We use one essential cookie to keep you signed in. We don't use analytics or advertising cookies. If that ever changes, we'll update this policy first and ask for your consent where required.

Your rights

Under Omani law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that's wrong or out of date;
• delete your data, except what we must keep by law;
• stop using your data for a purpose you consented to, such as emails about future events.

Email hello@theafternoonclub.co from the address on your account. We'll reply within the time the law allows. If you're not happy with our answer, you can complain to the Ministry of Transport, Communications and Information Technology, which oversees data protection in Oman.

Age

Our events are for people aged 18 and over, and this website isn't meant for anyone younger. See our terms of sale.

Changes and questions

If we change this policy we'll update the date at the top, and tell you by email if the change is significant.

Email hello@theafternoonclub.co or see our contact page.