Privacy

PRIVACY NOTICE Last updated: 2 November 2026 This notice explains how Going Out Out uses personal information. It is written for people in the United Kingdom. The rules that apply are the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003. Going Out Out is a guide to local events, entertainment and venues, including pubs, nights out and things to do in Portsmouth and Hampshire. You can browse without an account. An account is only needed if you want to save events, mark that you are going, follow a pub, or list a venue. 1. WHO WE ARE The service is called Going Out Out. The data controller is Robert Jamieson, company number, 17456528, of 13 Ernest Road, Portsmouth, PO1 5RB. Privacy email: contact@goingoutout.co.uk Support email: contact@goingoutout.co.uk We have not appointed a statutory data protection officer. Use the privacy email for any question about your information. 2. THE SHORT VERSION We use personal information to run the guide, keep accounts secure, show venue and event listings, send the emails you have switched on, and deal with reports and enquiries. We do not sell personal information. We do not use it for automated decisions that produce a legal effect, or a similarly significant effect, on you. Names of people who mark themselves as going are not published. The number of people may be shown. Marking that you are going is an intention. It is not a ticket, a reservation, or guaranteed entry. 3. INFORMATION YOU GIVE US Account, if you create one - Your display name, email address and password. The password is stored in a form that is not readable as the original password. - Whether the account is a member account or a venue account. The two are separate. - The time you accepted the terms, and the version you accepted. - The time you confirmed you are 18 or over. We do not ask for your date of birth. - Whether your email address has been verified. - If an administrator suspends the account, the status and the reason. You must not create an account if you are under 18. Saved events, pubs and plans - Events you save. - Events you mark as going, or stop going to. - Pubs you favourite or unfollow. - Event types you tick as interests, if you set any. Emails about events - Whether you want email when a pub you favourite adds an event. - Whether you want email if an event you marked as going is cancelled, postponed or changed. - Whether you want a reminder on the day, and about an hour before. - The time you switched each one on or off, and the version of the wording in use at that time. Favouriting a pub switches on emails about new events at pubs you favourite, unless you have already switched those emails off. Marking an event as going switches on change emails and reminders for events you are going to, unless you have already switched those off. You can turn each one off in Alerts. Every one of those emails includes a way to stop it. Stopping it stays off, including if you favourite a pub again. Promotional news The registration form has a separate tick for occasional news about Going Out Out. It is off unless you tick it. We do not send promotional news unless you have opted in. You can withdraw that permission at any time. We do not treat it as permission for anything else. Venue listings and events If you list or manage a venue, we use the details you submit so the listing can be reviewed and, if it is approved, shown on the site. That can include the venue name, description, public phone number, public email address, website, social media links, address, postcode, map pin, opening hours, amenities, photos, and events. Events can include a title, description, dates and times, price, category, photos and a booking link. Only publish a person's name, phone number, email address or photo if you have a proper reason to do so and they would expect it. Do not publish a private number or a photograph of a child as a way to decorate a listing. Claims and invitations If you claim a venue, we use your account, your notes, and any evidence file you upload, so we can decide the claim. Email verification does not prove that you own or manage the venue. If you invite someone to help run a venue, we use the email address you give us to send the invitation, and we store the role you chose. If they do not accept, we keep the invitation until it expires or you revoke it. Enquiries, reports and messages - If you ask about featuring, we keep the contact email, the message, and the event you mentioned, if you chose one. Featuring is an enquiry. There is no checkout on the site. - If you report a listing or an event, we keep the reason, your email address if you give one or if you are signed in, and the outcome. - If you contact us, we use your name, email address and message so we can reply, and we keep a record of that correspondence. 4. INFORMATION COLLECTED WHILE YOU USE THE SITE - The town you choose. It is stored in your session so the guide can stay on that place. It is not added to an account profile. - If you use "use my location", your browser sends a latitude and longitude once. We use that point only to find the nearest town we cover. If it is not within about 30 miles of one, we do not keep it. We do not save the precise point on your account. - A session record so the site can keep you signed in, remember the town, and protect forms from forgery. The session can include your IP address and browser type. - If you tick "remember me" on sign-in, a further cookie so you stay signed in on that device until you sign out. - Security and hosting logs, which can include IP address, the time of a request, and browser type. - Counts of things that happen on a listing, such as a page view, a directions click, a share click, or a click through to a venue's booking link. We store a daily total. For about 30 days we also keep a one-way hash of the session, the listing and the action, so the same session is not counted twice that day. We do not use that hash to build a profile of you, and we do not sell it. - Venues can see those totals for their own listing. They cannot see the names of people who viewed, shared, or marked themselves as going. - If staff use an authenticator app for the admin area, we store the secret and recovery codes needed for that check. Ordinary member and venue accounts are not asked for this. We do not ask you for information about health, religion, sexuality, politics, trade union membership, ethnicity or biometrics. Please do not put that sort of information in a listing, a report, or a message. 5. WHY WE USE IT, AND THE LEGAL BASIS UK GDPR says we need a lawful basis for each use. To provide the site you asked for. Basis: contract, or steps before a contract. Creating and securing an account, showing your saved events, pubs and going list, running a venue dashboard, reviewing a listing, and sending a venue invitation. To send service email about a feature you used. Basis: contract, and our legitimate interest in running that feature properly. Emails when a pub you favourite adds an event. Emails when an event you marked as going changes. Reminders for an event you marked as going. You can object and switch these off. The off switch is in Alerts, and in the email itself. To verify email, reset a password, and tell you about a change to these terms or this notice. Basis: contract, and our legitimate interest in keeping accounts secure and people informed. To keep the site safe. Basis: legitimate interests. Detecting abuse, protecting accounts, moderating listings, investigating reports, and keeping security logs. We balance this against your rights. You can object. We will stop unless we have a compelling reason to continue, such as an open security incident. To measure, in aggregate, which listings are being opened. Basis: legitimate interests. So venues and we can see demand. The figures are totals, not a dossier on you. To send occasional news, and only if you tick that box. Basis: consent. You can withdraw consent at any time. Withdrawal does not affect email we were allowed to send before you withdrew. To establish or defend a legal claim, or to meet a legal duty. Basis: legitimate interests, or a legal obligation. For example a court order, a tax duty, or a request from a regulator where the law allows or requires it. To publish venue and event details the venue asked us to publish. Basis: contract with the venue, and our legitimate interest in running a public guide. Public details can include the venue's address, public phone, public email, website and social links. 6. WHO WE SHARE IT WITH We do not sell personal information. We share it with: - People who work for us, or who administer the site, only as far as they need it to do that work. - The business that hosts the website and database: Creation Web Solutions Ltd, United Kingdom. - The business that delivers our email: IONOS LTD, United Kingdom. - A venue's own managers, for that venue's listing, events, enquiries and aggregate counts. Not for a member's private saved list, and not for the names behind a going count. - The person who invited you, to the extent of knowing whether the invitation was sent. - Professional advisers, insurers, or a buyer of the business, if that is needed and the information is protected. - Police, regulators, courts, or other authorities when the law requires it, or when it is needed to protect someone from harm. If you follow a booking link, you leave Going Out Out for a site the venue chose. That site has its own privacy notice. We count the click. We do not see what you do after you arrive. If you click a share button, your browser opens Facebook, WhatsApp, Instagram or X. We do not embed their trackers on the page. Whatever you then do is between you and that service. When a map is shown, your browser asks OpenStreetMap, or the tile server configured for the site, for map images. That server receives your IP address. When a page loads, your browser may also request a font from fonts.bunny.net, which receives your IP address. Those providers are not our advertising partners. See the cookie notice. 7. WHERE INFORMATION IS STORED We aim to keep personal information in the United Kingdom, or in a country the UK has decided offers enough protection. If a supplier stores information somewhere else, we use a lawful transfer tool. That will usually be the UK International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses, plus any extra steps the transfer needs. Your browser sends your IP address directly to the map tile server and the font server. Those servers may be outside the United Kingdom. That transfer happens because your browser loads the map or the font, not because we sell a list of visitors. 8. HOW LONG WE KEEP IT We keep personal information only for as long as we need the reason we collected it. Then we delete it or reduce it so it no longer identifies you. - Account information: for the life of the account. After you ask us to delete it, we aim to delete or anonymise it within one month, unless a row below says we keep a specific record for longer. - Saved events, follows, interests and going marks: until you remove them, or the account is deleted. If an event listing itself is removed, the link to it goes with the listing. - Email preference records, including the time you switched a topic off: for the life of the account, so we do not switch you back on by mistake. - Records of emails we handed to our email provider: for up to 12 months, so we can show what was sent and fix failures. - A download or export you make is yours. We do not keep a separate copy just because you downloaded it. - Venue listings and events: while the listing is published, and while it is in review. If a listing is rejected or taken down, we keep the record for up to 24 months in case of a dispute, then delete or anonymise it. A venue can ask for earlier deletion where the law allows. - Claim evidence: for the review, and for up to 12 months after the decision, then deleted. - Invitations that are not accepted: until they expire or are revoked, and for up to 12 months after that. - Reports and moderation records: until the report is closed, and for up to 24 months after that. - Featuring enquiries and other correspondence: for up to 24 months after the last message, unless we still need it for a claim. - The one-way session hash used to avoid double counting: about 30 days. - Daily totals that no longer identify anyone: for up to 24 months. - Session records: for the life of the session. A normal session ends after about 2 hours of inactivity. A remember-me cookie lasts until you sign out. - Password reset links: about an hour. - Security and hosting logs: up to 90 days, unless we need a particular log for an incident, in which case we keep that log until the incident is closed. - Backups: overwritten on the host's backup cycle. A deleted account can remain in a backup until that cycle replaces it. Backups are not used as a live system. We may keep a minimised record for longer where the law requires it, or where a claim is still open. If we refuse part of a deletion request, we will tell you what we are keeping and why. 9. YOUR RIGHTS You have the right to: - Be told how your information is used. This notice does that. - Ask for a copy of your information. This is access. - Have inaccurate information corrected. This is rectification. - Ask us to delete information. This is erasure. It is not absolute. We can refuse where we still need the information for a legal claim, a legal duty, or freedom of expression. - Ask us to restrict how we use information while a dispute about it is unresolved. - Ask for information you provided, in a portable format, where the basis is contract or consent and the processing is automated. Your account can download a file of your profile, saved events, events you marked as going, and pubs you follow. - Object to processing based on legitimate interests. We will stop unless we have a compelling reason that overrides your rights. - Withdraw consent at any time, where consent is the basis. This applies to optional news. It does not undo use that was lawful before you withdrew. - Object to direct marketing. We will stop promotional email if you ask. Service emails about a pub you favourite, or an event you marked as going, can be switched off without closing your account. - Complain. You do not have to pay a fee for these rights unless a request is manifestly unfounded or excessive. We may ask for information to confirm it is you. We respond within one month. If a request is complex we may extend that by up to two further months, and we will tell you if we do. How to use them - Download a copy, change your name, change your email, change your password, or ask for deletion from your account pages. - Switch event emails off in Alerts, or use the link in the email. - For anything else, email [contact@goingoutout.co.uk]. Complaints Write to [contact@goingoutout.co.uk] first if you can. Tell us what happened and what you want. We will acknowledge the complaint and reply within one month. You can also complain to the Information Commissioner's Office, whether or not you have written to us. Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF ico.org.uk 0303 123 1113 10. CHILDREN Going Out Out is not directed at children. Accounts are only for people who confirm they are 18 or over. Browsing the public guide does not need an account. We do not knowingly collect personal information from anyone under 18 in an account. If we learn that an account belongs to someone under 18, we will close it and delete the personal information, unless we have to keep a minimal record to show why it was closed. Family events may be listed. That does not mean we offer accounts to children. A venue must not upload a child's personal information. 11. SECURITY We use access controls, hashed passwords, email verification, and protection against forged form submissions. Staff access to the admin area can use an authenticator app. No website can promise that information will never be accessed unlawfully. If a breach creates a risk to you, we will tell you and, where the law requires it, the ICO. 12. INFORMATION YOU MUST PROVIDE You do not have to create an account to look at events. If you want an account, we need a name, an email address, a password, acceptance of the terms, and confirmation that you are 18 or over. Without those we cannot open the account. A venue listing needs enough detail for a visitor to find the venue and for us to review it. If required fields are missing, we cannot publish it. 13. CHANGES TO THIS NOTICE We will post the new notice on this page and change the date at the top. If a change materially affects an account, we will also email the address on that account. 14. COOKIES Cookies are explained in the cookie notice. The cookies we set are there to run the site. We do not use advertising cookies.