Privacy and your data

Last updated October 2026.

Who we are

Nasna (ناسنا) is run by [Company name], [registered address], registered with the UK Information Commissioner's Office under [ICO number]. We decide how your data is used (we're the “controller”). Contact: support@nasna.uk.

What we keep and why

• When you buy tickets: your email, the name on each ticket, what you bought and paid, and when your ticket was scanned at the door. We need these to give you your tickets and refunds (our contract with you), and to keep payment records (the law).
• Card details: we never see or store them. Stripe takes the payment and keeps its own records under its privacy policy.
• Reviews you write: your first name, rating and words, shown publicly.
• Organisers and door staff: your email, your organisation and what you did on Nasna (for security we log changes to prices, tickets and money).
• Security: we limit repeated attempts by network address; we don't store those addresses.
• Event pictures: when an organiser uploads a picture or links one from Google Drive, we keep our own copy and remove hidden data such as location.
• Access needs, only if you choose to give them at checkout and agree to share them: encrypted, seen only by that event's organiser, deleted 30 days after the event.

Who else sees it

• The organiser of the event you bought for sees your name, email and tickets, so they can run the event and contact you about it. They are responsible for how they use it.
• Stripe (payments) and our hosting and email providers, only to run the service.
• Anthropic (AI helper), only when an organiser asks it to draft event text or read a poster, and to pre-check public reviews and event pages for Nasna staff. We send event text and posters, never your payment details, and the AI only makes suggestions: people decide.
• A charity you donate to through Nasna receives your donation, not your details.

We don't sell your data and we don't use advertising trackers.

How long we keep it

• Your details on past orders: 24 months after the event, then removed. Payment amounts are kept for 6 years (UK tax law) without saying who paid.
• Checkouts that were never paid: your email is removed after 30 days.
• Sign-in links and sessions: deleted soon after they expire.

Cookies

We use only the cookies Nasna needs to work: one that keeps you signed in, and one that keeps your tickets on your phone. Events you “Save” are stored on your phone, not by us. No analytics or advertising cookies, so there's no banner.

Your rights

You can ask for a copy of your data, for it to be corrected or removed, or object to how we use it. Use the form above or email us; we reply within a month. If you're unhappy, you can complain to the Information Commissioner's Office.