PRIVACY POLICY

Last updated: 26th August 2026

1. Introduction

Welcome to Brum Outloud. We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This privacy policy explains how we collect, use, and share your personal information when you visit our website brumoutloud.co.uk.

2. Information We Collect

We may collect and process the following types of personal information:

Contact Information: When you use our contact forms or submit events, we collect your name and email address, and use it to reply to you and to handle your submission. We will not add you to any mailing list because you contacted us or listed an event — that is a separate choice you make yourself.
Account and Preferences: If you create an account, we store your email address and the preferences you choose — the kinds of events you want to hear about, which nights suit you, venues you follow, and how often you want an email. We sign you in with a link sent to your email, so there is no password to store.
Event and Venue Submission Data: If you submit an event or venue, we collect the details you provide, including event names, dates, times, descriptions, venue details, and promotional images. This data is used to populate our website listings and may be shared publicly on the site.
Technical Data: We automatically collect certain information when you visit our website, such as your IP address, browser type, operating system, referral sources, length of visit, and page views. This data is collected through cookies and similar technologies and is used for website analytics and improvement.

3. How We Use Your Information

We use the information we collect for the following purposes:

To operate, maintain, and improve our website and services.
To process, review, and publish event and venue submissions.
To communicate with you, respond to your inquiries, and provide support.
To analyze website usage and trends to enhance user experience and website functionality.
To sign you in, when you ask us to send you a sign-in link.
To choose which events to show or email you, based on the preferences you set. This is done by matching your stated preferences against our event listings — there is no profiling of you as a person, and no automated decision-making that has any legal or similarly significant effect.
To send you the emails you asked for, at the frequency you chose.
To comply with legal obligations and enforce our terms and conditions.

4. Legal Basis for Processing (GDPR)

If you are in the United Kingdom or the European Economic Area, our legal basis for collecting and using the personal information described in this Privacy Policy depends on the information we collect and the specific context in which we collect it.

We may process your personal data because:

We need to perform a contract with you (e.g., to publish your event submission).
You have given us permission to do so. This is our basis for sending you emails and for storing the preferences you set — you opt in, and you can withdraw at any time without affecting anything you have already received.
The processing is in our legitimate interests and it's not overridden by your rights.
To comply with the law.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our website and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device.

We use:

Essential Cookies: Necessary for the website to function and cannot be switched off in our systems.
Analytics Cookies: Help us understand how visitors interact with the website by collecting and reporting information anonymously.

You have the right to decide whether to accept or reject cookies. You can manage your cookie preferences at any time through our cookie consent banner, which appears upon your first visit or can be re-accessed via a link in the footer.

6. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties. We may share your information with:

Service Providers: Companies that run parts of the site on our behalf, and process data only on our instructions: Netlify (hosting), Google Firebase (database and sign-in), Cloudinary (images), Resend (sending email), and Google Analytics via Tag Manager (website statistics, only if you accept analytics cookies).
Legal Requirements: When required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Please note that event and venue details submitted by you and published on our website are intended for public display and will be accessible to all website visitors.

7. Accounts and Email

We do not ask how you identify. We never ask for your gender, pronouns, sexuality, trans status, HIV status, ethnicity, religion, disability or relationship status, and there is nowhere in your account to record any of it. We ask only what kinds of events you want to be told about. We have deliberately kept it that way: information about who you are is not ours to hold, and holding it would put you at risk if it were ever exposed.

Emails are sent only if you ask for them. You opt in explicitly — nothing is pre-ticked, and creating an account does not by itself sign you up. Every email has a one-click unsubscribe, and you can change your preferences or stop entirely at any time from your account. We do not sell, rent or share your email address, and we do not send other people's marketing.

We keep a record of which emails we sent you and whether they were delivered, so we can fix problems and honour your choices. If you delete your account we delete your email address, your preferences and your saved events. Tell us and we will do it; you do not have to give a reason.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Event and venue data will be retained for as long as the listing is active on our site and for a reasonable period thereafter for archival purposes.

9. Your Data Protection Rights (GDPR)

Depending on your location, you may have the following data protection rights:

The right to access, update or to delete the information we have on you.
The right of rectification.
The right to object.
The right of restriction.
The right to data portability.
The right to withdraw consent.

To exercise any of these rights, please contact us. We will respond to your request within a reasonable timeframe.

10. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

11. Links to Other Sites

Our website may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us.