Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Personal Data We Collect

We collect the following categories of personal data:

• Account data— your name and email address, collected when you register or log in to ShowIQ.
• Payment data— billing information processed securely by Stripe. We do not store card numbers or bank details on our servers; Stripe handles all sensitive payment data under their own privacy policy.
• Event data— data you enter into the platform, including artist profiles, crew records, guest list entries, accreditation requests and rider information. This data relates to the events you manage and may include personal data of third parties (artists, crew, guests) that you upload.
• Technical data— session tokens stored in strictly necessary cookies to keep you logged in. We do not use advertising or analytics cookies.

3. How and Why We Use Your Data

We process personal data on the following legal grounds under the GDPR:

• Performance of a contract— to create and manage your account, provide the ShowIQ platform and process payments for events you purchase.
• Legitimate interests— to keep the platform secure, prevent fraud and resolve technical issues.
• Legal obligation— to comply with Dutch and EU financial record-keeping requirements.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Who We Share Data With

We do not sell your personal data. We share data only with the following categories of processors, each engaged under a data processing agreement:

• Stripe, Inc.— payment processing. Stripe may transfer data outside the EEA; appropriate safeguards (Standard Contractual Clauses) are in place.
• Email service provider— to send transactional emails (account notifications, invitations). We share only the email address and name required to deliver each message.
• Hosting and cloud infrastructure— our platform runs on cloud infrastructure. Data is stored within the EEA or under equivalent protections.
• Weeztix— where you enable the Weeztix ticketing integration for an event, relevant ticket and attendee data is exchanged with Weeztix under their own terms and privacy policy.

We may also disclose data if required by law or to protect the rights, property or safety of ShowIQ, our users or others.

5. Data Retention

We retain personal data for as long as necessary to provide the service and to comply with our legal obligations. In practice:

• Account and event data is kept for 5 years from the end of your contractual relationship with ShowIQ, in line with Dutch statutory retention requirements for financial records.
• After this period, personal data is securely deleted or anonymised.
• You may request earlier deletion of your account data; see Section 6 for your rights.

6. Cookies

ShowIQ uses only strictly necessary cookies: a session cookie that keeps you authenticated while you use the platform. This cookie is deleted when you log out or your session expires.

We do not use analytics, advertising or any third-party tracking cookies. No cookie consent banner is required for strictly necessary cookies under Dutch law (Telecommunicatiewet).

7. Your Rights Under the GDPR

As a data subject, you have the following rights:

• Right of access — obtain a copy of the personal data we hold about you.
• Right to rectification — have inaccurate data corrected.
• Right to erasure — request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction — ask us to limit processing in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.

To exercise any of these rights, email hello@showiq.nl. We will respond within 30 days.

8. International Data Transfers

Some of our processors (in particular Stripe) may process data outside the European Economic Area. In all such cases, we ensure that appropriate safeguards are in place, including the European Commission's Standard Contractual Clauses (SCCs), to protect your personal data to the standard required by EU law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice within the platform at least 14 days before they take effect. The “Last updated” date at the top of this page always reflects the most recent version.

10. Contact

Questions about this Privacy Policy or our data practices? Contact us at:

hello@showiq.nl