DRAFT — needs legal review before production. Written 15 Sep 2026 from what the system actually does.

How we use your details

This notice is for people who join FareShare as a promoter (affiliate) to sell tickets for The Rum Monkey. Ticketbook, our emails and the terms of selling call you an affiliate; on FareShare you are a promoter — they mean the same thing.

Who we are. Puppy Ltd (company 07938517), trading as The Rum Monkey, registered office 71-75 Shelton Street, London WC2H 9JQ. FareShare and our ticketing system, Ticketbook, are both ours. Contact: hello@therummonkey.com.

What we collect and why

• Your name, email and mobile — to create your account, confirm your email, and contact you about your account. Kept on Ticketbook as your affiliate record, with your login on FareShare.
• Confirming your mobile — before you add bank details we text a one-time code to your mobile to check it is yours. We keep the date it was confirmed and which number was confirmed, never the code.
• Your bank name, sort code and account number — to pay your commission. Sent straight to Ticketbook, where they are stored encrypted. FareShare does not keep them and only ever shows the last four digits.
• Your photo — taken with your camera when you sign up, so The Rum Monkey's staff can recognise you as a promoter selling on our behalf. It is shown to you and to The Rum Monkey's staff, both on FareShare and on our ticketing system Ticketbook. It is stored only on FareShare — Ticketbook is never sent a copy to keep, and displays it by asking FareShare for it each time. It is never public, never shown to buyers, and never used for facial recognition or automated matching of any kind. You can retake it whenever you like under Update details. If your device cannot take it, a member of staff takes it at the venue within 14 days.
• Your acceptance of the terms of selling — the version and when you accepted it.
• Your sales — which orders came through your links or your in-person sales, and what you earned. We do not see buyers' card details.
• Clicks on a seller's link — when someone opens a FareShare link we record which link it was, the time, a scrambled (hashed) form of the visitor's internet address, their browser type, the site they came from, and — if they arrived from a Google ad — the click identifier Google adds to the web address. We use it to tell a venue how their link and their advertising are performing. It is not used to build a profile of anyone and it is never sold.
• Security records — a scrambled (hashed) form of your internet address when you sign in, sign up or report an app problem, to stop abuse. Not your raw address.
• App problem reports — if the seller app crashes, a short technical report with emails and codes removed.

Our lawful basis

• Your photo: our legitimate interest in our staff being able to recognise the people selling tickets on our behalf. It is not consent, because the photo is part of joining; you can object, and a member of staff will talk it through with you.

To set up and run your affiliate agreement with us (contract), to pay you and keep tax records (legal obligation), and to keep the service secure (legitimate interests). Marketing emails only if you tick the box, and you can stop them at any time.

Who we share it with

• Ticketbook (our own system) holds your affiliate record, pays you, and shows your photo to our staff by asking FareShare for it — it is never sent a copy to store.
• Our bank receives your details when we pay you, and checks the name matches the account (Confirmation of Payee).
• Resend sends account emails on our behalf.
• Twilio sends the one-time code to your mobile, and sees that number to do so.
• Stripe processes buyers' payments. It does not receive your bank details from us.
• IONOS hosts the server FareShare runs on, in the UK.
• Google stores our encrypted database backups (Google Drive), for 14 days. The backups are encrypted before they leave our server.

We do not sell your details.

How long we keep it

• Sign-ups never confirmed: deleted after 7 days.
• Bank details: kept while you are an affiliate and for 1 month after your account closes.
• Sales and payment records: kept as long as the law requires for tax and accounting.
• App problem reports: 30 days.
• Click records, including any Google ad click identifier: kept while the seller's account is open, and deleted with the rest of their records when it closes.
• Your photo: kept while you are an affiliate. It is deleted when we reject an application, and within 30 days of your affiliate account being closed. Like the rest of our database, it is also in our nightly backups — on our server, readable only by its administrator, and encrypted in Google Drive — which are kept for 14 days and then deleted.

Cookies

We set a small number of cookies, all of them our own — none are advertising or third-party cookies, and we do not track you across other websites.

• Signing in. If you have an affiliate account, a cookie keeps you signed in for 14 days. Without it we cannot know it is you, so it has no alternative.
• Who sent you (`__Host-fs_ref`). When you arrive through an affiliate's or a venue's link, we remember which one for 30 days so that if you come back later and buy a ticket, they are still paid their commission. It holds only their public reference code — nothing about you, and nothing we can read your identity from. It changes nothing about the price you pay or the nights you are shown.

You can delete these at any time in your browser settings. Deleting the second one means an affiliate or venue may not be credited for a sale they introduced; nothing else changes.

Your rights

You can ask for a copy of your details, to correct them (most you can change yourself under Update details), to delete them where we don't have to keep them, or to object to how we use them. Email hello@therummonkey.com. You can also complain to the Information Commissioner's Office (ico.org.uk).