Privacy notice
Last updated 10 November 2026
This notice explains what personal information we collect through this website and our booking system, why we collect it, who helps us look after it, and your rights. We've tried to keep it short and in plain English.
Who we are
We're Vicious Kitten, a band based in Devon. The band's members decide how your information is used, so we are the "controller" of it under UK data protection law (the UK GDPR and the Data Protection Act 2018). The Pause, our acoustic duo, is run by the same people and shares our booking system, so this notice covers both.
To contact us about your information, use the form at the bottom of this page.
What we collect and why
What: your name, email and phone number, details of your event (date, venue, times, guest numbers) and anything you write in your message.
Why and the legal basis: to reply to you and give you a quote. This is a step you asked us to take before we agree a booking.
How long we keep it: 18 months after we last heard from you if it doesn't become a booking. Our system deletes these automatically.
What: your contact details, the venue, timings, song requests, an emergency contact for the day, and what you've paid.
Why and the legal basis: to plan and play your event (our contract with you) and to keep the financial records the law requires.
How long we keep it: six years after the end of the tax year the booking falls in, because HMRC requires it.
What: your name, email, how many of you are coming and which gig.
Why and the legal basis: to confirm your RSVP and send you the reminder you asked for, and so we know roughly how many people to expect. This is in our legitimate interests and yours. The website only ever shows a total (for example "12 going"), never names.
How long we keep it: 30 days after the gig, then deleted automatically. You can cancel any time using the link in our email.
What: your email address, your first name if you give it, the postcode or town you enter, how far you'd travel and which of our acts you want to hear about. You can sign up on our gig alerts page, when you say you're going to a gig, or when you request a song.
Why and the legal basis: to email you when we announce a gig near you, and on Mondays when one is coming up that week. We only do this with your consent, which you give by clicking the link in our confirmation email. Your postcode is only used to work out which gigs are near you.
How long we keep it: until you unsubscribe, when we delete your details straight away. Every email has an unsubscribe link. If you don't confirm your sign-up, we delete it after 14 days.
What: the song, and if you choose to give them, your first name and email address. We also keep a scrambled code made from your internet address, so each person can vote once per song.
Why and the legal basis: to add your request to our list and, if you gave your email, to thank you and tell you if we add the song. This is based on your consent, which you give by entering your email. If you also tick the box for gig alerts, we use your email and postcode or town as described under Gig alert emails, but only once you confirm by tapping the link we send you.
How long we keep it: your email is deleted as soon as we add the song or decide not to. The song and any first name stay on our request list until we remove it.
What: the photos and videos, which gig they are from, and your name, Instagram handle and message if you add them. Photos can include the date, time and sometimes the place they were taken.
Why and the legal basis: so we can look through them and share our favourites on our website and social media, with a credit to you if you gave your name or handle. You agree to this when you tick the box on the form.
How long we keep it: in our private gig files until we delete them. Ask us and we will delete your photos and videos, and take down anything we have shared.
What: the amount, and your name and a message if you add them. Your card details go straight to Stripe, our payment provider, and we never see them.
Why and the legal basis: to take your tip and let the band know who sent it. This is needed to carry out the payment you asked for.
How long we keep it: Stripe keeps payment records as the law requires. We keep a note of each tip for our accounts.
What: your name, email and what you tell us.
Why and the legal basis: to deal with your request or complaint. This is a legal obligation.
How long we keep it: 18 months after we last heard from you.
Visiting the website
Like any website, our hosting provider handles your device's IP address and basic technical details to send you the pages and protect the site from attacks. We don't use analytics, advertising or tracking cookies, and we don't build profiles of visitors.
We never sell your information or pass it to anyone for their own marketing.
Who helps us
We use a few trusted services to run the website and booking system. They only use your information to provide their service to us, under contracts that require them to keep it safe.
- Cloudflare hosts the website and stores our booking system, enquiries, RSVPs and gig alert list, and forwards email to us.
- Resend sends our emails (enquiry replies, RSVP confirmations, reminders and gig alerts).
- Google provides our email inboxes (Gmail) and our gig calendar.
- Anthropic provides an AI assistant that helps us draft replies to enquiries. When we use it, the messages in that conversation are sent to it. A band member always reads and edits the reply before it is sent, and Anthropic does not use this information to train its AI.
- postcodes.io turns the postcode or town you enter into an approximate location. Only the postcode or town is sent to it, never your name or email.
Cloudflare, Resend, Google and Anthropic are US companies, so your information may be stored or handled in the United States. Where that happens it is protected by the UK-US "data bridge" or by the UK's approved data transfer contracts.
Cookies and storage on your device
This website doesn't set any cookies. When you tap "I'm going", your browser keeps a small note so the button still shows as ticked next time you visit. It stays on your device, we can't see it, and you can clear it by clearing your browser's site data.
Videos and music from YouTube, Spotify and similar sites don't load until you tap play. Once you do, that service may set its own cookies, under its own privacy policy.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct anything that's wrong
- ask us to delete your information
- ask us to stop or limit how we use it, or object to us using it
- ask for your information in a format you can take elsewhere
- withdraw your consent at any time (for example, by unsubscribing from gig alerts)
Some of these rights have exceptions. For example, we must keep financial records for six years. Use the form below and we'll reply within one month. It's free, and we may ask you to confirm who you are before we share anything.
Complaints
If you're unhappy with how we've handled your information, please tell us first using the form below and choose "I want to make a complaint". We'll acknowledge it within 30 days, look into it, keep you updated and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
If we change how we use your information, we'll update this page and the date at the top.