Privacy Policy

Last updated 29 July 2026

This Privacy Notice for Performr Technologies Ltd (doing business as Performr) ('we', 'us', or 'our') describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:

• Visit our website at https://performr.io, or use our web application at https://app.performr.io, or any website or application of ours that links to this Privacy Notice;
• Use Performr — an online marketplace that connects people who want to book live entertainment with the performers who provide it. Bookers can search and discover acts (such as drag and cabaret artists, live bands, DJs, comedians, magicians and speakers), view performer profiles, message performers, and book and pay for a performance at their event. Performers can create a profile, list their acts, set their pricing and availability, accept bookings, and receive payouts. Payments are processed and held securely through Stripe using an escrow model, where funds are released to the performer after the performance takes place.
• Engage with us in other related ways, including any marketing or events.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@performr.io.

Summary of key points

This summary provides key points from our Privacy Notice. You can find more detail on any topic using the table of contents below.

What personal information do we process? We may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We may process financial information and other information that may be considered 'special' or 'sensitive' in certain jurisdictions, when necessary with your consent or as otherwise permitted by law.

Do we collect information from third parties? We may collect limited information from public databases, marketing partners, social media platforms, and other outside sources.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

When and with whom do we share personal information? We may share information in specific situations and with specific categories of third parties.

How do we keep your information safe? We have appropriate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission or storage can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located, applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way is to contact us. We will consider and act upon any request in accordance with applicable data protection laws.

Table of contents

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about us or our Services, participate in activities on the Services, or otherwise contact us. This may include: names; phone numbers (and the country each number belongs to); email addresses; mailing and billing addresses; usernames; passwords; contact preferences; contact or authentication data; and profile content you upload (such as photos, audio and video).

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process financial data.

Payment Data. We may collect data necessary to process your payment if you make a booking. All payment card data is handled and stored by Stripe, not by Performr. You may review their privacy notice at https://stripe.com/gb/privacy.

Social Media Login Data. We may provide you with the option to register using your existing social media account (for example, Google). If you choose to register this way, we will collect certain profile information from that provider, as described in 'How do we handle your social logins?' below.

Information automatically collected

In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. We collect this information through cookies and similar technologies. It includes:

• Log and Usage Data — service-related, diagnostic, usage and performance information our servers automatically collect (e.g. IP address, device information, browser type, pages viewed, searches, and error reports).
• Device Data — information about the computer, phone, tablet or other device you use to access the Services.
• Location Data — precise or imprecise information about your device's location. We use GPS and other technologies to provide location-based services (such as showing nearby performers and calculating travel to your event). You can opt out by disabling location access on your device, though certain features may not work.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information collected from other sources

In Short: We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources.

To help provide relevant marketing, offers and services and to update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, social media platforms, and other third parties. This information may include mailing addresses, job titles, email addresses, phone numbers, intent data, IP addresses, and social media profiles.

Content reports and rights confirmations. If you report content to us as infringing your rights, we collect what you give us in that report — your name, any organisation, your email address, the content you are complaining about and your description of your work — together with the IP address and browser the report was sent from. You do not need an account to report content. If you are a performer uploading media, we record that you confirmed you hold the rights to each file, together with the file, the time, and the IP address and browser you confirmed from. We keep both kinds of record because they are the evidence of who claimed what, and when.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate delivery of services to the user, including bookings, payments and payouts.
• To respond to user enquiries and offer support.
• To send administrative information to you, such as changes to our terms and policies.
• To fulfil and manage your orders, payments, returns, and exchanges made through the Services.
• To enable user-to-user communications between bookers and performers.
• To request feedback and to contact you about your use of our Services.
• To send you marketing and promotional communications, in accordance with your preferences. You can opt out at any time.
• To deliver targeted advertising tailored to your interests and location.
• To protect our Services, including fraud monitoring and prevention.
• To identify usage trends and to determine the effectiveness of our marketing.
• To save or protect an individual's vital interest, such as to prevent harm.

3. What legal bases do we rely on to process your information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law.

If you are located in the EU or UK, this section applies to you. The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on. We may rely on the following:

• Consent — where you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract — where necessary to fulfil our contractual obligations to you, including providing our Services.
• Legitimate Interests — where reasonably necessary to achieve our legitimate business interests (for example, to analyse and improve the Services, deliver relevant advertising, support our marketing, and prevent fraud), provided those interests do not outweigh your rights.
• Legal Obligations — where necessary for compliance with our legal obligations.
• Vital Interests — where necessary to protect your vital interests or those of a third party.

If you are located in Canada, this section applies to you. We may process your information if you have given us express consent, or where permission can be inferred (implied consent). You can withdraw your consent at any time. In some exceptional cases we may be permitted by law to process your information without your consent, for example for fraud detection and prevention, or where required to comply with a subpoena, warrant or court order.

4. When and with whom do we share your personal information?

In Short: We may share information in specific situations and with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third parties who perform services for us and require access to do that work, under contracts designed to safeguard your personal information. The categories of third parties we may share personal information with include: cloud computing services; data storage and hosting providers; payment processors; data analytics services; performance-monitoring and error-diagnostics tools; communication and collaboration tools; user account, registration and authentication services; ad networks, retargeting and social platforms; and sales and marketing tools.

The specific providers we rely on include, among others: Supabase (authentication, database and file storage), Stripe (payments and payouts), Vercel (hosting), Google (Maps/Places and Analytics), Meta (advertising pixel and Conversions API), Sentry (error monitoring and diagnostics), Microsoft (Clarity — product analytics and session replay), and Resend (transactional email).

We may also share your personal information in the following situations:

• Business Transfers. In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g. Google Maps API, Places API) to provide directions and location features.
• Affiliates. With our affiliates, who will be required to honour this Privacy Notice.
• Business Partners. To offer you certain products, services, or promotions.
• Other Users. When you share personal information or interact with public areas of the Services (for example, posting reviews, or interacting with a performer or booker), such information may be viewed by, and shared with, the relevant users. When you make a booking, we share the details necessary to fulfil it (such as your name and event details) with the performer, and the performer's details with you.

People who report content, and people they report. If we act on a report that content infringes someone's rights, we will normally give the person who posted it a copy of the report, including the reporter's name and contact details, so they can respond. We say so on the report form.

5. What is our stance on third-party websites?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services.

The Services may link to third-party websites, online services, or applications, and may contain advertisements from third parties not affiliated with us. We do not guarantee, and are not liable for, any such third parties. The inclusion of a link does not imply endorsement. Any data collected by third parties is not covered by this Privacy Notice. You should review the policies of such third parties and contact them directly with any questions.

6. Do we use cookies and other tracking technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements or to tailor advertisements to your interests. These analytics and advertising technologies (including Google Analytics, the Meta Pixel, and Microsoft Clarity) load for all visitors. Clarity records privacy-masked session replays — form inputs and message text are hidden before anything leaves your device. We display a cookie notice to inform you of their use. You can refuse or remove cookies through your browser settings, and where offered, opt out of interest-based advertising; note that some features may not work if you do. For a full list of the specific cookies we use, see our Cookie Policy.

Google Analytics

We may share your information with Google Analytics to track and analyse the use of the Services. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. For more information on Google's privacy practices, see the Google Privacy & Terms page.

7. How do we measure our advertising?

In Short: We report certain actions — creating an account, starting a checkout, completing a booking — to Meta and Google, using hashed identifiers, so we can tell which advertising leads to bookings.

Two things are worth being clear about. First, we include identifiers so a report can be matched to the right person: your email address, your name, and your Performr account identifier are converted into an irreversible code (a SHA-256 hash) before they are sent — for the Meta Pixel this conversion happens inside your browser, so the readable values never leave your device. We also send your IP address, your browser's user-agent string, and the advertising cookie identifiers described above; those three are sent as they are and are not hashed. Second, when a booking is paid for we send the same report a second time directly from our servers to Meta's Conversions API and Google's Measurement Protocol, so the booking is still recorded if the version sent from your browser is blocked — which means browser or ad-blocker settings alone will not prevent it. Both copies carry one shared reference, so a booking is only ever counted once.

We use this solely to measure which advertising leads to bookings and to improve how our adverts are targeted. It is not used to make automated decisions about you, and we do not send Meta or Google the contents of your messages, your venue address, or any special category data — the booking details shared are limited to the amount paid and the performer booked. You can limit how this information is used in your Meta and Google advertising settings, we honour Global Privacy Control (GPC) signals, and you can ask us to stop by contacting info@performr.io.

8. What do we send you, and how do you stop it?

In Short: Service email is part of using Performr; marketing email carries an unsubscribe link that works without signing in; a small number of booking notices may also arrive by text.

Some email is part of the service and is not marketing: booking requests, confirmations and changes; payment, payout, and refund notices; your Performance PIN; password and security notices; and a notice that someone has sent you a message on the Platform. The message notice is sent only when a message has gone unread for a few minutes, at most once an hour, and only when something new has arrived — it names the sender and includes a short extract of up to 140 characters, which passes through our email provider (Resend) as any email does.

Marketing email covers Offers (deals and promotions, including reminders about unfinished bookings) and News (product updates). Both are switched on when you create an account; you can switch either off during sign-up, at any time under Notifications, or by clicking the unsubscribe link in the footer of every email we send — that link works without signing in and turns off marketing only, never anything to do with your bookings.

We may also send a small number of text messages, to the mobile number on your account, for the things that cannot wait for an email to be read: a booking request you have received, a booking being confirmed, a request being declined, and a cancellation. Nothing else is texted — no marketing is ever sent by text. Texts are delivered by Twilio (a processor under a data processing agreement). You can reply STOP to switch texts off from your handset, START to turn them back on, or change the number or setting in your account.

9. What is public on your profile? Reviews and badges

In Short: A Booker's review of a Performer is public, with the Booker's name and photo; a Performer's review of a Booker is not public; verification badges are visible to anyone who can see a profile.

After a booking is completed, both sides may review each other. A Booker's review of a Performer is public: it appears on that Performer's profile with the Booker's first and last name as on their account, their profile photo if they have one, their star rating, and what they wrote — readable by anyone, including people not signed in. A Performer's review of a Booker is not public: it is shown to the Booker it is about, and to Performers who have an actual booking with them. Neither review is visible until both have been written or fourteen days have passed, whichever comes first. If you would rather your photo were not shown next to your reviews, remove it in your account settings and your reviews will show your initials instead.

Profiles also display verification badges naming the sign-in and identity steps completed (for example 'Email confirmed', 'Google linked', 'ID verified by Stripe'), the month you joined, and how many bookings you have completed. Only the fact that a step was completed is shown — never an email address, phone number, or identity document.

10. How do we handle your social logins?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using a third-party social media account (currently Google and Facebook). Where you do this, we will receive certain profile information from your provider — typically your name, email address, and profile picture. We will use the information we receive only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, other uses of your personal information by your third-party provider; we recommend you review their privacy notice.

Verification badges. To help Bookers and Performers trust who they are dealing with, your profile displays badges showing which verification steps you have completed. These name the method used — for example “Email confirmed”, “Google linked”, “Facebook linked”, and for Performers “ID verified by Stripe”. These badges are visible to anyone who can see your profile, including Performer profiles, which are publicly accessible without signing in. Only the fact that a step was completed is shown: we never publish your email address, your phone number, your profile or account with any provider, or any identity document. Performer identity checks are carried out by Stripe when enabling payouts — Stripe collects and holds those documents under its own privacy notice and Performr never sees them. You can disconnect a linked Google or Facebook account at any time under Profile → Sign-in methods, which removes that badge; you will always keep at least one way to sign in. Your profile also shows the month you joined and how many bookings you have completed.

11. Is your information transferred internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our service providers operate in a number of countries, and your information may be transferred to, stored by, and processed in facilities outside your country of residence, including in the United States. Regardless of your location, please be aware that your information may be processed by us and by the third parties with whom we share personal information (see 'When and with whom do we share your personal information?' above).

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, these countries may not necessarily have data protection laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law, including by using the European Commission's Standard Contractual Clauses (and the UK equivalent) for transfers of personal information. These clauses require recipients to protect the personal information they process. Our Standard Contractual Clauses can be provided upon request.

12. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us, except that booking and transaction records may be retained for up to 7 years to meet financial-compliance obligations. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it, or securely isolate it until deletion is possible.

13. How do we keep your information safe?

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures — including encryption in transit (TLS), encryption at rest, and access controls — designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission or storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk.

Error monitoring, product analytics & session replay. To keep the Services reliable and secure, and to understand how the Services are used so we can improve them, we use Sentry (a diagnostics provider) and Microsoft Clarity (a product-analytics provider) to collect technical error reports, performance traces, application logs, heatmaps, and privacy-masked session replays. Session replays are privacy-masked at source — every form input, and all text you enter, send or receive, is hidden before anything leaves your device, and images, video and other media are blocked. Only our own fixed interface wording, such as page titles and navigation labels, remains readable, so we can tell which screen a recording shows. We do not capture the content you type, send or receive. This data is used solely to detect, diagnose and fix faults and to protect against abuse, is processed under a data-processing agreement, and is retained for a limited period. It is never used for advertising.

14. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, or the equivalent age as specified by law in your jurisdiction. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of such a minor and consent to their use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at info@performr.io.

15. What are your privacy rights?

In Short: Depending on your location, you may have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information; (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. You may also have the right to object to the processing of your personal information. To make a request, contact us using the details in 'How can you contact us about this notice?' below.

If you are located in the UK and are unhappy with how we have handled your personal information, you can complain to us directly. This is in addition to your rights under the UK GDPR and the Data Protection Act 2018. If you are not satisfied with our final response, you can refer your complaint to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk/make-a-complaint · Helpline: 0303 123 1113 · Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. If you are located in the EEA, you may also complain to your Member State data protection authority.

Withdrawing your consent: If we are relying on your consent, you have the right to withdraw it at any time by contacting us. This will not affect the lawfulness of processing before its withdrawal.

Opting out of marketing: You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in our emails, or by contacting us. You will then be removed from the marketing lists, though we may still send service-related messages.

Account Information: You may review or change the information in your account, or terminate your account, by logging in to your account settings. Upon a request to terminate, we will deactivate or delete your account, though we may retain some information to prevent fraud, troubleshoot problems, assist investigations, enforce our legal terms, and/or comply with legal requirements.

If you have questions or comments about your privacy rights, email us at info@performr.io.

16. Controls for do-not-track features

Most web browsers and some mobile operating systems and applications include a Do-Not-Track ('DNT') feature. As no uniform technology standard for recognising and implementing DNT signals has been finalised, we do not currently respond to DNT browser signals. We do, however, recognise and honour Global Privacy Control (GPC) signals: if you use a browser or extension that supports GPC, we will treat it as a valid request to opt out of the sale or sharing of your personal information for targeted advertising under applicable laws.

17. Do United States residents have specific privacy rights?

In Short: If you are a resident of certain US states (including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia), you may have the right to request access to and details about the personal information we maintain about you, correct inaccuracies, obtain a copy of, or delete your personal information, and to opt out of certain processing. These rights may be limited in some circumstances by applicable law.

Categories of personal information we collect

We collect sensitive personal information only as permitted by law or with your consent, and we do not process it for the purpose of inferring characteristics about you. We have not sold or shared personal information for money in the preceding twelve (12) months. To the extent our use of advertising cookies (including the Meta Pixel) constitutes 'sharing' for targeted advertising under applicable US state laws, you can opt out as described in this section and via Global Privacy Control.

Your rights

Depending on your state, you may have the right to know whether we process your personal data; to access, correct, or delete it; to obtain a copy; to non-discrimination for exercising your rights; and to opt out of processing for targeted advertising, the sale of personal data, or profiling with legal or similarly significant effects. To exercise these rights, contact us at info@performr.io. We will honour opt-out preferences signalled via Global Privacy Control (GPC).

18. Do other regions have specific privacy rights?

In Short: You may have additional rights based on the country you reside in.

Australia and New Zealand

We collect and process your personal information under the obligations set by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You have the right to request access to or correction of your personal information by contacting us. If you believe we are unlawfully processing your personal information, you can complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

Republic of South Africa

You have the right to request access to or correction of your personal information by contacting us. If you are unsatisfied with how we address a complaint, you can contact The Information Regulator (South Africa) (enquiries: enquiries@inforegulator.org.za).

19. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated 'Last updated' date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice or by directly sending you a notification.

20. How can you contact us about this notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer by email at stephen@performr.io, on WhatsApp at +1 786 877 0475 (WhatsApp messages only — this number doesn’t take calls or SMS), or by post at:

Performr Technologies Ltd
Data Protection Officer
2 Market Place
Carrickfergus, Co. Antrim, BT38 7AW
Northern Ireland

Performr Technologies Ltd, registered in the United Kingdom, is the data controller responsible for your personal information and operates the Services, including payments processed via Stripe. Our affiliated company, Performr Entertainment Technologies Limited, registered in the Republic of Ireland, is part of the Performr group and may act as a controller or processor in connection with EU payment processing in the future; where it does, we will update this notice.

If you are a resident in the European Economic Area, Switzerland, or the United Kingdom, we are the 'data controller' of your personal information. We have appointed Stephen Cheevers as our representative. You can contact them at stephen@performr.io, on WhatsApp at +1 786 877 0475 (WhatsApp messages only — this number doesn’t take calls or SMS), or by post at the address above.

21. How can you review, update, or delete the data we collect from you?

Deletion requests. You can ask us to delete your personal data at any time by emailing info@performr.io — or, if you signed in with Facebook, by removing Performr in your Facebook settings, which sends us the request automatically along with a confirmation code. We action requests within 30 days. Some records — booking, payment and tax documents — must be kept for up to 7 years for financial compliance and are retained even after your account is removed; we will tell you exactly what was kept and why.

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, to correct inaccuracies, or to delete your personal information. You may also have the right to withdraw your consent to our processing. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please email us at info@performr.io.