Politique de confidentialité

Privacy Policy

Last updated: 13/11/2026

This Privacy Policy explains how Grandioses ("we", "us", "our") collects, uses, shares and protects your personal data when you use grandioses.com and our mobile applications (together, the "Service"), including when you browse events, buy tickets, subscribe to a plan, or apply to become an organiser.

1. Who is responsible for your data

The data controller is Grandioses, Saint-Cyr-sur-Mer, France. You can contact us about privacy at amazing@grandioses.com.

2. Data we collect

Data you give us

• Account data: name, email address, phone number (if provided), and a password, which we store only in hashed form.
• Booking data: events you book, ticket quantities, order references, attendee details, and ticket QR codes.
• Subscription data: the plan you choose, its status, and renewal dates.
• Organiser applications: business or personal details, and identity or supporting documents you upload so we can verify your request.
• Messages: anything you send through our contact form or by email.

Data collected automatically

• Device and technical data: IP address, browser and device type, operating system, language, and pages visited.
• Push notification token: if you enable notifications in our app, we store a device token so we can send you alerts about your tickets and events.
• Location: if you allow it, your approximate location, used to show events near you. You can disable this in your device settings.
• Cookies and sessions: see section 7.

Payment data

Payments are processed by Stripe. Your card details are entered directly into Stripe's secure forms and are never stored on our servers. We receive only limited information, such as payment status, the last four digits of the card, and a transaction reference.

3. How we use your data and why

PurposeLegal basis Create and manage your accountPerformance of a contract Process bookings, payments, refunds and subscriptions; issue and validate ticketsPerformance of a contract Send order confirmations, tickets and service messagesPerformance of a contract Review organiser applications and pay organiser commissionsContract and legitimate interests Prevent fraud, abuse and spam (for example with captcha), and secure the ServiceLegitimate interests Show events near youConsent Send push notifications and marketing messagesConsent (you can withdraw at any time) Comply with tax, accounting and legal obligationsLegal obligation Respond to your enquiriesLegitimate interests

4. Who we share your data with

We do not sell your personal data. We share it only with:

• Event organisers: basic attendee information (such as name, email and ticket details) for events you book, so they can manage entry and communicate with attendees.
• Payment processor: Stripe, to process payments and subscriptions.
• Service providers: hosting, database, email delivery, and push notification providers acting on our instructions.
• Authorities: where required by law or to protect our rights, users or the public.
• Business transfers: in the event of a merger, acquisition or sale of assets, your data may be transferred under the same protections.

5. International transfers

Some of our providers (including Stripe) may process data outside your country. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.

6. How long we keep your data

• Account data: for as long as your account is active, and deleted or anonymised after you delete your account, except where we must keep it by law.
• Booking and payment records: 1 year, to meet accounting and tax obligations.
• Organiser verification documents: 2 months after the decision on your application, or as long as you remain an organiser.
• Contact messages: 1 month.
• Push tokens: until you disable notifications, log out, or delete your account.

7. Cookies

We use a small number of cookies and similar technologies:

• Essential cookies: keep you signed in, protect forms, and support captcha and checkout. The Service cannot work without them.
• Preference cookies: remember your settings, such as language.

You can block or delete cookies in your browser settings, but essential features may stop working.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data (you can also delete your account from your profile);
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• lodge a complaint with your local data protection authority.

To exercise these rights, email amazing@grandioses.com. We may need to verify your identity first, and we will respond within the time required by law.

9. Security

We protect your data with measures such as encrypted connections (HTTPS), hashed passwords, access controls and secure payment processing. No system is completely secure, so we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the authorities as required by law.

10. Children

The Service is not directed to children under 18. We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Third-party links

The Service may link to third-party websites, such as organiser pages or maps. We are not responsible for their privacy practices, so please read their policies.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows the latest version, and we will notify you of significant changes by email or on the Service.

13. Contact us

GRANDIOSES
Saint-Cyr-sur-Mer, France
Email: amazing@grandioses.com
Contact form