Privacy Policy
PRIVACY POLICY
SkipIn - Fast-Track Nightlife Platform
SkipIn Ltd · Company No. 17226313
Registered office: Office 19040, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA
Contact: alex@skipin.uk · https://skipin.uk
Effective Date: 6 June 2026
This Privacy Policy explains how SkipIn Ltd (“SkipIn”) collects, uses, shares and protects personal data when you use the SkipIn platform. SkipIn is the data controller for the personal data described in this Policy. The SkipIn service is intended for adults aged 18 or over only.
1. Introduction
1.1 This Privacy Policy (the “Policy”) describes how SkipIn Ltd, a company incorporated in England and Wales under company number 17226313 with its registered office at Office 19040, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA (“SkipIn”, “we”, “us” or “our”), collects, uses, shares, retains and protects your personal data when you access or use the SkipIn website, mobile application or related services (the “Platform”).
1.2 SkipIn is the controller of personal data processed in connection with the Platform within the meaning of the United Kingdom General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”).
1.3 We have not appointed a statutory Data Protection Officer. For all data protection enquiries, including the exercise of your rights under this Policy, please contact our Data Protection Contact at alex@skipin.uk.
1.4 This Policy should be read alongside the SkipIn Terms of Service and the SkipIn Cookie Policy, available at https://skipin.uk/cookies.
2. Personal Data We Collect
2.1 We collect, process and store the following categories of personal data:
Identity Data
Your full name and your confirmation that you are aged 18 or over. We do not collect or store your date of birth, and we do not ask you to provide or upload identification documents. Age is verified in person by the Venue’s door staff, who check photographic identification at the door.
Contact Data
Your email address, and the contents of any message you send us when contacting customer support. We do not collect a telephone number or a billing address.
Transaction Data
Details of Fast-Track Tickets purchased, including the relevant Venue, time slot, ticket reference, price paid, transaction identifier, time and date of purchase, scan and validation logs, and the status of any refund or chargeback. We do not store full payment-card numbers; payment-card details are collected and processed directly by our Payment Processor (see clause 6.2).
Technical Data
IP address, device type, operating system, browser or application version, and error and crash diagnostics generated when something goes wrong on the Platform. We do not collect advertising identifiers or any other persistent device identifier, and we do not use any third-party analytics or advertising software development kit.
Usage Data
Information about how you use the Platform, including pages and screens viewed, features used, search queries, click and tap events, navigation paths, timestamps, referral sources, and the duration and frequency of your visits.
Marketing and Communications Data
Your preferences in receiving marketing communications from SkipIn, the channels by which you have agreed to receive them, and records of consent (including the date and method of consent or withdrawal). We also retain records of communications you exchange with us, including support requests and complaints.
City Selection
The city you choose in the Platform in order to see the Venues listed there. This is a choice you make from a list; it is not derived from your device. The Platform does not request or use location permissions, and we do not collect GPS or any other location data.
2.2 We do not knowingly collect special category personal data (including data revealing racial or ethnic origin, political opinions, religious beliefs, health data or data concerning a person’s sex life or sexual orientation), and you must not submit such data to the Platform.
3. How We Collect Your Personal Data
3.1 We collect personal data through the following sources:
Directly from you. When you create an account, complete your profile, purchase a Fast-Track Ticket, contact customer support, respond to surveys, or otherwise interact with the Platform.
Automated technologies. When you visit or use the Platform, we automatically collect Technical Data and Usage Data through cookies, software development kits, server logs, and similar technologies. Further detail is set out in clause 12 (Cookies and Tracking) and in the Cookie Policy.
Third parties. We receive limited personal data from: (a) our Payment Processor (transaction confirmations, payment status, card type and last four digits, fraud-risk signals); (b) Venues (validation status of a Fast-Track Ticket, refusal reasons reported through the staff dashboard, and any incident reports relating to your visit); and (c) analytics, fraud-prevention and IT-infrastructure providers retained on our behalf.
4. Lawful Bases for Processing
4.1 We will only process your personal data where we have a lawful basis to do so under Article 6 of the UK GDPR. The table below identifies the principal purposes for which we process your personal data and the lawful basis on which we rely for each purpose.
4.2 Account creation and management
Lawful basis: Performance of a contract with you (Article 6(1)(b)).
We process Identity Data, Contact Data and Technical Data to register your account, authenticate you, allow you to access the Platform, and enable you to manage your bookings and preferences. Without this processing we cannot provide you with the Platform.
4.3 Sale, delivery and validation of Fast-Track Tickets
Lawful basis: Performance of a contract with you (Article 6(1)(b)).
We process Identity Data, Contact Data and Transaction Data to take payment for, deliver and validate your Fast-Track Ticket, and to coordinate validation with the Venue’s door staff.
4.4 Payment processing and financial record-keeping
Lawful basis: Performance of a contract with you (Article 6(1)(b)) and compliance with legal obligations (Article 6(1)(c)).
We process Transaction Data to settle payments, manage refunds, prepare and retain financial records, and comply with our obligations under tax, accounting and anti-money-laundering legislation.
4.5 Customer support and complaints handling
Lawful basis: Performance of a contract with you (Article 6(1)(b)) and our legitimate interests (Article 6(1)(f)) in operating an effective and responsive support function.
We use Identity Data, Contact Data, Transaction Data and the contents of your communications to respond to enquiries, investigate complaints, and improve the quality of our support.
4.6 Fraud prevention, security and platform integrity
Lawful basis: Our legitimate interests (Article 6(1)(f)) in protecting the Platform, our Users, our Venues and our payment partners from fraudulent, abusive or unlawful activity, and compliance with legal obligations (Article 6(1)(c)).
We process Technical Data, Usage Data and Transaction Data to detect and prevent fraudulent purchases, account takeover, ticket reuse, chargeback abuse, and other misuse of the Platform.
4.7 Defence and conduct of payment-card disputes
Lawful basis: Performance of a contract with you (Article 6(1)(b)) and our legitimate interests (Article 6(1)(f)) in defending claims and disputes.
Where you initiate a payment-card dispute or chargeback, we process Transaction Data, Technical Data, Usage Data and the contents of relevant communications in order to provide evidence to the Payment Processor, the issuing bank and the relevant card scheme, as authorised by our Terms of Service.
4.8 Platform analytics and product improvement
Lawful basis: Our legitimate interests (Article 6(1)(f)) in understanding how the Platform is used and in improving its quality, performance and design.
We use Technical Data and Usage Data to analyse Platform performance, diagnose technical issues, develop new features, and improve user experience. Where this involves analytics cookies or similar non-essential technologies, we rely on your consent (see clause 12).
4.9 Direct marketing communications
Lawful basis: Your consent (Article 6(1)(a)) for prospective Users; or our legitimate interests (Article 6(1)(f)) in marketing similar services to existing customers under the “soft opt-in” in regulation 22(3) of PECR.
We send marketing emails about new Venues, promotions and product updates. Marketing is off by default and is sent only to Users who have switched it on. We do not send marketing by SMS. You may withdraw consent at any time without affecting any service you have already purchased (see clause 13).
4.10 Sale of anonymised aggregate analytics
Lawful basis: Not applicable: this activity does not involve personal data once anonymisation has been applied.
We produce aggregate statistics (for example, total passes sold at a Venue on a given night, how many were scanned, and how full each time slot was) and show them to that Venue’s own staff in the SkipIn staff dashboard. These figures are counts and totals; they do not identify individual Users, and no individual’s data is sold to anyone. Once aggregated to a standard at which an individual cannot be re-identified, the data falls outside the scope of the UK GDPR and ceases to be your personal data. The personal data from which such statistics are derived is processed under the lawful bases set out in clauses 4.3, 4.6 and 4.8.
4.11 Compliance with legal obligations and protection of legal rights
Lawful basis: Compliance with legal obligations (Article 6(1)(c)) and our legitimate interests (Article 6(1)(f)) in establishing, exercising or defending legal claims.
We process personal data where required to comply with applicable law, court orders, regulatory requests, and instructions of competent authorities, and where necessary to enforce our Terms of Service or to establish, exercise or defend legal claims.
4.12 Where we rely on legitimate interests, we have carried out a balancing assessment to ensure that our interests are not overridden by your rights and freedoms. You may request further information about that assessment by contacting alex@skipin.uk.
4.13 We do not carry out any automated decision-making that produces legal effects concerning you or that similarly significantly affects you within the meaning of Article 22 of the UK GDPR. The dynamic, demand-based pricing of Fast-Track Tickets is not based on profiling of individual Users.
5. How We Use Your Personal Data
5.1 In summary, and consistently with the lawful bases set out in clause 4, we use your personal data to:
create and manage your SkipIn account and authenticate you when you log in;
process your purchase, deliver your Fast-Track Ticket, and enable validation at the Venue;
take payment, manage refunds and chargebacks, and keep accurate financial and tax records;
provide customer support and handle complaints and disputes;
detect, prevent and investigate fraud, abuse and unlawful activity on the Platform;
monitor, analyse and improve the security, performance, reliability and usability of the Platform;
send service messages relating to your account or bookings (these are not marketing and cannot be opted out of while you have an account);
send marketing emails where you have consented or where the soft opt-in under PECR applies;
produce aggregate statistics for the relevant Venue’s staff dashboard, as described in clause 4.10; and
comply with our legal and regulatory obligations and protect our legal rights.
5.2 We will not use your personal data for any new purpose that is materially different from those set out in this Policy without first informing you and, where required, obtaining your consent.
6. Recipients of Your Personal Data
6.1 We share your personal data only where necessary for the purposes set out in this Policy, and only with the categories of recipient described below.
6.2 Payment Processor
Stripe Payments Europe Limited (and its affiliates) processes your payment-card details directly when you make a purchase. We share with Stripe such Identity Data, Contact Data and Transaction Data as is necessary to authorise and settle the transaction. Stripe acts as an independent data controller in respect of certain of its processing; please refer to Stripe’s privacy policy at https://stripe.com/gb/privacy.
6.3 Venues
In order to validate your Fast-Track Ticket at the door, we share with the relevant Venue limited personal data comprising your name, the ticket reference, time slot, number of guests and validation status, shown to door staff on the SkipIn staff dashboard. We do not share your email address or any payment data with Venues. Each Venue acts as an independent data controller in respect of any personal data it collects or generates on its own premises (including incident reports and CCTV footage).
6.4 IT and Hosting Providers
We rely on the following infrastructure providers, who act as processors on our behalf and are bound by written data-processing terms:
Supabase Inc. - database, authentication and backend infrastructure;
Vercel Inc. - application hosting and edge delivery;
Resend Inc. - transactional email delivery (booking confirmations, refund notices, waiting-list notifications);
Beehiiv Inc. - delivery of our email newsletter, where you have signed up for it on our website. The newsletter is a website feature and is not part of the SkipIn app;
Functional Software, Inc. (trading as Sentry) - application error monitoring and, where you have agreed to error diagnostics in the cookie banner, session-replay diagnostics. Replays are configured to mask all text and block all media, and we have disabled the automatic attachment of IP addresses, request cookies and headers;
such other infrastructure, email-delivery, customer-support and ticketing providers as we may engage from time to time.
6.5 Analytics Providers
We do not currently use a third-party analytics provider. The only usage metrics we generate are aggregate operational statistics shown to venue staff in the SkipIn staff dashboard (for example, passes sold tonight, scans completed). Should we engage a third-party analytics provider in future, we will update this Policy. Where non-essential analytics cookies are ever deployed, they will only be set with your consent in accordance with clause 12 and the Cookie Policy.
6.6 Professional Advisers and Authorities
We may share personal data with our legal, accounting and insurance advisers, and with regulators, courts, law-enforcement agencies and other public authorities, where this is necessary to comply with the law, respond to lawful requests, defend legal claims, or protect the rights, property or safety of SkipIn, our Users or others.
6.7 Corporate Transactions
If we sell, transfer or reorganise all or part of our business, we may transfer personal data to a successor or purchaser, subject to appropriate confidentiality and data-protection arrangements. Where required, we will notify you in advance.
6.8 We do not sell, rent or trade your personal data to third parties for their own marketing purposes. Aggregate analytics shared under clause 4.10 are anonymised in advance and do not constitute personal data.
7. International Data Transfers
7.1 Some of our service providers, including elements of the infrastructure operated by Stripe, Supabase and Vercel, may process personal data outside the United Kingdom and the European Economic Area, including in the United States.
7.2 Where we transfer your personal data outside the United Kingdom, we ensure that an appropriate safeguard is in place under Article 46 of the UK GDPR. In particular, we rely on:
the UK Government’s adequacy regulations, where the destination country has been recognised as providing an adequate level of protection;
the International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, in each case approved by the Information Commissioner; or
the UK extension to the EU-US Data Privacy Framework where the recipient is certified under that framework.
7.3 You may request a copy of the relevant safeguards by contacting alex@skipin.uk. Confidential commercial terms may be redacted before any such copy is provided.
8. Data Retention
8.1 We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, tax, regulatory or reporting requirements, and to establish, exercise or defend legal claims.
8.2 Our principal retention periods are as follows:
Account Data (Identity Data and Contact Data): for the duration of your account, plus six (6) years following closure of your account, in line with the Limitation Act 1980 and to allow for the defence of legal claims;
Transaction Data and financial records: six (6) years from the end of the financial year to which they relate, in line with applicable tax and accounting law;
QR-code scan and validation logs: twelve (12) months from the date of the relevant Fast-Track Ticket, for fraud-prevention and chargeback-defence purposes;
Customer-support correspondence: three (3) years from the date of the last interaction;
Marketing consent records: until consent is withdrawn, plus a further two (2) years to evidence compliance with PECR and the UK GDPR;
Marketing engagement data (open/click metrics): twenty-four (24) months from generation;
Server and security logs: twelve (12) months from generation;
Cookies and similar technologies: as set out in the Cookie Policy, in any event no longer than thirteen (13) months for non-essential cookies; and
Anonymised aggregate analytics: indefinitely, on the basis that the data ceases to be personal data once anonymised.
8.3 Where personal data is no longer needed for any of the purposes set out in this Policy, we will securely delete it or irreversibly anonymise it.
9. Data Security
9.1 We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:
encryption of data in transit using industry-standard transport-layer security;
encryption of database fields containing sensitive personal data at rest;
access controls limiting personal data to authorised personnel on a strict need-to-know basis;
authentication and session-management controls protecting User accounts;
regular review of permissions, dependencies and security configuration of our infrastructure providers;
written data-processing agreements with all our processors; and
an internal incident-response process for assessing and, where required, notifying personal-data breaches to the Information Commissioner’s Office and to affected individuals in accordance with Articles 33 and 34 of the UK GDPR.
9.2 No method of transmission over the internet or method of electronic storage is fully secure. While we apply commercially reasonable measures to protect your personal data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorised access.
10. Your Rights
10.1 Subject to the conditions and limitations set out in the UK GDPR, you have the following rights in respect of personal data we hold about you:
Right of access. You may request confirmation of whether we process personal data about you and, if so, a copy of that data and certain related information.
Right to rectification. You may request that we correct inaccurate personal data and complete incomplete personal data about you.
Right to erasure. You may request that we delete personal data about you in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and we have no other lawful basis to retain it.
Right to restriction of processing. You may request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of personal data you have challenged.
Right to data portability. Where we process your personal data on the basis of consent or for the performance of a contract, and the processing is carried out by automated means, you may request a copy of that data in a structured, commonly used and machine-readable format, or that we transmit it directly to another controller where technically feasible.
Right to object. You may object at any time to processing of your personal data based on our legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds for the processing that override your rights, or the processing is necessary for the establishment, exercise or defence of legal claims. You may also object at any time to processing for direct marketing purposes.
Right to withdraw consent. Where we process your personal data on the basis of consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right not to be subject to automated decision-making. You have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you. As stated in clause 4.13, we do not carry out such decision-making.
10.2 You can exercise two of these rights immediately and without contacting us. In the SkipIn app, open Account, then Privacy, and choose “Download my data” to receive a machine-readable copy of your personal data. To erase your account, open Account and choose “Delete account”; this takes effect at once. Instructions that work without installing the app, including how to delete your account by email if you can no longer sign in, are published at https://skipin.uk/delete-account.
10.3 To exercise any other right, please email alex@skipin.uk from the email address registered to your SkipIn account. We may need to verify your identity before processing your request.
10.4 Deleting your account removes your credentials, name, email address, age confirmation, marketing preferences, referral code and any unused referral discount, and any waiting lists you had joined. Records of Fast-Track Tickets you purchased are retained as financial records in accordance with clause 8.2, but your name and email address are removed from them at the point of deletion so that they can no longer be linked to you.
10.5 We will respond to a valid request without undue delay and, in any event, within one (1) month of receipt. Where a request is particularly complex or where you have made multiple requests, we may extend this period by up to a further two (2) months and will notify you accordingly.
10.6 Exercise of these rights is free of charge except where a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.
11. Complaints
11.1 If you have a complaint about how we process your personal data, please contact us first at alex@skipin.uk so that we have an opportunity to address your concerns.
11.2 You also have the right to lodge a complaint at any time with the Information Commissioner’s Office (ICO), the UK supervisory authority for data-protection matters:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF;
Helpline: 0303 123 1113;
Website: ico.org.uk.
12. Cookies and Similar Technologies
12.1 We use cookies, software development kits, web beacons and similar technologies (together, “cookies”) on the Platform. Detailed information is set out in our Cookie Policy at https://skipin.uk/cookies.
12.2 The Platform sets strictly necessary cookies, which are required for its operation, including authenticating logged-in users, maintaining session state and remembering your cookie choice, and which do not require your consent under PECR. The only non-essential technology we use is error diagnostics (session replay), which runs only if you agree to it. We set no analytics, advertising or functional cookies.
12.3 On our website you will be presented with a cookie banner that allows you to accept or reject error diagnostics. In the app, error diagnostics stay off unless you turn them on. You may update your preference at any time using the cookie-settings control on the website, or in the app under Account, then Cookie preferences.
13. Marketing Communications
13.1 Where you have given your consent (or where the soft opt-in under regulation 22(3) of PECR applies because you have previously purchased a Fast-Track Ticket from us and we are marketing similar services), we may send you marketing communications by email. Marketing email is switched off by default. We do not send marketing by SMS and we do not collect telephone numbers.
13.2 Every marketing email we send contains a clear and free-of-charge mechanism for unsubscribing. You can also switch marketing email off at any time in the SkipIn app under Account, then Notifications, or by emailing alex@skipin.uk.
13.3 Withdrawing marketing consent will not affect service messages relating to your account, bookings or refunds, which we may continue to send under our contract with you.
14. Third-Party Links
14.1 The Platform may contain links to third-party websites, applications or services, including those operated by Venues, payment partners, app stores and social-media providers. These third parties operate independently of SkipIn and have their own privacy policies and practices.
14.2 We are not responsible for the content, privacy practices or data-handling of any third-party site or service. You should review the relevant third party’s privacy notice before providing any personal data to them.
15. Children’s Data
15.1 The SkipIn service is intended exclusively for adults aged 18 or over. We do not knowingly market to or accept registrations from any person under the age of 18, and we do not knowingly collect personal data from any such person.
15.2 If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will delete that personal data without undue delay, save where retention is required for the establishment, exercise or defence of legal claims or to comply with a legal obligation.
15.3 If you believe a person under the age of 18 has provided personal data to us, please contact alex@skipin.uk immediately.
16. Changes to this Policy
16.1 We may update this Policy from time to time, including to reflect changes in our processing activities, in our service providers, or in applicable law.
16.2 The date of the most recent version is shown at the top of this Policy. We will publish the updated Policy on the Platform and, where the changes are material, we will notify you in advance by email or in-app notification.
16.3 We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any update constitutes your acknowledgement of the updated Policy, save that any changes which require your consent under applicable data-protection law will be implemented only with that consent.
17. Contact Us
17.1 If you have any questions about this Policy, the personal data we hold about you, or your rights, please contact:
Data Protection Contact
SkipIn Ltd
Office 19040, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA
Email: alex@skipin.uk
© SkipIn Ltd. All rights reserved.
Last updated: 6 June 2026