Privacy policy

This policy explains how Ocio Limited collects, uses and protects your personal information when you use the Ocio website, the Ocio app and our membership, and Ocio Sync, our app for venues, event organisers and their staff (see section 16).

Who we are. Ocio Limited is the controller of your personal information. We are a company registered in England and Wales (company number 17214462), at 78 Chislehurst Road, Orpington, BR6 0DJ. Our registration number with the Information Commissioner’s Office (ICO) is ZC266033.

Contact us about anything in this policy at hello@ocio.events.

In short

• We collect what we need to run your membership, make bookings and recommend events you will enjoy.
• We share the name on your booking and your booking details with the event partner you book with, so they can admit you. Partners never see your email address.
• Location and calendar access are optional and can be switched off at any time.
• Face data used by the app’s optional Depth setting never leaves your device (see section 17).
• We never sell your personal information.
• You can access, correct or delete your information, and you can complain to the ICO.

1. Information we collect

Information you give us

• Account details: your name, email address, password and confirmation that you are 18 or over.
• Preferences: the event types, neighbourhoods, nights and other tastes you tell us about, and anything you ask Faro.
• Payment information: your card is processed by our payment provider, Stripe. We do not see or store your full card number; we keep a record of your plan, payments and billing history. If you buy credits as a gift, we keep the names and note you add to it.
• OcioConnect: if you use it, your profile (name, photos and interests), what you are looking for, the evenings you mark as free or busy, the messages, photos, videos, voice notes, documents and location pins you send to other members, and any reports or blocks you make.
• Reviews, photos and videos: the ratings, reviews and first impressions you give after events, photos you keep of a night, and any video you submit of a venue, with where and when it was recorded if the file includes that. If you post a review, photo or video publicly, we may also use it, with or without your first name, in our marketing (see the Ocio Membership Terms).
• Messages to us: emails, feedback and support requests, including what you tell us when you close your account or cancel your membership: your reason, the options you choose and anything you write.

Information we collect when you use Ocio

• Bookings and activity: the events you view, save, book, cancel and attend, the number of places you book, and how you use your credits.
• Location: if you allow it, your device’s location, to show events near you (worked out on your device), to check you in when you arrive at an event, to note the area of London you are in tonight (an area name, never your exact position) so OcioConnect can show who is out nearby, and, only when you choose, to share a location pin in a chat. On iPhone, if arrival reminders are on, the app also uses your location in the background (see section 4).
• Calendar: if you allow it, a free or busy answer for each evening, worked out on your device from your calendar (see section 4).
• Device and usage information: your device type, operating system, app version, IP address, notification settings and how you use the app, including crash reports, the notification token for your device, a random identifier for your device, and a scrambled (hashed) form of your network address, which we use to stop misuse of welcome and referral credits.
• Camera, microphone, photos and motion: only when you allow them, to take photos, record the videos and voice notes you choose to send, and pick photos or files. Motion sensors are used on your device only, and so is the optional Depth setting (see section 17).

Information from others

• Referrals: if a friend refers you, we record the referral so we can add referral credits.
• Partners: event partners may tell us whether you attended an event.
• Other members: if another member reports you through OcioConnect, we will hold the details of that report.
• Sign-in and payments: if you sign in with Google or Apple, they share your name and email address with us, and Stripe tells us whether your payments succeed.

Sensitive information. We do not ask for information about your health, religion, sexual orientation or similar characteristics. However, the events you book, your interests or what you share on OcioConnect could reveal this kind of information. We use it only to provide the service you have asked for, and never for advertising.

2. How we use your information

UK data protection law requires us to have a lawful basis for each way we use your information. These are ours:

Where we rely on legitimate interests, we have weighed our interests against your rights. You can object at any time (see section 13).

3. Faro and AI

3.1 Faro uses artificial intelligence to recommend events. To do this, it uses your preferences, your booking and activity history, and anything you type to Faro.

3.2 Faro uses a trusted third-party AI provider. The provider processes this information on our behalf only to generate Faro’s responses, and under its terms with us it does not use this information to train its AI models.

3.3 Please do not share sensitive personal information with Faro that it does not need to recommend events.

3.4 Faro’s recommendations are automated, but they only affect which events we suggest to you. They do not have legal or similarly significant effects on you, and you can always browse and book events yourself. We also use automated checks elsewhere: to choose which members to introduce to each other on OcioConnect, to stop messages that contain banned content (a person on our team then reviews them), and to refuse or hold welcome and referral credits that look like misuse. If an automated check affects you, you can ask for a person to review it by emailing hello@ocio.events.

4. Location, calendar and other permissions

4.1 We only access your location or calendar if you give permission on your device. Both are optional, and the app works without them.

4.2 Location is used to show events near you, worked out on your device. When you check in at an event, your position is sent to us once to confirm you are at the venue; we keep how far you were from it and that you attended, not the position itself. On iPhone, if arrival reminders are on, the app uses your location in the background, watching only the venues of events you saved or planned; you can turn arrival reminders off in the app. A location pin you choose to share in a chat is sent to the members of that chat.

4.3 Calendar access is used on your device to work out which evenings you are free, and to add events you plan to your calendar. Only a free or busy answer for each evening leaves your device. We use it to suggest events, and to find evenings that suit you and the members you choose to share them with. We never share the contents of your calendar with anyone.

4.4 You can withdraw permission at any time in your device settings. This does not affect anything we did before you withdrew it.

5. OcioConnect

5.1 OcioConnect is switched on when you join. We introduce members one at a time: until you have both said yes, the other member sees only what you have in common, not your name or photo, unless you choose to say hello or set up a matching profile, which other members can see. Once you are connected, and in any group you are added to, members can see your name and photo. Members never see your email address or payment details.

5.2 You can switch off OcioConnect at any time in Settings, then Account, then Your privacy (Meeting new members), so we stop introducing you to other members.

5.3 Your messages are stored so they can be delivered. We automatically check the text of messages, profiles and group names against a short list of banned content, such as child sexual abuse, sexual violence and pornography. A message that fails the check is not sent, and its text and your email address go to a person on our team to review, who may look at the conversation around it. Otherwise, we only read messages when investigating a report or where the law requires. Nobody is banned or suspended automatically.

5.4 If you block or report someone, the other member is not told.

6. Who we share your information with

We never sell your personal information. We share it only as follows.

Event partners. When you book, we share the name on your booking, the event and date you booked, the number of places and any seats with the partner running it, so they can admit you and record whether you attended. Partners never see your email address, and under our Partner Terms they may use this information only to run your booking, never for marketing.

Service providers. We use trusted providers to run Ocio. They act on our instructions and must keep your information secure:

Other members. Your OcioConnect profile is visible to other members, as explained in section 5.

Authorities and legal reasons. We may share information with the police or other authorities where the law requires it, or where it is necessary to protect someone’s safety, prevent fraud or enforce our terms.

Business changes. If Ocio is sold, merged or restructured, your information may pass to the new owner, who must keep protecting it in line with this policy.

7. International transfers

Our database and servers are in London. Some of our providers, including our payment, email, app delivery, AI technology, sign-in, GIF search and cookie banner providers, process information in the United States. Where your information is transferred outside the UK, we make sure it is protected by an approved safeguard, such as the UK’s adequacy arrangements with the United States for certified companies or the UK International Data Transfer Agreement or Addendum.

8. How long we keep your information

We may keep information longer if the law requires it or if it is needed for a legal claim.

9. Marketing

We will only send you marketing emails if you have agreed to them or, as a member, about similar Ocio services where the law allows. Every marketing email has an unsubscribe link, and you can also email hello@ocio.events. Service messages, such as booking confirmations and billing notices, are not marketing and will still be sent.

10. Cookies and similar technologies

Our web app uses cookies that are strictly necessary to keep you logged in, and our website and web app use your browser’s storage to remember simple choices. We use Vercel Web Analytics and Speed Insights, which do not use cookies, to count visits and measure how fast pages load. Our web app also records how its features are used, linked to your account, with a random session identifier kept in your browser. We do not use advertising cookies, and we do not allow third parties to track you for advertising.

11. Keeping your information secure

We use appropriate technical and organisational measures to protect your information, including encryption in transit, access controls and working only with reputable providers. No system is completely secure, so please use a strong password and keep it private. If a data breach is likely to put your rights at risk, we will tell you and the ICO as the law requires.

12. Age

Ocio is only for people aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it and close the account.

13. Your rights

Under UK data protection law, you have the right to:

• access the personal information we hold about you;
• correct information that is wrong or incomplete;
• delete your information, which you can also do in the app (Settings, then Account, then Close account) or through the Delete your account page on our website (ocio.events/delete-account);
• restrict how we use your information in some circumstances;
• object to us using your information on the basis of legitimate interests, including for marketing;
• data portability, meaning you can receive your information in a commonly used format; and
• withdraw consent at any time where we rely on it, such as for location or calendar access.

To use any of these rights, email hello@ocio.events. We will respond within one month. We may need to confirm your identity first. There is no charge in most cases.

14. Complaints

If you are unhappy with how we have handled your information, please contact us first at hello@ocio.events and we will try to put it right. We will acknowledge your complaint within 30 days and tell you what we are doing about it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

15. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will tell you by email or in the app before they take effect. The version number and date at the top show when it was last updated.

16. Ocio Sync: venues, event organisers and their staff

If you use Ocio Sync, our app for the venues and event organisers that sell through Ocio, this section explains what we collect about you and your business. The rest of this policy also applies; where this section says something different, this section applies.

What we collect. Your login (your name, email address and password, whether you are an owner or staff, and the venues you work for); if you are an owner, your business details (legal name and status, company number, address, VAT status and number, the email address for formal notices, and a record of each change and who made it); your venue’s profile and listings; your acceptance of the Ocio Partner Terms (the version, the date and time, your account and its email address, and the IP address, device and app version it came from); the door records you and your staff make, with the name of the person who made each; your statements; a notification token for your device if you allow notifications; and the photos you choose to add. If you trade as an individual, for example as a sole trader, your business details are personal information. Stripe collects your bank and identity details directly when you set up payouts; we keep only the reference Stripe gives us and whether payouts are set up.

Camera. Used only when you allow it, to read the QR code on a guest’s ticket at your door and to take the photos you choose to add. It records no video and no sound.

Members’ information you see. Ocio Sync shows you the name on each booking, the number of places, any seats and whether the guest has been let in, for up to 89 days back. It never shows you a member’s email address or phone number. Under the Ocio Partner Terms you may use members’ information only to run their bookings, never for marketing.

Your listings assistant and policy reader. When you ask your listings assistant to draft your events, or ask Ocio Sync to find or summarise your cancellation policy, we send what you give it (such as your website’s text, a screenshot or a photo), with your venue’s name and address, to our AI technology provider in the United States, which processes it on our behalf only to return the result. Ocio Sync asks your permission before it sends anything for the first time, and you can withdraw it in Account at any time. We also read your website’s public pages to suggest your brand colours, and send the postcode you type to postcodes.io to find your area.

Why we use it. To run your account and your venue on Ocio, list your events, run your door, pay you and send your statements: our contract with your business under the Ocio Partner Terms and, for staff, our and your venue’s legitimate interest in running its door. To keep statements, payment records and the record of the terms you accepted: our legal obligations under UK tax and company law, and our legitimate interest in being able to show what was agreed. To keep Ocio safe and prevent fraud: our legitimate interests. For the camera, photos, notifications and your listings assistant: your consent, which you can withdraw at any time.

Who we share it with. The service providers in section 6 (Supabase, Vercel, Stripe, Resend, Expo and Apple’s push notification service), our AI technology provider for the listings assistant and policy reader, and postcodes.io for the postcode you type. Members see your venue’s profile and listings. Each statement goes to the email address you give for notices, with a copy to us.

How long we keep it. We keep your login for as long as you use Ocio Sync. When you delete your account we delete your login straight away; if you are your venue’s only owner and it still has booked dates, your venue comes off sale at once and your login is deleted the day after the last booked date, so your door list keeps working until then. We keep statements, payment records, your business details as they stood on each statement, the record of the Ocio Partner Terms you accepted and your door records for six years, as UK tax and company law requires. Your venue’s profile, listings, current business details and the record of changes to them stay with your venue when your login is deleted (off sale if you were its only owner); to have them removed, email hello@ocio.events. Copies in backups are removed within 30 days.

Your rights. You have the rights in section 13. To delete your Ocio Sync account, open Account in Ocio Sync and choose Delete account, or, without the app, email hello@ocio.events from the address you sign in with, or follow the steps at ocio.events/delete-account/ocio-sync. To correct your business details, open Account, then Business details.

17. Face data

If you turn on the optional Depth setting in the Ocio app, the front camera works out where your head is, on your device only, so the screen can show depth. No image of your face and no face data is stored, sent to us or shared with anyone, and there is nothing to delete.

What face data we collect. Depth is an optional visual setting, available on iPhones with Face ID. When you turn it on, the app uses Apple’s TrueDepth camera and ARKit face tracking. From each camera frame it reads only where your face is and where each of your eyes is, in relation to the screen, and combines these into one point: the position of your head. It also works out how far your head is turned, only to smooth the movement. Ocio never reads the camera image, the shape of your face, your facial expressions or where your eyes are looking, and does not use the camera to recognise you or to tell one person from another. Ocio Sync does not use face data at all.

How we use it. For one purpose only: to draw the app’s background and layered surfaces from your point of view, so they appear to have depth as you move your head. Face data is not used to identify or verify you, to build a profile of you, for analytics, for advertising or marketing, or to train or improve any product.

Disclosure and sharing. None. Face data never leaves your device. It is not sent to us, and we do not disclose, share or sell it to anyone, including our service providers.

Storage and retention. Face data is not stored. The position of your head is held in your device’s memory only for as long as it takes to draw the current frame, a fraction of a second, and is then replaced by the next. Nothing derived from the TrueDepth camera is saved on your device, written to logs or crash reports, or kept on our servers or anyone else’s. The app keeps only your choice of whether Depth is on or off, on your device.

Deletion and your choices. Because no face data is kept, there is nothing to delete. Depth is off until you turn it on: the app first explains what the camera is used for, and then your device asks for your permission. You can turn Depth off at any time in the app (Settings, then Customise experience, then Depth), or turn off Ocio’s camera access in your device settings; either stops the camera at once. The camera also stops whenever you leave the app.

18. Contact us

Ocio Limited, 78 Chislehurst Road, Orpington, BR6 0DJ

Email: hello@ocio.events