Privacy notice
We store one thing about you, and only if you ask us to: an email address, so we can tell you when tickets go on sale. Last updated 15 September 2026.
Who is responsible
WhenTickets is run by Molecular Ventures Ltd, company number 12262067, registered in England and Wales, which is the data controller for anything described here. Write to [email protected] about any of it.
What we collect, and when
If you subscribe: your email address, the categories and regions you chose, the date and time you subscribed, the page you subscribed from, and which version of the consent wording you agreed to. That last one is there because the wording changes and the record has to show what you actually agreed to, not what it says today.
If you only read: page views, counted by Cloudflare Web Analytics. It sets no cookies, stores no identifier, and cannot recognise you across sites or sessions. We can see that a page was viewed; we cannot see that you viewed it. There are no advertising trackers, no tracking pixels, no fingerprinting and no third-party cookies anywhere on this site.
We do not buy data, we do not enrich what you give us, and we have never sold or shared a subscriber address. There is no advertising network on this site.
Why we are allowed to
For the emails, your consent, given by clicking the link in the confirmation message. Nothing is ever sent to an address that has not done that, which is why subscribing does not take effect until you confirm. You can withdraw consent at any time using the unsubscribe link in every email, or by replying to one with the word stop.
For the page counts, our legitimate interest in knowing whether anybody is reading this, balanced against a measurement method that cannot identify you.
How long we keep it
A signup that is never confirmed is deleted automatically after 30 days, because an unconfirmed address is data nobody asked us to hold.
If you unsubscribe we keep your address on a do-not-send list rather than deleting the row. That is deliberate and it is in your interest: it is the only way to be certain you are never added again by accident. Nothing else about you is kept, and nothing is ever sent to that address again.
If you would rather be erased completely, ask and we will do it. Say so at [email protected] and we will act within one month.
Who else touches it
Three suppliers, each doing one job, none of them given permission to use your data for anything of their own:
- Cloudflare hosts the site and the database.
- Resend sends the email.
- Stripe will handle payment if a paid option ever launches. Card details would go to them and never to us.
Your rights
You can ask us what we hold about you, ask for it corrected, ask for it deleted, ask for a copy in a portable format, or object to what we are doing with it. One email does any of them and we will act within one month. If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk, and you do not have to ask us first.
Changes
When this notice changes materially we say so here with the date, and the consent wording carries its own version number stored against every subscriber. The last substantive change was on 12 September 2026, when the homepage stopped claiming there were no analytics at all: privacy-first page counting had been switched on two days earlier and the sentence had not caught up.