Privacy Policy

Verogig is a booking platform for musicians in the United Kingdom, operated by TheQuestLab. For the purposes of UK GDPR and the Data Protection Act 2018, Verogig is the data controller for the personal data described in this policy.

Privacy enquiries: privacy@verogig.app. ICO registration number: [ICO reference pending].

• Account data: name, email address, account type (organisation or musician), password credentials handled by our authentication provider.
• Musician profile data: instruments, styles, minimum rate, town or region, biography, audition video clip, and vetting documents you choose to upload (enhanced DBS certificate, public liability insurance).
• Booking data: dates, times, venue town, agreed fee, notes and booking status.
• Message data: the content of messages exchanged with the other party to a booking.
• Technical data: IP address, browser type and essential session information needed to keep you signed in and to protect the service.

We do not ask for card or bank details directly; payments are handled by our regulated payment provider, who processes that data under its own terms.

• Performance of a contract (Article 6(1)(b)) — creating and running your account, handling booking requests, messaging, holding and releasing fees, and providing customer support.
• Legitimate interests (Article 6(1)(f)) — keeping the platform secure, preventing fraud and off-platform circumvention, improving the service, and resolving disputes using the booking record. We balance these interests against your rights and only use the minimum data needed.
• Consent (Article 6(1)(a)) — optional cookies and analytics, and any marketing emails. You can withdraw consent at any time without affecting the service.
• Legal obligation (Article 6(1)(c)) — accounting, tax and fraud-prevention records we are required to keep.
• Substantial public interest / safeguarding (Article 9(2)(g) and Schedule 1 DPA 2018) — where a musician chooses to upload an enhanced DBS certificate, this is criminal-offence data. We use it only to confirm a vetting badge and its expiry.

• Account and profile data: for as long as your account is open, then deleted within 30 days of your deletion request.
• Booking records and message threads: 6 years from the booking date, so that fee, tax and dispute records can be evidenced. This is our legal-obligation and legitimate-interest retention period.
• Vetting documents (DBS, insurance): retained only while the badge is valid, and deleted within 30 days of expiry or removal.
• Audition video clips: kept while your profile is live, deleted when you remove the clip or close your account.
• Technical and security logs: up to 12 months.
• Cookie consent choice: stored in your browser for up to 12 months so we do not keep re-asking.

We never sell personal data. We share it only with processors who help us run Verogig: our cloud hosting and database provider, our authentication provider, our payment provider, and our transactional email provider. Each is bound by a data-processing agreement. Some personal data may be shared with the other party to a booking — for example, contact details are released to a counterparty only once a booking is confirmed and funded.

Where a provider processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct anything inaccurate.
• Erasure — ask us to delete your data, subject to records we must keep for legal or accounting reasons.
• Restriction and objection — ask us to pause or stop a particular use, including processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — turn off optional cookies or marketing at any time.

To exercise any right, email privacy@verogig.app from the address on your account with the words "data request" in the subject line. We respond within one month, as required by UK GDPR, and we will tell you if we need to extend that for a complex request. You can also delete your account from your dashboard, which starts the erasure process.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Verogig accounts are for adults aged 18 or over. We do not knowingly collect data from children. Bookings may take place in settings involving children — see our Safeguarding Statement for how that is handled.

If we make a material change we will update the date at the top of this page and notify account holders by email before the change takes effect.