Last updated: 1 August 2026
Ilaan is operated by Ilaan Investments Ltd, a company registered in England and Wales (company number 17315665) ("Ilaan", "we", "us"). We are the data controller of the personal data described in this policy and are registered with the Information Commissioner's Office (ICO) under registration number ZC200387. This policy explains how we collect, use, share and protect your personal data when you use the Ilaan mobile app, the website at ilaan.co.uk, and related services (together, the "Service"). It applies to community members ("Attendees") and event organizers ("Organizers"). If you have any questions, contact us at support@ilaan.co.uk.
Data you give us • Account data — name, email address, password (stored in hashed form), and optional profile details such as a photo or city. • Organizer data — if you create events: organizer/organisation name, description, contact details, and the information you submit to Stripe to receive payouts (we do not see or store your full bank details). • Event and content data — events you create, RSVPs, tickets, bookmarks, comments, and reports you submit about other users or content. • Communications — messages you send to our support team and your email preference settings. Data collected automatically • Ticket and transaction data — orders, ticket QR codes, check-in status, and payment status. Card details are collected and processed by Stripe, not by us; we receive only limited transaction metadata (e.g. last four digits, payment outcome, amounts). • Location data — if you grant permission, your device location is used to show nearby events on the map. You can decline or revoke this in your device settings; the app remains usable without it. • Device and usage data — device type, operating system, app version, IP address, crash logs and diagnostics, and how you interact with the Service. Data from third parties • Confirmation of payment and payout events from Stripe, and sign-in confirmation if you use a third-party sign-in option. We do not knowingly collect special category data (such as data about religion). Attending or organising events listed on Ilaan does not, by itself, tell us anything about your beliefs, and we do not draw or record any such inference.
• Providing and managing your account — performance of a contract. • Providing the event and ticketing service (RSVPs, tickets, check-in, payouts) — performance of a contract. • Processing payments via Stripe — performance of a contract. • Safety, fraud prevention, and moderation — legitimate interests / legal obligation. • Showing nearby events on the map — consent (requested in-app; you can revoke in device settings). • Usage analytics and app improvement — consent (requested in-app; you can withdraw in Settings). • Sending service emails (booking confirmations, event reminders) — legitimate interests. • Resolving disputes and enforcing our Terms — legitimate interests / legal obligation. Where we rely on legitimate interests, we have balanced those interests against your rights and will not use your data where your interests override ours.
• Your public profile (name and any profile photo) is visible to other users in connection with your public activity, such as comments. • If you RSVP to or buy a ticket for an event, the Organizer of that event receives your name, contact email and ticket details so they can run the event. Organizers must only use this data to administer their event and comply with data protection law; this is a condition of our Organizer Terms. • Organizers' public listings display the organizer name and event details to all users.
• Stripe Payments Europe Ltd / Stripe, Inc. — payment processing and organizer payouts (Stripe Connect). Stripe acts as an independent controller for the payment data it collects. See stripe.com/privacy. • Supabase — our database, authentication and storage provider, which hosts the Service's data on our behalf as a processor. Our database is hosted in London (aws-eu-west-2). • Infrastructure and tooling providers — hosting, email delivery, push notifications, map services, crash reporting and analytics providers acting under contract as our processors. • Apple and Google — if you download the app, the relevant store processes data under its own policies. • Authorities and advisers — where required by law, regulation or legal process, or to protect the rights, property or safety of Ilaan, our users or others; and professional advisers under confidentiality. • A buyer or successor — if Ilaan Investments Ltd or its assets are acquired, data may transfer to the acquirer under equivalent protections. We do not sell personal data, and we do not share it with third parties for their own advertising.
We aim to keep personal data in the UK/EEA. Where a provider processes data outside the UK/EEA (for example, some Stripe or infrastructure services in the United States), we rely on UK adequacy regulations, the UK International Data Transfer Agreement/Addendum to the EU Standard Contractual Clauses, or other lawful safeguards.
• Account data — for as long as your account exists, then deleted or anonymised within 30 days of account deletion, except as below. • Transaction and payout records — kept for 6 years after the tax year they relate to, as required for tax and accounting law. • Moderation records (reports, suspensions) — kept for up to 2 years to enforce our Terms and keep the community safe, including preventing banned users from returning. • Support correspondence — up to 2 years after resolution. • Crash and analytics data is retained in identifiable form only as long as needed and is aggregated or deleted thereafter.
You have the right to: access your data; correct it; delete it; restrict or object to processing (including objecting to legitimate-interests processing and to direct marketing, which we will always honour); data portability; and to withdraw consent at any time where consent is the basis (e.g. location, marketing). Deleting your account: you can delete your account at any time in the app via Settings → Account → Delete account, or by emailing support@ilaan.co.uk. Deletion removes your profile, RSVPs, bookmarks and comments, subject to the retention obligations above (e.g. transaction records we must keep by law). To exercise any right, contact support@ilaan.co.uk. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we would welcome the chance to address your concerns first.
We use appropriate technical and organisational measures including encryption in transit, row-level security controls on our database, role-restricted admin access, and least-privilege access for staff and contractors. No system is completely secure; if a breach occurs that risks your rights, we will notify you and the ICO as required by law.
The Service is not directed at children under 16, and you must be at least 16 to create an account. We do not knowingly collect data from children under 16; if you believe a child has created an account, contact support@ilaan.co.uk and we will delete it.
We may update this policy from time to time. Material changes will be notified in the app or by email before they take effect. The "Last updated" date shows the current version.
Ilaan Investments Ltd support@ilaan.co.uk