Privacy notice
Last updated 6 October 2026
The BigSteve platform and this website are operated by Big Steve Ltd ("BigSteve", "we"), which is the data controller for personal data collected through this website and for our dealings with prospective and current venue customers. This notice explains what we collect, why, and your rights under UK data protection law. Contact us about anything in it at hello@bigsteve.co.uk.
This website
- No cookies, no analytics. This site sets no cookies and runs no tracking or analytics scripts.
- Server logs. Our hosting provider, Vercel, records standard request logs (IP address, browser type, pages requested, time) to serve the site and protect it from abuse. These are kept for a short period and are not used to identify you.
- Fonts. Typefaces are loaded from Google Fonts, which receives your IP address when they are fetched.
- Enquiries. There is no form on this site. If you email us, we hold your name, email address, organisation and the content of your message so we can reply and follow up about BigSteve. We keep enquiry correspondence for up to two years after our last contact, then delete it unless you have become a customer.
Our lawful basis for handling enquiries is our legitimate interest in responding to people who contact us about our product.
Venue customers and prospects
When a venue talks to us about BigSteve or signs up, we hold business contact details (names, roles, work email addresses and phone numbers), correspondence, contract and billing information. We use this to run demos, prepare proposals, deliver the service, invoice, provide support and meet our legal and accounting obligations. The lawful bases are performance of a contract, our legitimate interests in running the business, and legal obligation. We keep contract and billing records for six years after the agreement ends, as UK tax law requires.
Data in the BigSteve platform
The BigSteve platform holds bookings, customer details, payment references and messages for the venues that use it. For that data, the venue is the data controller and BigSteve is the data processor. We process it only on the venue's instructions and under a data processing agreement, to provide the service. If you are a venue's customer and want to exercise your rights over your booking data, please contact the venue you booked with. We will help them respond.
Before the first outside venue goes live, we will register with the Information Commissioner's Office and sign a data processing agreement with each venue.
Sub-processors
To provide the platform we use these service providers, each under its own data processing terms:
| Provider | Purpose |
|---|---|
| Vercel | Application hosting (London region) |
| Supabase | Database hosting and backups |
| Stripe | Online card payments. Card details are entered directly with Stripe and never reach our systems |
| SumUp | In-venue card terminals |
| Resend | Transactional and marketing email on behalf of venues |
| Twilio | SMS on behalf of venues |
We will tell venue customers before adding or replacing a sub-processor.
Sharing and transfers
- We do not sell personal data, and we never share one venue's data with another venue.
- We share data with the providers above only as needed to provide the service, with our accountants and legal advisers where necessary, and where the law requires.
- Some providers process data outside the UK. Where they do, transfers are protected by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
Security
Data is encrypted in transit and at rest. Access to systems is limited to people who need it to do their job, protected by individual logins. Card details are never stored on our systems. More detail is on our security and data page.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent where we rely on it. To exercise any of these, email hello@bigsteve.co.uk. We respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
We will update this notice as the business develops, and the date at the top will change when we do. Significant changes affecting venue customers will be notified directly.