How we look after a venue's bookings, payments and customers

BigSteve holds the information a venue runs on: its bookings, its customers and its payment records. Here is how we treat it.

Hosting

BigSteve runs on established, well-known cloud infrastructure in the UK and Europe. There are no servers for us or for venues to maintain. Data is encrypted in transit and at rest, and the database is backed up automatically.

Payments

Card details are entered directly with a regulated payment provider and never pass through BigSteve's systems. BigSteve stores a payment reference, not a card number. Each venue uses its own merchant account, so customer money settles directly to the venue.

Data separation

Every record belongs to a venue, and staff accounts can only see the venue or group they work for. No venue can see another venue's data, including our first customer. BigSteve is a separate company from any venue operator.

Releases and reliability

Every change is tested in isolated environments before it reaches live venues, including an automated run of real customer booking journeys. The system is monitored around the clock, with automated alerts, and anything that stops a venue taking bookings or payments gets a response within 30 minutes at any time. We do not release changes during peak trading periods.

Compliance

Under UK data protection law, the venue is the data controller and BigSteve is the data processor. Each venue signs a data processing agreement with us. Independent security testing and certification are part of our programme before outside venues go live, and we are happy to share evidence with prospective customers, insurers and lenders on request.

Your data stays yours

Venues own their bookings, customers and vouchers. Data can be exported on request at any time and when a venue leaves, and we import existing data from a venue's previous system when it joins.

Questions about security, hosting or data handling: hello@bigsteve.co.uk