The short version: this one notice covers everything at stubbstickets.com: the print shop, the design studio, your account, and the ticket and event pages organisations run on our platform. We never see your card number and we never sell your details. Ticket and event pages set no advertising or tracking cookies; the print shop and studio use analytics and advertising cookies only if you accept them. Here is the full picture.
Stubbs Tickets prints raffle tickets and other printed items, runs a free design studio, and provides the ticketing platform that schools, charities and clubs use to run their events.
For the print shop, the design studio and your Stubbs account, we decide what is collected and why, so we are responsible for it.
When you buy a ticket for an organisation's event, the organisation running the event is responsible for what information their event asks you for, and we process and store it for them so their event works. If you have a question about why an event asked for something, ask the organisation. If you have a question about how it is stored and protected, that is us, and our contact details are at the bottom.
| What | When |
|---|---|
| Your name, email address and phone number | when you order printing, create an account or buy a ticket |
| Your delivery and billing addresses | when you order printing |
| The artwork, designs and images you upload or make | when you use the design studio or send us artwork |
| What you do in your fundraiser pack: when it is opened, which designs you make or download, and which links in our emails you click | when you have a pack. See section 3 |
| What you type into our AI poster and picture tools | only if you use them. See section 8 |
| An organisation record, set up from your raffle ticket order | only if you ordered raffle tickets with us before our ticketing platform opened. See below |
| Whether you opted in to hearing from the organisation running an event | a tickbox at ticket checkout, unticked to start with |
| Attendee names | only if the event organiser asked for them |
| Dietary requirements and allergy flags | only if the event organiser asked. See section 5, which deals with this properly |
| Your answers to the organiser's own questions | only if their event asks questions |
| Gift Aid declarations: your name and home address | only if you donate and tick Gift Aid. HMRC requires this |
| A collection choice for raffle tickets | raffle ticket orders only |
| What you wrote when reporting a problem | only if you use our help form |
| A scrambled page-view record | see section 3 |
| Cookies | see section 3 |
| A record that you accepted the terms, with the version and date | every ticket purchase, and when an organisation accepts its terms |
Organisations set up from a raffle ticket order. If you ordered raffle tickets from us, we may set up an organisation on our ticketing platform for you, named from your ticket, with a draft of your raffle, so it is ready if you want to sell online. It is held until you accept our organiser terms: nothing is published or sold while it is held, and you can simply ignore it.
We never see your card number. On ticket and event pages your card details go from your browser directly to Stripe. For print orders they go directly to Opayo, run by Elavon. They never pass through our systems at all.
On ticket and event pages: We set no advertising or tracking cookies. The only cookie those pages set is a session cookie, the standard kind that lets a website keep a checkout secure from one page to the next. It holds no personal details, it is never used for advertising, and it disappears when you close your browser. Cloudflare, the security service that sits in front of this site, may set its own cookie to tell real visitors from bots; that is a security measure and is not used to advertise to you. Our page counts are done on our own servers, and the record is scrambled before it is stored: we keep a mathematical fingerprint of the visit, not your actual address.
On the print shop and the design studio: as well as the session cookie, we set a cookie that remembers how you arrived, for example which advert or link you came from, for 30 days, so we can tell which of our adverts lead to orders. Google Analytics and the Meta (Facebook) pixel set their own analytics and advertising cookies only if you accept them in the cookie banner. Before you choose, Google receives only cookieless measurement signals. Ahrefs and Cloudflare also count visits to these pages. You can change your mind by clearing this site's cookies, which brings the banner back.
Your fundraiser pack. When you have a pack, we record what happens in it: when it is opened, which designs are made or downloaded, and which links in our emails you click. We use this to see what is useful and to send you relevant reminders about your own pack. The record is tied to your pack, and your internet address is scrambled before it is stored.
We never sell your information, and the organisations using our ticketing platform cannot see anything about you beyond what they need to run their event.
UK data protection law asks us to name a lawful basis for each use. Ours, in plain English:
Some events ask for dietary requirements or allergy details, usually so a school can cater safely. This counts as health information, which UK law treats as special category data deserving extra care, and we treat it that way:
How long we keep it is covered in section 9.
Tickets are bought by adults: you must be 16 or over to buy through the ticketing platform, and 18 or over to use the design studio. Children appear in our records only as attendees, when a parent or guardian supplies their name or dietary needs while booking, and that information is handled as this policy describes. Please do not upload photographs of children to the design studio.
We use a small number of specialist providers to run the site. What each one receives:
| Who | What they get |
|---|---|
| Krystal (hosting) | everything described in this policy is stored on Krystal's UK servers, which run our website and database |
| Stripe (ticket payments) | the amount and our internal reference numbers. Your card details, and anything else you type into the payment box (such as an email address for Stripe Link), go to Stripe directly from your browser. For an organisation setting up card payments: the details Stripe asks for during setup, plus the organisation's name, web address, contact email and description, which we pass to Stripe |
| Opayo, run by Elavon (print shop payments) | your name, billing address, email address and the amount, so the payment can be checked. Your card details go to Opayo directly |
| Postmark (email delivery) | the emails we send you in full, such as your ticket, order confirmations and proofs: your name, email address and what the email is about |
| Ideal Postcodes (address lookup) | the postcode or address you type to find your address |
| Sentry (fault-finding) | technical error reports when something breaks. On ticket and event pages these contain reference numbers and amounts only. Personal details are switched off deliberately. On the print shop and studio a report can include the page address, your browser details and your customer account number |
| Cloudflare (security and delivery) | every visit to the site passes through Cloudflare, as with much of the web. Cloudflare also counts page visits without cookies |
| Cloudflare Turnstile (telling people from bots) | on forms that use the anti-bot check, Turnstile receives your actual IP address. This is the one place on the ticketing platform where your real address leaves our systems; there it is otherwise scrambled before storage |
| Cloudflare R2 (backups) | copies of our database backups, so your information can be recovered if our main servers fail |
| Anthropic (AI text) | what you type into our AI poster tool and help assistant, and the details on a ticket order when we use AI to read them into your design |
| Replicate (AI images) | what you type into our AI picture tools, the item names and descriptions an event organiser asks it to picture, and images sent for background removal |
| Google (analytics and advertising) | on the print shop and studio: how you use the pages, and cookie-based measurement only if you accept it |
| Meta (advertising) | on the print shop and studio, only if you accept cookies: which pages you visit and whether you placed an order, to measure our Facebook and Instagram adverts |
| Ahrefs (website statistics) | on the print shop and studio: the pages you visit, with your internet address and browser details, to count visits |
| Couriers and print partners | Royal Mail and DPD get your name and delivery address, and may get a phone number or email for delivery updates. Where a trusted trade printer makes and sends part of your order, it gets your artwork and delivery details |
| GitHub (our code) | holds our website's source code. It holds no customer information |
Some of these providers are US companies, so your information can be transferred outside the UK. Each transfer is covered by the safeguards UK law requires, such as the UK's data bridge arrangements or standard contractual clauses.
The design studio has AI tools that write poster text and make pictures. What you type into them is sent to Anthropic or Replicate to make the result. We also keep a copy of every prompt for 90 days, with your account, so we can deal with misuse, and then delete it. Always check what an AI tool makes before you print or share it.
Gift Aid declarations are kept for as long as HMRC requires. Ticket order records, and any attendee details recorded against them including dietary requirements and allergy flags, are kept for as long as we operate the platform, because they are the record of your ticket and the organisation's fundraising. We do not currently delete them on a schedule.
Print orders, customer accounts, your pack and its activity record, and organisations set up from a raffle ticket order are kept too, for our records and so you can come back to them. We do not delete designs automatically. AI prompts are deleted after 90 days. If you want something deleted, ask us and a person will deal with it.
You have the right to ask what we hold about you, to have mistakes corrected, to object to marketing, and in some circumstances to ask for deletion. To exercise any of them, email us at help@stubbstickets.com and a person will deal with it. You can also complain to the Information Commissioner's Office at ico.org.uk.
If we change this policy, the new version gets a new date. This site is operated by Stubbs Tickets, a partnership registered in England, at Unit 2c Greenhough Trading Estate, Greenhough Road, Lichfield, Staffordshire, WS13 7AU, United Kingdom, registered with the Information Commissioner's Office under number ZC212199. Questions to help@stubbstickets.com.
Also here: Ticket terms Organiser terms · Get help with an order