ZONE: YOUR DATA
Privacy policy.
The short version, which will not change: we collect what we need to respond to you, we host in the UK and EU where we control the choice, we do not sell data, and deletion actually deletes. The long version follows.
Who we are
Bloop is a product of Templar Works Ltd, registered in England and Wales, company number 17239871. Registered office: 71 to 75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are registered with the Information Commissioner's Office under registration number [ASH: ICO number].
Contact for anything in this policy, including data protection requests: hello@bloop.events.
This website (www.bloophq.com)
For visitors to this website, Templar Works Ltd is the data controller. The site collects personal data in exactly one place: the forms you choose to submit (booking a walkthrough or requesting a resource). Those forms ask for your name, work email, company, what you run, and optional context such as your next show, your role, your current tooling and how you heard about us. We use it to reply to you and for no other purpose. Form submissions are stored by Netlify (our website host) and forwarded to us.
This site does not set cookies. We use cookieless, EU-hosted analytics (PostHog). No identifier is stored on your device. The only thing kept in your browser is a session-scoped record of how you arrived (campaign parameters and referrer, in sessionStorage), which dies with the tab and is sent to us only if you submit a form.
We keep enquiry data for as long as the conversation is live and delete it within 24 months of the last contact unless you become a customer.
The Bloop product (bloop.run)
Inside the Bloop product, the event organiser (our customer) is the data controller for the people on their events: crew, suppliers, artists, guests and visitors. Templar Works Ltd acts as their data processor. We process that data only on the organiser's instructions, under a data processing agreement available on request.
If your data is in Bloop because an event accredited you, the organiser of that event is the right first contact for access, correction or deletion requests. We help organisers meet those requests, and if you contact us directly we will route your request to the right controller.
Sub-processors
We use the following services to run Bloop and this website. Each receives only the data needed for its purpose.
| Service | Purpose | Location |
|---|---|---|
| Railway | Application hosting for the Bloop product (bloop.run) | Region per deployment settings [ASH: confirm region] |
| Managed MySQL database | Primary data store for the Bloop product | [ASH: confirm provider and region] |
| S3-compatible object storage | Uploaded documents and photographs | eu-west-2 (London) by default [ASH: confirm] |
| Resend | Transactional email delivery | US-headquartered [ASH: confirm region setting] |
| Twilio | SMS delivery where organisers enable it | [ASH: confirm Ireland or US residency setting] |
| PostHog (EU cloud) | Product analytics, EU-hosted | European Union |
| Netlify | Hosting for this website and storage of form submissions | United States |
| See Tickets | Ticket barcode validation and guest list sync, where organisers connect it | United Kingdom |
| Xero | Accounting sync, where organisers connect it | [ASH: confirm entity and region] |
| Stripe | Payment processing for facilities orders | US-headquartered, Irish entity for UK/EU |
| Square | Payment processing for guest list donations, on the organiser’s own Square account | [ASH: confirm] |
A maintained copy of this list, with our record of processing activities (ROPA) and data inventory, is available on request.
Retention
Product data retention is set by the organiser's own retention schedule; Bloop ships with sensible defaults and deletion actually deletes. Website enquiry data follows the 24-month rule above. Audit logs inside the product are retained for the life of the organiser's account because they are the compliance record.
Your rights
Under UK GDPR you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interests. Write to hello@bloop.events and we will respond within one month. You can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will update this page when the facts change, and we will not weaken it quietly. Last reviewed: 19 August 2026.