Last updated: 25 July 2026
EventPA is operated by Bermudex Labs Limited, a company registered in England and Wales, whose registered office is 66 Paul Street, London, EC2A 4NA. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Bermudex Labs Limited is the data controller for the personal data described in this notice. Contact us via the contact page.
Account data. If you create an account we store your name, email address and a securely hashed password (never the password itself). Legal basis: performance of a contract — running your account.
Personalisation data. What you choose to give us so the diary is yours: category and dance-style interests, keyword weights, your picks and dismissals, and — optionally — a postcode, which we convert to approximate coordinates so distance filtering works. Your postcode is never displayed anywhere. Legal basis: performance of a contract.
Pipeline requests and suggestions. If you submit a discovery pipeline request or a site suggestion, we store the text you write (and any example link) together with your account, so an administrator can review it and you can follow its status. Suggestions are inert until an administrator approves them: nothing you type is fetched, crawled, or sent to any AI system before human review. Legal basis: performance of a contract.
Guest location (optional). If you visit without an account, your browser may ask permission to share your approximate location so the calendar narrows to events near you. If you agree, the coordinates are used for filtering and remembered in a cookie on your device for six months; they are not stored in our database or linked to an identity. Decline (or choose "show everywhere") and no location is used. Legal basis: consent, withdrawable at any time via "show everywhere" or clearing cookies.
EventPA uses a small number of first-party cookies only: a session cookie (keeping you logged in), a day-part display preference, and — with your consent — the guest location cookie above. There are no advertising or third-party analytics cookies.
EventPA uses AI models (run locally, or Anthropic's Claude API) to read publicly available event pages and extract listings. This processing is of public web content, not of your personal data. The free text of an approved pipeline request may be included in AI prompts to direct that search; do not put personal information in pipeline or suggestion text.
We do not sell or rent personal data. It is shared only with the infrastructure needed to run the service (hosting), with Anthropic solely to the extent described in section 4, and where the law requires disclosure.
Account data is kept while the account exists. You can delete your account yourself at any time on the delete account page — deletion is immediate and removes your picks, preferences, interests, pipeline requests and suggestions. Server logs rotate on normal short schedules.
Under the UK GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Exercise them via the contact page. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Passwords are stored using modern one-way hashing; administrative functions are restricted; suggestion and pipeline submissions are rate-limited and reviewed by a human before any automated system acts on them.
We will update this notice as the service evolves and change the date at the top when we do.