Skip to content
Inside the GigXchange arena — hundreds of member profiles under stage lights
Your Data & Rights

Your Data, Your Rights

Every UK GDPR right, self-service. Download a complete copy of your data in minutes, or raise any other request with a tracked, deadline-backed response — no emails into the void.

Every UK GDPR right, self-service — download your data in minutes

Last updated: 4 August 2026

Every right, self-service

UK GDPR gives you seven rights over your personal data. Most sites make you email a request and wait. Here, the most-used right — getting a copy of your data — is fully automated, and every other right has a clear self-service route on this page. No account needed: the tool also covers venue contacts and ticket buyers who never signed up.

Download your data

Enter your email and we'll send a secure, single-use link. Click it to see a summary of what we hold, then download the lot as a machine-readable file — compiled fresh at that moment, stored nowhere. Works for members and non-members alike.

For your privacy, we never reveal whether an email is registered — the answer only ever goes to the inbox itself.

Single-use secure link
24-hour expiry
Machine-readable JSON file
Never stored — compiled on collect

Any other request

Correction, restriction, or objection — tell us what you need. We'll email you a confirmation link; clicking it verifies the request came from you, logs it with a statutory one-calendar-month deadline, and you get an acknowledgement stating the exact date.

Confirming by email is how we verify the request is really yours (UK GDPR lets us check identity first). The one-month clock runs from the day you submit, not the day you confirm.

Your data, answered

The questions people actually ask about data requests.

Everything GigXchange holds that is your personal data: your profile, bookings, invoices, payment history (amounts and dates), messages you sent, reviews, follows, notifications, gigs and events you created, setlists, a listing of your uploaded media files, and any support messages. Other people appear as display names only — their contact details are their own personal data and are always redacted.

The export link is only ever sent to the email address the data belongs to — controlling that inbox is the proof, the same standard used for password resets. The link is single-use, expires after 24 hours, and the export is compiled fresh at the moment you collect it. Nothing is stored, and nothing is revealed to whoever filled in the form.

Yes. If we hold any personal data for your email address — for example a venue contact record from our business outreach, a ticket purchase, or a message you sent us — the same export covers it, including where the data came from. If we hold nothing, we email you saying exactly that.

Data exports are instant — the link usually arrives within a minute. Other requests (correction, restriction, objection) are confirmed by email and answered within one calendar month of your request, as UK GDPR requires. Your confirmation email states the exact deadline.

That right has its own dedicated tool: gigxchange.app/delete-account (or Settings → Delete Account in the app). Deletion has a 28-day grace period — sign back in any time before then to cancel.

Email privacy@gigxchange.app and we will look again. You also have the right to complain to the UK regulator, the Information Commissioner’s Office, at ico.org.uk/make-a-complaint.

Naumaan
Founder & Builder

I'm building GigXchange because the UK live music scene deserves better tools. Sign up, try it, break it, tell me what's missing — your feedback shapes everything we build next.

Did you know? The UK is one of the world’s largest music markets, behind only the US and Japan.
Email me directly →