The short version
If you don't want to read the whole thing, here's what matters:
- We collect what's needed to sell you a ticket and get you into the event.
- We never sell your data to advertisers or data brokers. Full stop.
- Organizers of events you buy tickets to see your name and email — that's it.
- You can download, correct, or delete everything from Settings → Privacy.
- We use cookies for cart, login, and honest product analytics. No tracking pixels for ad networks.
Your data runs Link Up for you. It doesn't run Link Up's revenue model. If that ever changes, we'll tell you loud and clear, 30 days ahead.
What we collect
Account info
Name, email, phone, date of birth, country. You give us this when you sign up.
Payment info
Handled by our PCI-DSS processor. We see the last 4 digits, never your full card number.
Event activity
Tickets you buy, events you save, check-ins at the door, refund requests.
Device & location
IP address, browser, approximate city (for local events). We never use precise GPS without permission.
What we don't collect
We don't scan your messages, read your address book, track you across other websites, or buy extra data from brokers to "enrich" your profile. If we wouldn't want it done to us, we don't do it to you.
Why we collect it
Your rights
Under the Saint Lucia Data Protection Act and GDPR (if you're in the EU or UK), you have these rights — and we make them one-click where possible:
Access
See everything we hold about you. Download it as JSON or CSV from Settings → Privacy → Download my data.
Correct
Fix anything that's wrong. Most profile fields are self-serve; for the rest, email us.
Delete
Close your account and we'll delete everything within 30 days — except what we're legally required to keep (see §08).
Port
Take your data to another platform. We'll give you a clean export in a common machine-readable format.
Object
Say no to any processing we do under "legitimate interest" — we'll stop unless there's a compelling reason not to.
Complain
If we mess up, tell us at dpo@linkup.lc. You can also complain to the Saint Lucia Data Protection Commissioner or your local equivalent.
How we protect it
- Everything in transit is TLS 1.3. Everything at rest is AES-256 encrypted.
- Passwords are hashed with bcrypt — even we can't see them.
- Payments go straight to PCI-DSS Level 1 processors. We never touch your full card.
- Only a handful of engineers can access production data, and every access is logged.
- We run a bug bounty. Report a security issue to security@linkup.lc.
If we're ever breached, we'll notify affected users within 72 hours — and publish a post-mortem.
How long we keep it
Children
Link Up isn't for under-13s. We don't knowingly collect data from children under 13. If you think your child has an account, email dpo@linkup.lc and we'll delete it the same day.
For 13–17s, a parent or guardian must consent — we ask for this at signup and again at first ticket purchase.
Contact our DPO
We have a named Data Protection Officer who reads every email.