Privacy Policy

MyAct is a trading name of A W Marsden, a sole trader based in the United Kingdom. A W Marsden is the controller of the personal data described in this policy, except where we say otherwise below.

Postal correspondence address:
c/o TubbyStudios, Unit 16 Atlas Court, Atlas Road
Coalville, Leicestershire, LE67 3FL
United Kingdom

Privacy questions and requests: tony@tubbystudios.co.uk.

Performers — singers, musicians, bands and other acts who create a MyAct account.

Bookers and customers — people who send an enquiry through a performer's MyAct website, receive a quote, or are added to a performer's customer list.

Visitors — people who browse myact.co.uk or a performer's MyAct website.

Performers and their customers. When a performer uses MyAct to manage their own enquiries, bookings and customers, the performer decides how that information is used for their business. In that situation the performer is responsible for their customers' data and MyAct processes it on the performer's behalf to provide the service. Please contact the performer directly about their use of your information; we will help them respond where needed.

Performer account and profile: email address and sign-in details (including your Google account name and email if you sign in with Google), act name, performer type, biography, location area, genres, acts and sets, prices you choose to show, website and EPK content, photos, logos and other media you upload, availability and working times, notification preferences, and bank details you add for deposit payments.

Enquiries and bookings: when someone enquires through a performer's site we collect their name, email, phone number (if given), event date and times, event type, venue name, location and postcode, the act or set requested and their message. Performers may also add bookings, customers, venue details for each booking, fees and notes themselves, for example after a phone call.

Quotes and payments: quote amounts, items, deposit, expiry and whether a quote was accepted, and a performer's own record of whether a deposit has been received. MyAct does not take card payments; deposits are paid by bank transfer directly to the performer.

Emails: a record of booking and availability emails sent through MyAct (recipient, subject, content, send status and time) so that messages are not lost or sent twice. Replies go to the performer's own inbox; MyAct does not read or store them.

Customer preferences: whether a customer has said yes, no or not yet answered about receiving availability emails from a particular performer, and any unsubscribe.

Technical and usage information: sign-in records, security and error logs kept by our hosting providers, and — only if you accept analytics cookies on myact.co.uk — Google Analytics information about pages viewed. See our Cookie Policy.

• Providing your account, website, EPK, calendar, enquiries, quotes and bookings — necessary for our contract with performers (Article 6(1)(b) UK GDPR).
• Passing an enquiry to the performer and sending booking notices (enquiry received, quote, acceptance, deposit instructions, confirmation) — performing the service the booker asked for and the performer's and our legitimate interests in handling bookings (Article 6(1)(b) and (f)).
• Availability emails from a performer to past customers — sent only when the performer chooses recipients and confirms the send. People who have opted out are never contacted and every message has an unsubscribe link. These are marketing messages and are separate from booking notices; unsubscribing does not stop booking emails about an existing booking.
• Security, fraud prevention, rate limits and keeping records of admin access — our legitimate interests in keeping the service safe (Article 6(1)(f)).
• Analytics on myact.co.uk — only with your consent (Article 6(1)(a)), which you can withdraw at any time.
• Platform administration — the operator can see account-level summaries (such as sign-up dates and counts) to run the service, but not the content of performers' enquiries, customers, messages or quotes. Legitimate interests (Article 6(1)(f)).
• Legal and accounting obligations — where the law requires us to keep records (Article 6(1)(c)).

We do not sell personal data and we do not use automated decision-making that has legal or similarly significant effects on you.

Performers choose what appears on their public website and EPK, such as their act name, biography, photos, media, links and prices. Live performer sites may appear in search engines; demo and draft sites are hidden from search.

Public visitors can check whether a date may be available, but not see other bookings. Enquiries, customers, quotes, bookings, payment status, bank details and emails are private to the performer's account. A booker sees a performer's bank details only on their own secure quote page after accepting a quote.

We use service providers who process data on our behalf:

• Lovable — website hosting, database, sign-in and file storage for the MyAct app.
• Resend — delivery of booking and availability emails.
• Google — optional “Continue with Google” sign-in, and Google Analytics on myact.co.uk only if you accept analytics cookies.

Enquiry details are shared with the performer you contacted. We may also disclose information where required by law or to protect rights and safety.

Some of our service providers may process personal data outside the UK. Where this happens we rely on the safeguards provided for in UK data protection law, such as UK adequacy regulations or the UK International Data Transfer Addendum to standard contractual clauses. Contact us for more information.

We keep performer account data for as long as the account is open. When a performer cancels, their 30-day recovery period starts on the date they asked to cancel, not the date we acknowledge the request; we then delete or anonymise their account data, unless we must keep certain records for legal, accounting or dispute purposes. We do not keep cancelled accounts indefinitely.

Enquiries, bookings, quotes, customer records and email records are kept while the performer's account is active so they can manage their bookings and history. MyAct does not currently let performers delete these records themselves; a performer (or a booker, through the performer or directly) can ask us to delete them, subject to any records we must keep by law. Unsubscribe choices are kept so that we can keep honouring them. Analytics retention is described in our Cookie Policy.

Records of cancellation and deletion requests. To show that we handled requests properly, we keep a minimal record of each cancellation or deletion request: the account it relates to, the type of request, the date it was made, the dates of each step and its outcome, and which administrator carried it out. This record is kept for six years after the request is closed and is separate from the account data that is deleted when you cancel or ask for erasure — keeping it does not mean we keep your website, bookings or customers. Only the MyAct administrator can see it. We keep any notes brief and limited to what is needed to handle the request, and we remove them once they are no longer needed. Removal at the end of the six years is carried out manually.

Under UK data protection law you can ask to access your data, correct it, delete it, restrict or object to its use, and receive a copy in a portable format. Where we rely on consent you can withdraw it at any time. Performers can download a machine-readable (JSON) copy of their data from Settings → Data Export: profile and website/EPK content, website design, media links, availability, enquiries and bookings with status history and recorded deposits, quotes, customer contacts and marketing preferences, booking email history, notification settings and availability outreach history. For security the export leaves out bank details, secure quote and unsubscribe links, full HTML email copies and the media files themselves (which are listed as links).

To make a request, email tony@tubbystudios.co.uk. We will respond within one month (occasionally longer where the law allows an extension, or where an exception applies). If your request is about a booking with a performer, we may pass it to that performer.

Deleting your account. Account deletion is handled by email rather than automatically: performers can use the "Request account deletion" link in Settings → Data Export, or simply email us from the address they signed up with. We verify that the request genuinely comes from the account holder before acting. We may offer to talk things through or suggest alternatives, but that will never delay or obstruct a valid deletion request. Deleting an account may remove the performer's website, bookings, enquiries and customer records, though we may keep certain records where the law requires it (for example for accounting or disputes).

Cancelling your account (different from a deletion request). Cancelling means you stop using MyAct; a deletion request is you asking us to erase your personal data under data protection law. Cancellation is currently handled by email, in the same way as deletion requests. When you cancel, we will take your public website and EPK offline, and keep your data for a 30-day recovery period so you can change your mind and ask us to restore your account as it was. That period starts on the date you asked to cancel, not the date we acknowledge your email. You can download your data from Settings → Data Export before you cancel. At the end of those 30 days we will delete or anonymise your account data, except records we must keep by law. Cancelling never delays a deletion request: if you ask us to erase your data, either with your cancellation or at any time during the 30 days, we act on that request without waiting for the recovery period to end. These steps are carried out manually by us rather than automatically.

You can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to help first.

MyAct does not send marketing emails to bookers on its own behalf. Booking notices about an enquiry or booking are not marketing and are sent whether or not you have agreed to marketing. Availability emails from a performer are optional; you can unsubscribe from any of them using the link in the email.

MyAct is intended for adults and is not designed for children. We do not check ages when accounts are created. If you believe a child has given us personal data, please contact us and we will delete it.

We use encrypted connections, access controls that keep each performer's data separate, private file storage, and records of administrative access. No system is completely secure, so please keep your sign-in details safe.

Photos and media links. Photos and other files you upload are kept in private storage, but they are shown on your website and EPK through long, hard-to-guess links that currently stay valid for about 10 years. Anyone who has one of these links (for example because they copied it from your public site) can open that file. If you remove a photo from MyAct, ask us if you need its old link disabled.

Read our Cookie Policy for details of essential storage and optional analytics. Cookie settings

We may update this policy from time to time. We will change the date at the top and, for significant changes, tell performers by email or in the app.