Privacy Policy
Last updated 28 September 2026
Who we are
GrandPass is operated by Forge9x Ltd, the data controller for your platform account. For the attendee data of a specific event, the event organiser is the controller and GrandPass acts as a processor on their behalf.
What we collect
We collect the details you give us (such as your name, email and event bookings), technical data (such as device and usage information and cookies), and payment metadata from Stripe. We do not store your full card details.
Why we use it
We use your data to create your account, sell and deliver tickets, process payments, check you in at events, provide support, keep the platform secure and meet our legal obligations. Our legal bases include performing our contract with you, our legitimate interests in running the service, your consent (for non-essential cookies and marketing) and legal obligation.
Who we share it with
We share the data needed to run an event with that event's organiser. We use trusted processors to operate the service, including Stripe (payments), Supabase (secure hosting and database) and Resend (email delivery). We do not sell your personal data.
Keeping and protecting your data
We keep your data only as long as needed to provide the service and to meet legal and accounting obligations, then delete or anonymise it. Data may be processed outside the UK by our processors under appropriate safeguards.
Your rights
You have the right to access, correct, delete or export your data, and to object to or restrict certain processing. To exercise any right, contact us through the support page. You can also complain to the UK Information Commissioner's Office (ICO).
GrandPass is operated by Forge9x Ltd, registered in England and Wales.
Questions? Visit our support page.