BOILER ROOM PRIVACY NOTICE

Welcome to Boiler Room’s Privacy Notice.

We consider the protection of your privacy to be extremely important. We are bound by and use your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (together, “data protection law”).

We want to be transparent with you about what data we collect, why we collect it, and how you can exercise your rights. Please take time to read this notice carefully.

1. Who We Are

1.1 Our contact details

Name: Boiler Room (UK) Limited (Company No. 06562273)

Address: 98 De Beauvoir Road, London, N1 4EN, United Kingdom

Email: help@boilerroom.tv

Boiler Room (UK) Limited is the data controller in respect of the personal data described in this notice. We are part of the SSE group of companies and may act as joint controllers with other SSE group entities where personal data is shared for internal administrative and operational purposes.

We may also act as joint controllers with our business partners and brand partners in connection with co-organised events.

This notice applies to our customers, event attendees, website visitors, business partners, brand partners and artists. It does not apply to our employees, who are covered by a separate workforce privacy notice.

2. What Personal Data Do We Collect and How?

2.1 Categories of personal data we collect

We currently collect and process the following categories of personal data:

• Personal identifiers and contact details (e.g. name, email address, postal address, date of birth)
• Mobile phone number (including for SMS and WhatsApp communications where you have consented)
• Account credentials (e.g. username, password)
• Financial and payment information (e.g. payment card details processed via our payment providers); purchase and order history from our online shop
• Technical and usage data (e.g. IP address, browser type, device identifiers, cookies, and server-side event data used for advertising measurement and optimisation (see our Cookie Notice for further detail)
• Marketing preferences and consent records
• Event attendance and RSVP information
• Gender (as self-identified by the user; “Unspecified” is a valid option), collected for free and RSVP events to support equitable ticket allocation
• Content preferences (e.g. musical preferences, content watched or streamed)
• Communications you send us (e.g. customer service enquiries, survey responses)
• Social media account details if you log in via a social media platform (e.g. Facebook Connect)
• Event recordings, including audio and video footage (the majority of Boiler Room events are filmed and streamed or archived)
• CCTV images and recordings at our events
• Health or mobility information, only where required by law or to ensure your safety at an event

2.2 Information you give us directly

We collect personal data directly from you when you:

• register for an account on www.boilerroom.tv;
• subscribe to our newsletter or mailing list;
• RSVP to or register for an event;
• purchase a ticket through our website or an authorised ticketing partner;
• participate in a competition, promotion or survey;
• contact our customer service team by email, phone or via social media; or
• visit our website (see our Cookie Notice for further detail).

2.3 Information we collect automatically

When you visit our website or use our services, we automatically collect certain technical and usage data, including IP address, login information, browser type and version, pages visited, time spent on pages, and clickstream data. This information is used to administer and improve our site, to diagnose errors and for security purposes.

2.4 Information we receive from third parties

We may also receive personal data about you from the following third-party sources:

• Ticketing partners (including DICE, AXS, Resident Advisor, Ticketmaster and local vendors such as Bugece, Ingresso, Shotgun and others) where you purchase tickets for events we host;
• Affiliated companies within the SSE group, where they reasonably believe you would be interested in our events;
• Third parties to whom you have given your consent to share your information with us for marketing purposes; and
• Government, tax or law enforcement agencies where we are legally required to receive or share information.

3. How and Why Do We Use Your Personal Data?

We only use your personal data where the law allows us to. The table below sets out the main purposes for which we process your data, the lawful basis we rely on, and the categories of recipients with whom we share it.

We will only send you marketing communications where you have given us your consent or, for existing customers, where we have a legitimate interest in telling you about similar goods or services to those you have already purchased or enquired about and you have not opted out.

We collect marketing consent at two main touchpoints:

• When you create an account or sign up on boilerroom.tv, where you can opt in to receive marketing from us and, where applicable, opt in to allow us to share your details with a show partner (e.g. an artist or co-promoter associated with a specific event). Consent to share with show partners is collected separately and is clearly labelled at the point of sign-up.
• Through our ticketing partners, who may present their own marketing opt-in at the point of ticket purchase.

Your marketing consent preferences are stored and managed in Braze. You can withdraw your consent at any time; see section 5 (WhatsApp Marketing) and section 9 (Your Rights) for details.

4. Cookies

Our website uses cookies and similar tracking technologies. Some cookies are strictly necessary for the operation of our site; others are used for analytics, personalisation and advertising and require your consent.

For full details of the cookies we use, the purposes for which we use them and how to manage your preferences, please see our Cookie Notice at https://boilerroom.tv/cookie-notice/

5. WhatsApp Marketing

Where you have provided your mobile number and given your explicit consent, we may send you promotional messages, event information and other marketing content through our official Boiler Room WhatsApp Business channel.

The lawful basis for this processing is your consent. You may withdraw your consent at any time by:

• replying STOP to any WhatsApp message you receive from us;
• updating your WhatsApp marketing preferences in your account settings at boilerroom.tv; or
• contacting us at help@boilerroom.tv.

Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal. Mobile numbers collected via our website sign-up forms and event RSVP forms before the launch of our WhatsApp marketing programme will only be used for WhatsApp communications where we have separately obtained your consent for this purpose.

Your mobile number will be shared with Meta Platforms, Inc. (the operator of WhatsApp) and our CRM platform provider for the purpose of delivering WhatsApp messages. These international transfers are subject to appropriate safeguards as described in section 6 below.

6. How Do We Protect and Store Your Personal Data?

6.1 Security

We take all reasonable and appropriate technical and organisational measures to protect the security of your personal data. These measures include restrictive access controls, encryption, antivirus protection, and regular testing and evaluation of our security arrangements.

6.2 International transfers

The personal data we collect may be transferred to and stored in countries outside the UK or the European Economic Area (EEA). Where we transfer data internationally, we ensure that appropriate safeguards are in place, including:

• transferring to countries that have been recognised as providing an adequate level of protection; or
• entering into standard contractual clauses approved by the European Commission or the UK ICO, supplemented by a Data Transfer Impact Assessment where required.

6.3 Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, in accordance with our internal data retention schedule and any applicable statutory retention periods.

As a general principle: marketing consent data and associated contact details are retained until you withdraw your consent or request deletion and event attendance records are retained for a reasonable period after the event for operational and legal purposes.

7. Who Do We Share Your Data With?

We may share your personal data with the following categories of recipients:

• Affiliated companies within the SSE group, in accordance with data sharing agreements, for internal administrative, operational and (where you have consented) marketing purposes;
• Authorised ticketing partners (including DICE, AXS, Resident Advisor, Ticketmaster and regional vendors) for the purpose of event ticketing and attendance management;
• Selected show partners and marketing partners (e.g. Mushroom Group, Strangerland, Insomniac and others) where you have separately opted in to receive communications from or to have your data shared with those partners;
• Meta Platforms, Inc. and TikTok, to whom we transmit technical data including IP address and browser user agent via server-side integrations (such as the Meta Conversions API) for advertising measurement and attribution purposes, where you have consented to non-essential cookies via our cookie banner;
• Meta Platforms, Inc. and TikTok, to whom we may share your name, email address and phone number for advertising measurement, attribution purposes, and for creating custom audiences for targeted advertising, where you have separately consented to this use of your data;
• This sharing occurs where you have consented to receive marketing from us. You may opt out at any time by updating your marketing preferences in your account settings;
• Third-party service providers acting as data processors on our behalf, including cloud hosting, CRM and marketing automation, analytics providers, payment processors and customer support tools;
• Kt8 Merchandise Company, our shop fulfilment partner, who receives order data and associated contact details for the purpose of fulfilling and supporting online shop orders;
• Zendesk, Inc. (operating as Zopim), our live chat and customer support tool, which is used on our online shop pages to support customers with merchandise and order enquiries in conjunction with Kt8. Zendesk may process your name, email address and the content of any chat communications you initiate. Data processed by Zendesk is subject to Zendesk’s own privacy policy;
• Venue operators, security providers and other event suppliers, to the extent necessary to put on the events you attend;
• Government, tax and law enforcement authorities, where we are legally required to do so; and
• Prospective buyers or sellers in the event of a business transfer or acquisition.

Before sharing your data with external processors, we require them to enter into a data processing agreement confirming that your data will be kept secure and used only in accordance with our instructions. Where third-party recipients are independent controllers (e.g. show partners to whom you have consented to sharing), we require them to sign appropriate data sharing agreements before any transfer takes place.

8. Third-Party Websites

Our website may contain links to third-party websites. Those websites have their own privacy policies, and we do not accept responsibility or liability for them. Please review the privacy policy of any third-party website before submitting personal data to it.

9. What Are Your Rights?

Under data protection laws, you have the following rights in relation to your personal data.

• Right to withdraw consent: Where we process your data on the basis of your consent (e.g. for email or WhatsApp marketing), you may withdraw your consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
• Right of access: You have the right to ask us for a copy of the personal data we hold about you.
• Right to rectification: You have the right to ask us to correct inaccurate information or complete incomplete information. You can update certain information (including your name, email address, mobile number, and your email and WhatsApp marketing consent preferences) directly in your account settings at boilerroom.tv.
• Right to erasure: You have the right to ask us to delete your personal data in certain circumstances, for example where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent. To request deletion, please emaildatadeletion@boilerroom.tv
• Right to restriction of processing: You have the right to ask us to restrict processing of your data where, for example, you contest its accuracy or believe the processing is unlawful.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to data portability: Where we process your data on the basis of consent or contract, you may ask us to provide your data in a structured, commonly used and machine-readable format so that it can be transferred to another organisation.

To exercise any of these rights, please contact us through the details given in section 10 of this notice. For marketing opt-outs specifically:

• Email marketing: click the unsubscribe link in any marketing email, or update your preferences in your account settings at boilerroom.tv.
• WhatsApp marketing: reply STOP to any WhatsApp message from us, or update your WhatsApp consent settings in your account at boilerroom.tv.

10. How to Contact Us

If you have any questions, concerns or complaints about this Privacy Notice or our privacy practices generally, please contact us:

Email: help@boilerroom.tv

DPO Contact details: privacy@superstruct.com

If you are unsatisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

ICO contact details:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
Telephone: 0303 123 1113

We review and update this Privacy Notice periodically to reflect changes to our services, operations and applicable law. Where changes are material, we will display a prominent notice on our website. We recommend checking this page from time to time.

Last updated: 30 April 2026