Privacy notice

Last updated: 7 October 2026

Who we are

Lus Production is the trading name of LUS PRODUCTION LTD, registered at Office 408, Screenworks 22 Highbury Grove, London, United Kingdom, N5 2ER. We are responsible for the personal data described here.

What we collect

Booking form: your name, email address, the kind of act, the link you give us (Instagram or website) and your message.

To stop abuse of the form we keep a one-way hash of your IP address. We never store the address itself.

Emails you send us, and our replies.

Server logs: like most websites, our web server records technical details of each request (IP address, browser, page, time) for security and troubleshooting.

If you buy tickets: your name, e-mail address, phone number (optional), order and ticket details, the result of the payment and your invoice details (personal invoice: name and, optionally, ID number and address; company invoice: company name, tax office, tax or ID number, address). We never see or store card details: the card is entered on the bank’s secure payment page.

To confirm your e-mail address when you buy, we send a 6-digit code; once it is accepted a short-lived session cookie is set in your browser (2 hours unless you are a member). These cookies are needed to run the site. Analytics and advertising tags (Google Analytics, Google Ads, Meta Pixel) follow your choice in the cookie banner. Google’s tag runs in a restricted mode until you accept: it sets no cookies and is not used for advertising, but Google still receives technical details of your visit (such as your IP address, browser and the page) to count visits. The Meta Pixel is loaded only if you accept. You can change your choice at the bottom of any page. They are never loaded on payment pages, on your order or tickets pages, or in your account. When accepted, Google and Meta receive technical details of your visit and the pages you view, and, when you buy, the order total, never your name, e-mail address or phone number. Your cookie choice and your theme choice are kept only in your browser.

The ticket form uses Cloudflare Turnstile as a bot check: when you send the form Cloudflare processes your IP address and browser details to tell whether you are a person.

We watch requests for codes (e-mail or SMS) for abuse: the kind of request, its result (sent, blocked) and its time, with irreversible short digests (hashes) of the IP address and of the e-mail address or phone number, are kept for 30 days and then deleted; nobody can be read back from them.

Tickets sold by third-party platforms (such as Eventbrite) are sold under their own privacy policies. When you open a ticket window on our site, the ticket provider’s page loads inside it and their policy applies.

Why we use it

To answer your enquiry and discuss a possible booking with you: this is a step you ask us to take before any agreement, and in our legitimate interest in running our events.

Server logs and the IP hash are used to keep the website secure, which is our legitimate interest.

We do not sell your data or use it for marketing.

How long we keep it

Booking requests are deleted automatically 12 months after we close them.

Server logs are deleted after 30 days.

Encrypted backups roll over within 5 weeks.

Who helps us

Our website and database run on a rented server (a hosting provider). Booking notifications and ticket e-mails are delivered through an e-mail service. They process data only on our instructions.

Card payments are taken on the secure page of the contracted bank (e.g. Garanti BBVA) or payment institution; your card details reach only them. Cloudflare, Inc. (Turnstile) provides the bot check; transfers abroad follow KVKK Article 9.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it. Write to info@lusproduction.com; we answer within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).