Legal
Privacy Policy
Last updated: 20 August 2026
Who we are
THEONEHUMAN LTD is the data controller for the personal data described here.
- Company number: 16680790
- Registered office: Apartment 88 Quartz Building, 7 Stanley Street, Salford, M3 5EX, England
- Contact: hello@josyote.com
What we collect
If you buy a ticket
Name, email address, phone number, how you heard about the event (if you tell us), and payment confirmation details.
We do not receive or store your card number. Payments are handled by Stripe.
If you buy artwork or a print
Name, email address, delivery address, and phone number where needed for delivery.
If you join our mailing list
Email address, and your name if you give it.
If you email us
Your email address and whatever you choose to tell us.
When you visit the site
Basic technical data — pages viewed, approximate location, device and browser type. This is aggregated and does not identify you individually.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Issue your ticket and admit you to the event | Performance of a contract |
| Take payment and prevent fraud | Contract, and legitimate interests |
| Fulfil and deliver an artwork order | Performance of a contract |
| Email you about an event you booked | Performance of a contract |
| Send you our mailing list | Consent |
| Keep accounting and tax records | Legal obligation |
| Protect the safety of guests, staff and artwork | Legitimate interests |
| Understand how the site is used | Legitimate interests |
Who we share it with
We use these providers to run the business. Each processes data on our behalf.
- Stripe — payment processing. Stripe is a separate data controller for payment data.
- Resend — email delivery and mailing list.
- Vercel — website hosting.
- Zoho — our business email.
- Delivery partners and print providers, where needed to fulfil an artwork order.
We do not sell your data, and we do not share it for anyone else’s marketing.
International transfers
Some providers process data outside the UK. Where they do, transfers are protected by appropriate safeguards such as UK International Data Transfer Agreements or adequacy decisions.
How long we keep it
- Ticket and order records — 6 years, as required for accounting and tax
- Mailing list — until you unsubscribe
- Enquiry emails — 2 years
- Safety or safeguarding records — as long as necessary for that purpose
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the data we hold about you
- have inaccurate data corrected
- ask us to delete data, where we have no continuing lawful reason to keep it
- object to or restrict how we use it
- receive your data in a portable format
- withdraw consent at any time, where consent is the basis
To exercise any of these, email hello@josyote.com. We respond within one month.
Marketing
We only send marketing emails to people who asked for them. Every email has an unsubscribe link. Unsubscribing from marketing does not stop emails about a ticket or order you have already placed.
Cookies
We use only what is necessary to make the site work and to understand basic usage. We do not use advertising or cross-site tracking cookies.
Children
Our events are 18+ and this site is not aimed at children. We do not knowingly collect data from anyone under 18.
Security
We use HTTPS across the site, restrict access to personal data to those who need it, and keep credentials out of our published code. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you and the ICO if a breach occurs that requires it.
Complaints
Tell us first — hello@josyote.com — and we will try to put it right.
You also have the right to complain to the Information Commissioner’s Office: ico.org.uk, or 0303 123 1113.
Changes
We may update this policy. The date at the top shows when it last changed.