Your privacy is important to us. Learn how we collect, use, and protect your personal information.
This notice explains how 2WayStreet uses and protects personal information.
It applies when you visit 2WayStreet, create or use an artist or venue account, contact us, use our booking, messaging, event, marketing or app features, make a payment, or otherwise interact with the service.
Last updated: 9 September 2026
Warwickshire Arts Productions Ltd, trading as 2WayStreet, is the controller responsible for the personal data described in this notice.
Postal address: Arundel House, 50 Coventry Street, Southam, CV47 0EP
Email: hello@2waystreet.uk
Telephone: 01926 674006
Privacy questions and rights requests should be sent to the contact above.
We may produce aggregated or anonymised statistics. Information that can no longer identify an individual is not personal data. If we combine it with identifying information, we treat the result as personal data.
We do not ask users to provide special-category data (such as health, ethnicity, religion, sexual orientation or political opinions) or criminal-offence data as part of normal registration. Free-text profiles, messages or uploads could nevertheless reveal such information. Please do not provide it unless it is genuinely necessary and you are entitled to do so.
We obtain information directly from you; automatically from your device and use of the service; from artists, venues or other users involved in a booking or communication; from payment, hosting, email, analytics and push-notification providers; and from public sources or social/profile links you ask us to use. If you give us another person's data, you must be entitled to do so and should direct them to this notice where appropriate.
Where information is needed to provide an account or requested service, failing to provide it may mean that we cannot create the account or supply that feature. We will explain this where it is not obvious.
Some artist and venue details are intended to be shared through the service. Depending on the account type, subscription, moderation status and visibility settings:
Users should not place private contact details or confidential information in public profile fields. Administrators may access account content where reasonably necessary for support, moderation, safety, legal compliance or service operation.
We disclose only the information reasonably needed for the relevant purpose. Recipients may include:
We do not sell personal data. We do not share it with another organisation for that organisation's unrelated direct marketing unless you have specifically consented.
Some suppliers or their infrastructure may be outside the United Kingdom. Where personal data is transferred internationally, we use an applicable UK adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. Relevant suppliers may also apply their own safeguards where they act as independent controllers. You may contact us for further information about the safeguard used for a particular transfer.
We use strictly necessary cookies and similar storage for security, sign-in, sessions, saved choices and essential service operation. These do not require consent, although they must still be explained and used fairly.
Optional analytics or advertising storage must not be enabled unless you make an affirmative choice through our cookie controls. Rejecting optional cookies should be as easy as accepting them and must not prevent ordinary use of the service. You can change your choice through the available cookie settings or by clearing the site's cookies/local storage in your browser. Browser settings can also block cookies, but doing so may stop sign-in or other essential features from working.
Embedded or linked services may set their own cookies or receive device and usage data when you choose to load or use them. Their privacy information also applies.
Service messages—such as security, booking, subscription, support and important account notices—are not marketing and may be sent where necessary to provide the service or meet our legitimate interests or legal obligations.
We send electronic marketing only where we have valid consent or another permission allowed by the Privacy and Electronic Communications Regulations, such as the limited existing-customer “soft opt-in” where its conditions are met. Every marketing email will offer a clear way to unsubscribe. You may also object or update preferences through your account or by contacting us. Opting out of marketing does not stop essential service messages.
2WayStreet is a progressive web app. Installing it does not give us general access to your phone or computer. Push notifications are optional and require a choice in 2WayStreet plus permission from the browser or operating system. A single account may register more than one device, and invalid subscriptions may be disabled automatically.
Push routing uses the service operated by the relevant browser or device provider. Notification previews may be visible on a locked device, so we aim to avoid unnecessary confidential detail. You can disable a device through 2WayStreet and/or its browser or operating-system settings.
We keep personal data only for as long as it is reasonably needed for the purpose collected, including to provide accounts, handle disputes, protect the service and meet legal, tax, accounting and reporting obligations. We consider the nature and sensitivity of the data, risk of harm, purpose and applicable limitation periods.
Deletion from live systems may not remove information immediately from protected backups; backups are restricted and overwritten on their normal cycle. We may retain anonymised statistics indefinitely. You can request our current retention schedule or ask for erasure, subject to the exceptions explained below.
We use technical and organisational measures designed to protect personal data, including access controls, HTTPS encryption in transit, restricted administrative access, password protection and security monitoring appropriate to the risk. No internet service can promise absolute security.
We investigate suspected personal-data breaches and notify the ICO and affected individuals when the law requires it. Users should protect their password, use a secure device and tell us promptly about suspected account misuse.
Depending on the circumstances, you may have the right to:
Rights are not absolute and lawful exemptions may apply. We normally respond within one month, although the law permits an extension for a complex request or several requests. We may ask for proportionate identity evidence. There is normally no fee, but the law allows a reasonable fee or refusal in limited cases involving manifestly unfounded or excessive requests.
To exercise a right, email hello@2waystreet.uk. You may complain to the ICO at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or write to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would appreciate the opportunity to address your concern first, but you are not required to contact us before the ICO.
2WayStreet may use rules and activity data to order search results, compile charts, identify relevant opportunities, personalise content, detect misuse or support administrative review. We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects on an individual. If that changes, we will provide the information and safeguards required by law before the processing begins.
The account service is not directed at children and we do not knowingly create accounts for children who cannot lawfully enter the relevant agreement. If you believe a child has provided personal data inappropriately, please contact us so that we can investigate and take suitable action.
Links, plug-ins and embedded content can allow another organisation to collect information under its own privacy terms. We do not control third-party websites. Please review their privacy information before using them or supplying personal data.
We may update this notice when our services, suppliers or legal obligations change. The latest version and date will be published on this page. If a change is material, or we intend to use existing personal data for a materially new purpose, we will bring it to affected users' attention before that new processing begins and seek consent where consent is required. This privacy notice provides information; accepting general terms does not create consent for every use of personal data.
Please keep account and contact details accurate and current. You can update many details through your account or contact us for help.
