Privacy Policy

This explains what Yechiel Jacobs collects through this site, why, who else sees it, and what you can ask us to do about it. It covers buying a ticket, joining the mailing list and entering the prize draw.

When you buy a ticket: your name, email address, phone number, and what you bought. Not your card number. Card details go straight to Stripe from your browser and never reach our servers or our code, which is deliberate and is why the card fields on the payment page are Stripe's own.

When you join the mailing list: your email address.

When you enter the prize draw: your first and last name, email address, phone number and postcode, and whether you ticked either consent box.

Automatically, on every request: a hashed form of your IP address, used only to count requests against a rate limit. It is hashed with a secret before it is stored, so the table holds no addresses. We keep no analytics, run no advertising trackers, and set no third-party cookies. The cookies we do set hold your language, your currency, your receipt language, and whichever seats you are currently holding.

To sell you a ticket and get it to you: because that is the contract you entered into. This is the only category you cannot opt out of and still have a ticket.

To email you about a show you bought a ticket to, including a receipt, a reminder and a notice if the date moves: because it is part of the same contract. These are not marketing and there is nothing to unsubscribe from; they stop when the show is over.

To email or text you about new dates: only if you asked us to, and only until you tell us to stop.

To run the prize draw: because you entered it.

To keep the site up and prevent abuse: because we have a legitimate interest in the box office not being taken down by a loop.

Stripe processes the payment and holds the card details we never see. Resend sends the email. Vercel hosts the site and Neon hosts the database. Each of them sees only what it needs to do that job, and each is bound by its own agreement with us.

Nobody else. Your details are not sold, rented, traded or handed to a marketing list, and there is no advertising network on this site to hand them to. If a court or the law requires disclosure we will comply, and we will tell you unless we are forbidden to.

Everything above is held against your email address, which is the only thing used to recognise you. Enter the prize draw and later buy a ticket with the same address and it is one record, so we do not write to you twice or ask again for something you have already given. A different address is a different person to us: we never try to match you by name, phone number or postcode, because guessing wrong there is worse than not guessing.

Orders and tickets are kept for as long as the tax and accounting rules where we operate require, because a sale is a financial record.

Mailing list entries are kept until you unsubscribe, and the record that you unsubscribed is kept afterwards so we do not write to you again by accident.

Prize draw entries are kept for the duration of the draw and for a year afterwards, because a draw has to remain answerable to anyone who asks how the winner was picked.

Rate limit counters are deleted after twenty four hours. Unpaid seat holds expire in ten minutes and are swept away.

A copy of what we hold about you, a correction to it, or its deletion. To stop receiving marketing, at any time, without giving a reason: every marketing email has an unsubscribe link that works in one click, and you can reply STOP to any text.

Deleting a purchase record is the one request we may have to refuse in part, because a completed sale is a document we are required to keep. In that case we will delete everything that is not the financial record and tell you what is left and why.

Depending on where you live you may also have the right to object to processing, to ask for your data in a portable form, to complain to a data protection regulator, and to not be sold or shared for cross-context advertising. We do not sell or share personal information, so there is nothing to opt out of on that last one.

Every one of these goes to jacobsyechielmanagement@gmail.com, and reaches a person rather than a queue.

This site is not for children. We do not knowingly collect anything from anyone under 18. If you believe a child has given us their details, write to jacobsyechielmanagement@gmail.com and it will be deleted.

Everything travels over an encrypted connection, passwords are hashed, ticket codes are signed, and card details never reach us at all. No system is perfect, and if a breach ever affects you we will tell you and the relevant regulator as quickly as the law requires.

This policy can change. The date at the top of the page is when it last did, and a change that materially affects you will be announced rather than quietly published.