Privacy Policy

Otaro is a trading name of Otaro Events Limited, a company registered in England and Wales under company number 17392130, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.

Otaro Events Limited is the data controller for the personal information described in this notice. If you have a question about how we handle your data, or want to exercise any of the rights set out below, contact us at hello@otaroevents.com.

If you are not satisfied with how we have handled your information, you have the right to complain to the Information Commissioner's Office (ico.org.uk), the UK supervisory authority for data protection.

When you place an order we collect the lead contact's name, email address and phone number, together with the name and nationality of each attendee. Clubs require these details before they will issue hospitality tickets. If you contact us or subscribe to our emails, we retain that correspondence and your email address.

If you reach us through an advert or a link on another website, and you have accepted marketing cookies, we record which advert or link it was, so that we can establish which sources are worth continuing. This is stored as a single cookie on your device, and is attached to your booking if you go on to make one.

We also record which pages and checkout steps are used, so that we can identify where the booking process causes difficulty. These records identify you by email address where you have provided one.

Strictly necessary cookies keep the site working: your language, your display currency, your security session and your cookie choice itself. These are always active. We are not required to ask your permission before setting them, because without them the site cannot deliver what you have asked it to do.

Analytics cookies tell us how pages are used. Marketing cookies record which advert or link brought you here. Neither is set unless you agree, and refusing takes a single click, exactly as accepting does.

You may change your answer at any time using the “Cookie settings” link in the footer of every page. If you refuse, the site continues to work as normal. We simply stop counting you.

We store your choice for 400 days, after which we ask again. You do not have to wait for that: you can withdraw or change your consent at any time.

Your details are used to process and deliver your booking: confirming availability with the club or its official partner, sending your payment link and tickets, and supporting you around match day. The lawful basis for this is performance of our contract with you.

If you were partway through a booking and did not complete it, we may send you up to two reminders. Each carries an unsubscribe link, which takes effect immediately.

We send marketing by email or WhatsApp only to those who have asked for it by ticking the box at checkout, and we record the date on which you did so. You may withdraw at any time, either through the unsubscribe link in any message or by emailing us, and we act on the request immediately.

Attendee names and nationalities are shared with the club or its official hospitality partner to issue your tickets. We never sell your data.

We use the following providers, who process data on our instructions and for no purpose of their own: Supabase (our database), Vercel (website hosting), Stripe (card payments, who receive your card details directly, never through our servers), Resend (sending our emails), PostHog, hosted in the European Union (usage analytics), HubSpot (our customer records), and Meta (WhatsApp messages, if you have opted in to those).

Each of these is bound by a data processing agreement with us.

Booking records are retained for as long as needed to service your booking and meet our legal and accounting obligations. Newsletter details are kept until you unsubscribe.

You may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where we no longer need it. Email hello@otaroevents.com and we will respond within one month, free of charge.

You may object to marketing at any time and we will stop, without exception and without asking you for a reason. Deletion is more limited: where the law requires us to retain a record, such as a transaction held for tax purposes, we will keep only that record and tell you what has been kept.