Last updated: 30/03/2026
1. Data controller
Drain, 3 The Quadrant, Warwick Rd, Coventry CV1 2DY, United Kingdom — muita@drena.com. This Policy explains how we collect, use, share and protect personal data.
2. Data we process
- Account and checkout: name, email, mobile phone, order details, issued tickets and support history; billing address where applicable.
- Payment: processed by WooPayments/Stripe; we receive only references and the transaction result (we do not store full card details).
- Marketing email and preferences (when given consent).
- Technical data: IP address, device/browser and logs required for security and performance (e.g. via Cloudflare).
3. Purposes and legal bases
- Contract execution: create account, process purchase, issue and send tickets, customer support.
- Legal obligation: anti-fraud prevention, accounting/tax and compliance obligations.
- Legitimate interest: platform security, abuse prevention, service improvement (you may object where applicable).
- Consent: newsletters/marketing (you can unsubscribe at any time).
4. Sharing with suppliers (processors)
- WooPayments/Stripe — payment processing and fraud prevention.
- Mailchimp e Brevo (Sendinblue) - sending of marketing communications (with consent and opt-in record).
- Cloudflare — CDN / website security and performance.
We only use suppliers to the extent necessary and with appropriate data processing agreements.
5. International transfers
When data is transferred outside the UK/EEA (e.g. US), we apply appropriate safeguards, such as Standard Contractual Clauses and, where applicable, the Data Privacy Framework / UK Extension. We keep a record of the suppliers and transfer mechanisms used.
6. Conservation
We retain the data for as long as necessary for the purposes described and for the applicable legal periods (e.g. accounting/tax requirements). Once these periods have expired, we delete or anonymise it.
7. Data subjects' rights
- Access, rectification, erasure, restriction, portability e opposition to processing based on legitimate interest.
- Withdraw consent data for marketing at any time.
- Complain with the competent supervisory authority (e.g., ICO or the UK or your country's authority in the EEA).
8. Cookies
We use cookies for essential functionality and, with consent, for marketing/analytics. You can manage preferences in the cookie banner and/or in your browser. We provide detailed information in our Cookie Policy.
9. Security
We apply appropriate technical and organisational measures to protect the data. Our suppliers (e.g. Cloudflare and Stripe) maintain enterprise-grade security controls.
10. Contacts
For queries or to exercise rights: muita@drena.com. We will reply within 2 working days (08:00–18:00).