Privacy Policy

1. Who we are

Secret Coffee Parties is operated by Foundry Media Group, a trade name of SECRET MEDIA MIDDLE EAST INFORMATION SERVICES L.L.C (trade licence No. CN-4909459), C-19, M Floor, Al Markaziyah, Khalifa Bin Zayed First St., Abu Dhabi, United Arab Emirates. In this policy “we” and “us” mean SECRET MEDIA MIDDLE EAST INFORMATION SERVICES L.L.C, and “you” means anyone who uses the platform — whether you host an event or register for one.

We are the controller of the personal information described below. Hosts who run events on the platform are separate controllers of the guest lists for their own events.

2. Information we collect

We collect only what the platform needs in order to work.

When an account is created for you

• Your name, email address and phone number.
• Your password, stored only as a one-way hash — we cannot read it and cannot recover it for you.
• Anything you choose to add to your host profile — a photo, a short bio, a contact email, a website, and Instagram or X handles. All of this is shown publicly on the events you host.

When you register for an event

• Your name, email address and phone number.
• The number of tickets, your ticket number, and whether the host approved you.
• The amount paid, the currency, and the reference numbers Stripe returns for the payment. We never receive or store your card number.

When you host an event

• The event details you publish — title, description, images, dates, location and address, capacity and ticket price.
• Your Stripe account identifier and whether Stripe has enabled you to accept charges. Your bank details are held by Stripe, not by us.

Automatically

• A session cookie named scp_session that keeps you signed in for 30 days. It is strictly necessary for the site to work — without it you cannot stay signed in. We do not use advertising or tracking cookies.
• Ordinary server logs kept for security and troubleshooting, which may include your IP address and the pages you requested.

3. How we use it

• To create and secure your account and keep you signed in.
• To publish your events, take registrations, and issue and check tickets at the door.
• To process ticket payments through Stripe and pay hosts what they are owed.
• To send service messages about your account or an event you registered for — confirmations, approvals, changes and cancellations.
• To answer support requests and handle reports about an event or a host.
• To detect and prevent fraud, abuse and misuse of the platform.
• To meet our legal and accounting obligations.

We do not sell your personal information, and we do not use it for advertising or profiling.

4. Who we share it with

The host of an event you register for

When you register, the host receives your name, email address, phone number, ticket number and payment status, and can export that list. They need it to run the door and to contact you about the event. What a host does with your details afterwards is their responsibility, and you should raise any concern with them directly.

Stripe

All payments on this platform are processed by Stripe. When you buy a ticket you are sent to Stripe Checkout, and you enter your card details on Stripe’s own pages. Your card number, expiry date and security code never reach our servers and are never stored by us. Stripe processes that information as an independent controller under its own privacy policy, published at stripe.com/privacy. Hosts are paid through Stripe Connect and are subject to Stripe’s terms as connected accounts.

Service providers and authorities

We use hosting and email providers who process data on our instructions and only to deliver the service. We may also disclose information where the law requires it, or to establish or defend legal claims.

5. How long we keep it

Account information is kept for as long as your account exists. Event and registration records, including payment references, are kept while the event is live and afterwards for as long as we need them for accounting, tax and dispute-handling purposes. Server logs are kept for a short period. When information is no longer needed, we delete it.

6. Security

Passwords are hashed, sessions are carried in a signed, HTTP-only cookie, and payment credentials are handled entirely by Stripe. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information. Keep your password to yourself and sign out on shared devices.

7. Your rights

You can view and change your name, phone number, photo and profile details at any time from your profile settings. You may also ask us to give you a copy of the information we hold about you, correct it, or delete your account and the personal information attached to it.

Some records cannot be deleted on request — in particular the payment and registration records we are required to keep for accounting and legal reasons, and details a host has already exported to their own systems.

8. Children

The platform is not intended for children under 18. We do not knowingly collect information from them. If you believe a child has given us personal information, contact us and we will remove it.

9. International transfers

We operate from the United Arab Emirates. Our providers, including Stripe, may process your information in other countries. Where that happens we rely on those providers’ own safeguards for international transfers.

10. Changes to this policy

We may update this policy as the platform changes. The date at the top of this page tells you when the current version took effect. Continuing to use the platform after a change means you accept the updated policy.

11. Contact us

Questions about this policy, or about the information we hold on you, can be sent to [email protected], or by post to SECRET MEDIA MIDDLE EAST INFORMATION SERVICES L.L.C, C-19, M Floor, Al Markaziyah, Khalifa Bin Zayed First St., Abu Dhabi, United Arab Emirates. You can also reach us on +971 56 384 7215.