Privacy
Last updated 21 October 2026.
Who we are
Gablevale is operated by TicketWave HQ Ltd, registered in England and Wales, company number 17143167, registered office Radley House, Richardshaw Road, Pudsey, Leeds LS28 6LE. We are the controller of the personal data described here. For anything in this notice, email privacy@ticketwavehq.com.
What we collect, and why
When you browse. Our hosting provider processes your IP address and browser details to serve pages and protect the site. We count page views with Vercel Web Analytics, which doesn't use cookies. We also count, per day, how often the site's tools are used (a search suggestion chosen, a listing saved, the nearest listings found): one number for each, with nothing about who used them. Typefaces are served from this site and listing photos from our storage in Paris, so your browser does not contact a font or image service elsewhere.
When you view a listing or get in touch through it.When you open a listing, follow its website or booking button, or tap its phone number or email address, we record which listing, what you did, the time, the page you came from, your browser's user agent and a one-way hash of your IP address, salted with a secret (never the address itself). We do not record the number or address you tapped, and no cookie is involved. We use this to count what we do for each listing and to report those counts to the business that runs it.
Entries we add ourselves. Some listings are added by us from a business's own website and the Companies House register: the business name, address, website and, where the operator publishes them, a phone number or email address. Each such listing says where its details came from and when we checked them. If you run one of these businesses you can claim the listing, correct it, or ask us to remove it, at hello@ticketwavehq.com. Where the business publishes an email address, we write to it once to say it is listed, where the details came from, and how to correct or remove the listing; the email has a link to remove it and a link to stop all emails from us. A removed listing is not listed again, and an address that asks us to stop is never emailed again.
When you submit a listing. We store the business details you enter, which are published once we approve the listing, including the email address you give, which is shown on the listing so people can get in touch. If you also give us your name, or a separate address for our emails, those are never published. We use your address to contact you about the listing, including an email when it is approved. Once a listing you submitted is approved, or you pay for one, we also keep the business details and your name and email in our own customer records system (Odoo, which we run ourselves on a server in France), to manage your listing and any other work you ask us for. To stop abuse, the server keeps your IP address in its working memory, never in the database, to limit repeat submissions.
When you pay for a listing. Stripe takes the payment and holds your card details; we never see them. We keep the Stripe customer and subscription references and the subscription's status and dates.
When you manage a listing. If you ask to manage a listing, we email a sign-in link, but only to an address already on file for that listing or, for a listing that isn't paid for, to an address at the business's own domain (its website's, or its published email address's). A cookie then keeps you signed in for 24 hours. We keep the address you signed in with, so you can sign in with it again and so we can email you the listing's monthly report; each report has a link to stop them.
Businesses we list. Business names, addresses, phone numbers, email addresses and website links are published so people can contact the business. Some listings were added by us, from public information, rather than by the business. Where a listing names an individual, that is personal data; to have it corrected or removed, email hello@ticketwavehq.com.
When you email us. TicketWave HQ Ltd's own privacy notice at ticketwavehq.com/privacy covers correspondence: what we hold and for how long.
Lawful bases
Legitimate interests: running and securing the site, publishing business listings so people can find and contact them, and counting the visits we send each listing. Contract: handling a listing you submit, pay for or manage. Legal obligation: the financial records a company must keep.
Cookies, and what stays on your device
The only cookie set for visitors is the sign-in cookie for people managing a listing, which lasts 24 hours. Our own staff sign in with a separate cookie. There are no advertising or tracking cookies.
Kept on your device only. If you save listings to your shortlist, your browser keeps the list in its own storage on this device, along with the last few listings you opened, so the site can show them to you again. Neither is sent to us, and clearing this site's data in your browser removes both. If you ask for the listings nearest to you, your browser shares your location with this page only after asking you; the distances are worked out on your device, and your location is never sent to us or kept. If you share your shortlist, the link carries the listings in it, and nothing else.
Who processes it for us
- Vercel Inc. — hosting and the site's server code, run in London; page-view counts.
- Hetzner Online GmbH — the database, on servers in Germany, with a standby copy in Finland.
- Scaleway SAS — encrypted backups of the database, and the photos uploaded with a listing, both in Paris.
- Stripe — payments for Featured and Premium listings.
- Scaleway SAS — sending our emails (sign-in links, approval notices and our own alerts) from Paris, through its transactional email service.
Transfers. Vercel Inc. and Stripe are US-headquartered companies. Vercel runs this site from London and Stripe contracts through its Irish entity; where either moves personal data outside the UK, it does so under the UK International Data Transfer Addendum to the EU standard contractual clauses. Our database, backups, photos and email stay with EU companies in Germany, Finland and France.
How long we keep it
| What | How long |
|---|---|
| A live listing's details | While it is on the directory, then 12 months after it is removed, so a claim or correction can still be handled |
| A submission we did not approve | 12 months, then deleted |
| The submitter's name and email | As long as the listing it belongs to |
| The address you sign in with to manage a listing | As long as the listing it belongs to |
| View and click records | 13 months, with only the salted hash of the address, then deleted automatically |
| Sign-in sessions | 24 hours for a listing owner, 7 days for an administrator |
| Payment records | 6 years after the last payment, for tax law |
We delete your personal data sooner when you ask, unless the law requires us to keep it.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop a particular use, or ask for it in a portable form. You can object to anything we do on the basis of legitimate interests. Email privacy@ticketwavehq.com and we'll respond within one month.
You can also complain to the Information Commissioner's Office at ico.org.uk.