How we use your data

Who is responsible for your data

The data controller for this signup — the organisation legally responsible for deciding how your information is used — is currently named as MTRNM. We are being upfront that this name is provisional: it is a placeholder pending a formal decision on the correct legal entity (recorded internally as an open decision), and it will be updated here, on the signup form and in every future consent record the moment that decision is made. Historical records of consent already given are never rewritten to match a later change — they keep whatever entity name was actually shown to you at the time you signed up. We think it is more honest to tell you this is unresolved than to present a placeholder as settled fact.

What we collect

At signup we collect your full name, email address and phone number. All three are required. We ask for your phone number for the same reason as your email — so we can reach you about NATM London tickets going on sale — not to message you on it today. If you choose to tell us more afterwards — for example your city — we store that too, but it is never asked for at the point of first signing up. We also record a small amount of technical and attribution data automatically: things like which advertisement or link brought you here (UTM parameters, click identifiers such as fbclid or gclid), the page you landed on, and your IP address and browser at the moment you submitted the form. This is used to understand which campaigns are working and to protect the form against automated abuse, not to build a profile of you beyond that.

Why we are allowed to use it

We rely on two different legal bases, depending on what we are sending you, and we keep them deliberately separate.

Telling you when NATM London tickets go on sale — the on-sale time, the price and where to buy — is the thing you registered for. We treat this as a service communication performed at your request, not as marketing, and it does not depend on a separate marketing tick.

Anything beyond that — a newsletter about other MTRNM events, for instance — is marketing, and we only send it if you have actively and separately opted in via the unticked checkbox on the form. That checkbox is never pre-ticked, joining the priority-access list never requires ticking it, and you can withdraw that consent at any time, as easily as you gave it, by unsubscribing or by writing to us at the address below.

How long we keep it

If you sign up and never buy a ticket, we keep your details for 24 months from your last interaction with us, then delete them. If you buy a ticket or a table, your record moves into our buyer records and is retained for six years, in line with UK tax and limitation rules. Evidence that you gave or withdrew consent is kept separately from your main record for as long as we rely on it, plus six years after any withdrawal, so that we can demonstrate compliance if ever asked. You can unsubscribe or withdraw consent at any time; doing so does not itself delete your underlying record immediately, but it stops any further marketing to you straight away and starts the retention clock described above.

Who else sees your data

We do not sell your data. A small number of specialist service providers process it on our behalf, strictly to run this signup page and send you the emails you asked for:

• Neon, who host the database this information is stored in, in the UK.
• Vercel, who host this website and the server that processes your submission.
• Resend, who send the confirmation email you receive after signing up.

Each of these providers is contractually bound, as a data processor, to use your information only for the purposes we instruct and to protect it appropriately. We name them here rather than describing them vaguely, because we think you are entitled to know exactly who touches your information, not just that “some third parties” might.

Your rights

Under UK GDPR you have the right to ask us what data we hold about you and to receive a copy of it, to have inaccurate data corrected, to have your data deleted, to object to how it is used, and to receive it in a portable format to take elsewhere. Where our use of your data depends on consent — the marketing newsletter — you can withdraw that consent at any time, and if you object to marketing we will stop immediately; that objection is not something we weigh against anything else. To exercise any of these rights, email privacy@mtrnm.co. We aim to respond within one calendar month.

Cookies and tracking

Before you make a choice about cookies, this page renders and the signup form works using only what is strictly necessary to do that — nothing is shared with an advertising platform at that point. Anything used for advertising measurement, including Meta’s tools, only runs after you have actively accepted it through the cookie banner, which you can decline as easily as you can accept.

Governing law

This processing is governed by the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). Where you are based in the EU, EU GDPR applies to our processing of your data as well.