Last updated 26 October 2026
Who we are
This site is run by The Baking Society, a society affiliated with the University of St Andrews Students' Association (Scottish charity SC019883). The society is responsible for the personal data collected here. You can contact us at bakingsoc@st-andrews.ac.uk.
What we collect and why
When you book, we collect:
- the name of each ticket holder, which you type in, including for friends;
- the email address you enter on the payment page, which our payment provider passes to us;
- your booking details: event, time slot, ticket type, amount paid and booking reference.
We use these to sell you tickets, email them to you, process refunds and check ticket holders in at the door. Your email and booking details are needed to fulfil your purchase (contract). We use ticket holders' names and check-in records because we have a legitimate interest in running our events and admitting the right people. You must give a name for each ticket and an email address, or we can't complete the booking.
We never see your card details. Stripe handles payment and processes this information securely.
Who we share it with
- Stripe takes payments and sends receipts. It is also responsible for its own fraud-prevention and legal checks: see stripe.com/privacy.
- Cloudflare hosts this site and runs a bot check on the booking form.
- Resend sends our ticket and refund emails.
These companies are based in the United States. Transfers there are protected by the UK–US data bridge and standard contractual clauses.
How long we keep it
Names and email addresses are deleted 60 days after the event. We keep amounts, booking references and payment references for our accounts for up to 6 years.
Cookies
We don't use tracking or analytics cookies. The bot check, committee login and Stripe's payment page use only cookies that are needed for the site to work securely.
Your rights
You can ask to see, correct or delete your data, to restrict how we use it, to object to how we use it, or to receive a copy to take elsewhere. Email bakingsoc@st-andrews.ac.uk to use any of these rights or to complain. We will acknowledge complaints within 30 days. If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.