Privacy policy.

Version 1. Last updated: 5 October 2026.

Who we are

NextLevelEvents ("we", "us") makes ticketing, guest lists, door scanning, WhatsApp updates, email and voting for events. We are based in Amsterdam, the Netherlands.

Questions about privacy? Email hello@nextlevelevents.io or call +31 20 586 3255.

Two roles

• Controller. For visitors of this website and for our customers, the event organisers, we decide what happens with the data. This policy applies in full.
• Processor. For the guests of an event, the organiser decides. We process guest data only on the organiser's instructions, under a data processing agreement. The organiser's privacy policy applies to you as a guest. This policy explains what we do as the organiser's processor.

Website visitors

Forms

When you fill in the onboarding form, we receive your name, email address, phone number, the expected date and number of guests, and what you need. We use this to answer you and to prepare an offer. The legal basis is the steps you ask us to take before a contract (GDPR article 6(1)(b)).

When you use the data deletion form, we receive your name, email address and the details you add. We use them only to handle your request. The legal basis is our legal obligation (article 6(1)(c)).

The forms go to our team by email. We keep these emails for up to 2 years after our last contact, unless you become a customer.

Security check

Our forms use Cloudflare Turnstile to stop spam bots. Turnstile checks your browser and your IP address. The legal basis is our legitimate interest in forms without abuse (article 6(1)(f)).

Fonts

The website loads its fonts from Google Fonts. Your browser then sends your IP address to Google. The legal basis is our legitimate interest in a readable website (article 6(1)(f)).

Cookies and analytics

The website sets no cookies. We use no analytics, no advertising and no tracking pixels. When you choose a language or close the language bar, your browser remembers that choice in its local storage. That value never leaves your device.

Server logs

Our hosting provider Cloudflare processes your IP address and technical request data to deliver the pages and to protect the website. These logs are kept for a few days.

Organisers (our customers)

For our customers we process the names, email addresses and phone numbers of contact persons and team members, login data, invoices and our emails and chats with you. We use this data to deliver the service, to support you and to send invoices. The legal basis is our contract with you (article 6(1)(b)) and our legal obligations (article 6(1)(c)).

The organiser console uses one functional cookie to keep you logged in. We keep invoices and the data on them for 7 years, because Dutch tax law requires it.

Guests of an event

For the organiser, we process the data of its guests. This can be:

• name, email address and phone number;
• ticket, order, tier, table or seat, and check-in time;
• WhatsApp messages and email messages between the guest and the event;
• votes, when the event uses voting.

We use this data only to run the event for the organiser: to send tickets and updates, to scan tickets at the door, to answer guests and to count votes. We do not sell guest data. We do not use it for our own marketing or for advertising, and we do not use message content to train AI models.

We delete guest data when the organiser asks, and no later than 12 months after the event.

WhatsApp

Organisers can talk to their guests through WhatsApp. For this we use the WhatsApp Business Platform (Cloud API) of Meta. When a guest uses the WhatsApp line of an event, we receive from Meta:

• the guest's WhatsApp phone number and profile name;
• the content of the messages the guest sends, including photos or files;
• the status of the messages we send (sent, delivered, read or failed) and the times.

We store this in our database in the European Union. The organiser's team sees the conversation in the organiser console and answers from there. We use the data only to deliver the event's messages and to show the conversation to the organiser's team.

The organiser decides who gets messages. Organisers must ask their guests for permission before they send WhatsApp messages. You can stop the messages at any time: say so in the chat, or block the number.

Meta also processes these messages, under its own terms. Read the WhatsApp privacy policy.

Who else receives data

We use these service providers. Each one has a data processing agreement with us, or acts under its own terms where the law allows that.

• Cloudflare, Inc. Hosting of the website and apps, the database (stored in the EU), the Turnstile security check and the forwarding of email to our team.
• Lettermint B.V., the Netherlands. Sending of email.
• Meta (WhatsApp Ireland Limited and Meta Platforms Ireland Limited). WhatsApp messages.
• rami.io GmbH (pretix), Germany. Ticket shops, orders and check-in.
• Google (Google Ireland Limited). Fonts on the website.

We share data with authorities only when the law requires it.

Data outside the EU

Cloudflare, Meta and Google are US companies or part of one. They can process data in the United States. These transfers use the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.

Security

All traffic uses HTTPS. Only our team members who need the data have access to it, with their own login. Guest data of one organiser is not visible to other organisers.

Your rights

You can ask us to see, correct or delete your data. You can also ask us to limit or stop the processing, or to give you your data in a common file format. Where you gave permission, you can withdraw it at any time.

Email hello@nextlevelevents.io. To delete your data, use the data deletion form. We answer within one month. If you are a guest, we can forward your request to the organiser.

Not happy with how we handle your data? You can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Children

Our website and service are not meant for children under 16. We do not knowingly collect their data.

Changes

We update this policy when our service changes. The date at the top shows the latest version. For big changes, we inform our customers by email.