BLACK BOX

Privacy Notice

Last updated: 2 November 2026

Black Box is built on privacy, and that includes yours. This notice explains what personal data we collect, why we need it, and what control you have over it.

1. Contact

In this notice, "Black Box", "we" and "us" mean the organisers of Black Box. For any privacy question or request, email [email protected].

2. What we collect and why

• Data: Name, email, phone number and message from the contact form

  • Why we need it: To reply to you
  • How long we keep it: 12 months after our last reply

• Data: Name, email and phone number on the waitlist

  • Why we need it: To tell you when tickets open
  • How long we keep it: [24 months], or until you ask to be removed

• Data: Name, email, phone number and ticket number

  • Why we need it: To issue your ticket, give you access to the official channel and manage entry
  • How long we keep it: Deleted within 30 days after the event

• Data: Payment details from Stripe: name, email, amount, date and payment reference

  • Why we need it: To confirm your purchase and keep financial records
  • How long we keep it: As long as accounting and tax rules require

• Data: Government photo ID, shown at entry

  • Why we need it: To confirm your name matches your ticket and that you are 18 or over
  • How long we keep it: Security checks it by eye. We do not copy or store it

• Data: Name, email and phone number, if you opt in to future events

  • Why we need it: To invite you to future Black Box events
  • How long we keep it: Until you opt out

• Data: Photos taken at the event by the organisers or a photographer working for us. You may be recognisable

  • Why we need it: Internal reference, presentations to venues and partners, [and possibly our own website and social media]
  • How long we keep it: 24 months, unless you ask us to remove a photo of you

We only collect what we need to run the event. Please do not include sensitive information, such as health details, in your messages to us.

3. Our basis for using your data

• Your ticket: we need this data to perform our agreement with you under the Terms of Entry.
• Entry checks and security: this is needed to enforce the 18+ rule and keep the event safe.
• Financial records: we must keep these to meet our legal obligations.
• Waitlist and future events: you ask to join, or opt in, and you can leave at any time.
• Photos: we tell you about them here and in the Terms of Entry. If you do not want to appear, tell the photographer on the night or email us and we will remove any photo of you.

We do not send you other marketing.

4. Who sees your data

We do not sell your data. Access is limited to the Black Box team and the security team checking entry on the night. We also use these service providers:

• Website, contact form and waitlist: a private server in Singapore
• Email and guest list: Google Workspace
• Payments: Stripe. Stripe handles your card details and we do not receive your full card number. Stripe also uses your data as described in its own privacy policy.
• Official channel: WhatsApp, operated by Meta. [TBC: whether other guests can see your phone number in the channel.]

We may also share data if the law requires it, or if needed to protect someone's safety.

5. Transfers outside Macau

Your data is stored or processed outside Macau, including in Singapore and in other countries where Google, Stripe and Meta operate, such as the United States. By submitting your details, you agree to this transfer.

6. Cookies and analytics

This site does not currently use advertising or analytics tracking. If that changes, we will update this notice first.

7. Security

We protect your data with restricted access and secure storage. The guest list is shared only with those who need it and is deleted as set out in section 2. No system is completely secure, so we cannot guarantee absolute security.

8. Your rights

You can ask us to:

• Tell you what data we hold about you and give you a copy
• Correct anything that is inaccurate
• Delete your data, where we are not required to keep it
• Stop using your data, including removing you from the waitlist or future event invitations
• Remove a photo of you

Email [email protected] and we will reply within 30 days. We may need to confirm your identity first. If we delete your details before the event, we may not be able to admit you. You can also complain to the Macau Office for Personal Data Protection.

9. Age

Black Box is strictly 18+. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it and cancel any ticket.

10. Changes

We may update this notice. The current version is always on this page, with the date it was last changed.

Black Box Sound System | Privacy Notice