Privacy Policy
Effective Date: 1 April 2026
Last Updated: 15 May 2026
Who we are
Nimativ Limited (trading as Re-venue) is an AI-powered revenue optimisation platform for entertainment and hospitality venues.
Company details:
- Registered company: Nimativ Limited
- Trading name: Re-venue
- Company number: 14898210
- Registered address: 47 Gillingham Street, London, SW1V 1HS
- Data protection contact: privacy@re-venue.ai
- Website: www.re-venue.ai
This Privacy Policy explains how we collect, use, and protect information when you:
- Use our platform as a venue operator
- Visit our website
- Interact with our services
For detailed information about our subprocessors, security measures, and data processing practices, see our Data Processing page.
Information we collect
Information from venue operators (our customers)
When you sign up for Re-venue, we collect:
- Business name and contact details
- Your name, email address, and phone number
- Job title and role
- Billing and payment information
- Company registration details
Booking data from your customers (end users)
When integrated with your booking platform, we process:
- Booking timestamps and dates
- Transaction values
- Venue location
- Party size
- Customer name, email address, and phone number where provided through the booking flow
- Booking patterns and analytics data
- Device and session information
Important: Re-venue processes this data to deliver the platform services and retains it in accordance with our data retention schedule. Payment card details are processed directly by your booking platform's payment processor. Re-venue never handles or stores payment card information.
Technical and usage data
We automatically collect:
- IP addresses
- Browser type and version
- Device information
- Platform usage analytics
- Feature engagement metrics
- Performance and error logs
Communications
We keep records of:
- Support tickets and correspondence
- Feedback and feature requests (via Jira Service Desk)
- Sales and onboarding communications
How we use your information
To provide our services
- Process your subscription and billing
- Provide access to the Re-venue platform
- Generate revenue optimisation insights and recommendations using our Demand Index algorithm
- Deliver dynamic pricing and capacity management tools
- Provide customer support
- Maintain platform security and performance
To improve our services
- Analyse platform usage to improve features
- Develop new AI models and optimisation algorithms
- Conduct product research and testing
- Generate anonymised industry benchmarks
- Improve user experience and interface design
Marketing and communications
- Send product updates and feature announcements (legitimate interest)
- Share industry insights and best practices (legitimate interest)
- Send marketing communications about our services (consent - you can opt out)
- Conduct customer satisfaction surveys (legitimate interest)
Legal compliance (legal basis: legal obligation)
- Comply with tax and accounting requirements
- Respond to legal requests and court orders
- Prevent fraud and abuse
- Enforce our Terms of Service
How we share information
We do not sell your data
We never sell personal information to third parties.
Service providers
We share data with trusted service providers who help us operate our platform:
Infrastructure:
- Amazon Web Services (cloud hosting, compute, storage, networking)
Analytics, monitoring and observability:
- Datadog (application performance monitoring, log management)
- PostHog (product analytics, session analytics, feature flags)
- Google Analytics (anonymised web analytics)
Business services:
- HubSpot (email marketing and CRM)
- Google Workspace (internal business communications)
- Jira Service Desk (customer support and bug tracking)
All service providers are bound by data processing agreements and can only use data to provide services to us. For a complete list of subprocessors that process client personal data, including the data they handle, their locations, and applicable transfer mechanisms, see our Data Processing page.
Business integrations
With your permission, we integrate with booking platforms including, but not limited to:
- ROLLER
- TicketingHub
- SevenRooms
- Smeetz
- BookedIt
These platforms act as separate controllers or processors under your own agreement with them. Data flows between these platforms and Re-venue are governed by API agreements. For more detail on how client-directed integrations are handled, see our Data Processing page.
Aggregated industry benchmarks
We may share anonymised, aggregated insights with:
- Industry publications
- Venue operators (as platform features)
- Research organisations
This data cannot identify individual venues or end users.
Legal requirements
We may disclose information when required by law or to:
- Comply with legal processes
- Protect our rights and property
- Prevent fraud or security threats
- Protect the safety of our users
Business transfers
If Re-venue is acquired or merged, your information may be transferred to the new owner, subject to this Privacy Policy.
International data transfers
Primary storage location
All application data is hosted within the United Kingdom and European Economic Area (AWS London eu-west-2 and Ireland eu-west-1 regions). No client personal data is stored outside the UK/EEA at the infrastructure level.
Third-country transfers
Certain service providers (Datadog, PostHog, Google Analytics) process data in the United States. When personal data is transferred outside the UK/EEA, we ensure appropriate safeguards through:
- UK International Data Transfer Agreement (UK IDTA)
- UK Addendum to the EU Standard Contractual Clauses
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
The specific transfer mechanism applicable to each subprocessor is listed on our Data Processing page.
Data retention
We retain information for the following periods:
| Data type | Retention period |
| Active customer account data | Duration of subscription + 30 days |
| Billing and transaction records | 7 years (legal requirement) |
| Granular booking data | Aggregated into summaries after 90 days; granular records deleted after aggregation |
| Aggregated venue analytics | Up to 3 years to support model accuracy, then anonymised or deleted |
| Anonymised benchmarks | Indefinitely |
| Audit logs | Up to 7 years |
| Support communications | 3 years |
| Marketing consent records | Until withdrawn + 3 years |
When you close your account, we delete your personal data within 30 days, except where we have legal obligations to retain it. Backups are purged on standard rotation cycles not exceeding 90 days.
For full details, see our Data Processing page.
Your rights
If you're a venue operator (our customer)
You have the right to:
- Access your personal data
- Rectify inaccurate information
- Erase your data (subject to legal obligations)
- Restrict processing
- Data portability - receive your data in a portable format
- Object to processing based on legitimate interests
- Withdraw consent for marketing
How to exercise rights: Email privacy@re-venue.ai
If you're an end user (booking customer)
Re-venue acts as a data processor for venue operators. If you have questions about how your booking data is used:
- Contact the venue directly in the first instance
- If unresolved, contact us at privacy@re-venue.ai
Response timeline
We respond to rights requests within 30 days (or up to 3 months for complex requests).
Complaints
You can lodge a complaint with:
UK Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Phone: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, SK9 5AF
EU supervisory authorities (if you're in the EU)
Security measures
We protect your data through:
Technical measures
- Encryption in transit (TLS 1.2+)
- Encryption at rest (AES-256)
- Secure authentication (MFA available)
- Regular security testing
- Intrusion detection and monitoring
- Secure software development practices
Organisational measures
- Access controls (least privilege principle)
- Background checks for staff
- Data protection training
- Confidentiality agreements
- Incident response procedures
- Regular security audits
Data breach notification
If a data breach occurs, we will:
- Notify affected customers within 48 hours
- Notify the ICO within 72 hours (if required)
- Notify end users if high risk to their rights
Cookies and tracking
Website cookies
Our website uses cookies for:
- Essential cookies - platform functionality (no consent required)
- Analytics cookies - usage statistics (consent required)
You can manage cookie preferences in our cookie banner.
For full details, see our Cookie Policy.
Platform analytics
The Re-venue platform collects usage analytics to improve performance. This does not require cookies as you're authenticated.
Children's privacy
Re-venue is a B2B platform not directed at children under 18. We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy to reflect:
- Legal or regulatory changes
- New features or services
- Industry best practices
Notification of changes
- Significant changes: Email notification 30 days before
- Minor changes: Updated "Last Updated" date
- You can always find the current version at www.re-venue.ai/privacy-policy
Contact us
Data protection queries:
Email: privacy@re-venue.ai
Post: Data Protection Officer, Nimativ Limited, 47 Gillingham Street, London, SW1V 1HS
General enquiries:
Email: hello@re-venue.ai
Website: www.re-venue.ai
Sales:
Email: sales@re-venue.ai
This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR).