What we encrypt, where we store it, and when we delete it

Card data goes to a PCI DSS Level 1 acquiring partner and never touches your tills, kiosks or lockers; LockerPay payments add tokenisation, 3-D Secure 2 and fraud scoring as standard; ticketing and membership data is UK-based, behind six staff roles with permissions and an audit log; VenueGo data is encrypted in transit and at rest, processed in London, stored in the UK, with images deleted after 30 days unless a review is open. Those are the published facts, and this page does not go beyond them.

This page does not claim any certification, and you should not cite one on our behalf without written confirmation from us. What we publish is what happens to data: card data goes to a Level 1 acquiring partner, VenueGo data is encrypted in transit and at rest with London processing and UK storage, and ticketing and membership data is UK-based. If a tender needs a named certification, ask us and we will answer plainly.

Card data goes from the guest's card or phone to the acquiring partner, and never touches the locker, the kiosk or the code that runs them. LockerPay then works with a token: the authorisation hold at hire, the capture at close-out, a top-up for a late return or a partial refund all run against the token. 3-D Secure 2 and machine-learning fraud scoring apply as standard.

Processing runs in London, data is stored in the UK and everything is encrypted in transit and at rest. Images of the face and the document are deleted after 30 days unless a review is open; while a review is open the images stay until it is closed. The result, approved, declined or needs review, is what reaches your systems by webhook.

UK-based. We do not name a hosting provider or region on this site. If your council, trust or acquirer needs the detail for a procurement questionnaire, ask us and we will answer directly rather than publish it here. Payouts for ticket and membership sales follow merchant verification and bank details, and card data never touches your tills, kiosks or lockers.

Your own staff see what their role allows: Owner, Admin, Manager, Staff, Accountant and Event Manager each carry permissions over members, events, payments, payouts, subscriptions, users, communications, settings, venues and policies, and the Owner assigns roles. VenueOra support can view a venue as that venue, and every action is logged. We use that to fix a stuck order or a locker when you ask, and the audit log records when it happened and what was done.