Privacy Policy
How we collect, use and protect your personal data.
This Privacy Policy explains how Hooray (“we”, “us”, “our”) collects, uses and protects personal data when you use the Hooray platform at hooray.ie and related services (the “Platform”).
We are committed to processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Irish Data Protection Act 2018, and the ePrivacy rules (S.I. No. 336 of 2011).
Controller: Hooray, registered office Ireland.
Data protection contact: privacy@hooray.ie.
We have not appointed a statutory Data Protection Officer; the contact above handles all privacy queries.
1. Who is responsible for your data (important)
Hooray operates as a neutral intermediaryconnecting Bookers and Entertainers. This affects who is the “controller” of your data:
- Hooray is the controller for the personal data we collect and process to run the Platform — for example, account and profile information, on-Platform messages and quotes, reviews, subscription billing, security and analytics.
- You become an independent controller for personal data you receive throughthe Platform and then use for your own purposes off-Platform. For example, once an Entertainer receives a Booker's contact details to fulfil a Booking (or vice versa), that user is independently responsible, as a separate controller, for how they store and use those details, and must comply with data-protection law in their own right.
We are not joint controllers with users in respect of users' own off-Platform processing.
2. The personal data we collect
You provide to us:
- Identity and account data — name, email, phone number, password, account type (Light/Full).
- Profile and listing data (Entertainers) — business/stage name, description, location and travel range, services, pricing, photos, audio and video.
- Content — messages, quotes, enquiries, reviews and ratings, support communications.
- Subscription billing data (Entertainers with Full Accounts) — billing name, address, VAT details and payment confirmation. Card details are processed directly by our payment processor (Stripe); we do not store full card numbers.
We collect automatically:
- Usage and technical data — IP address, device and browser information, pages viewed, actions taken, approximate location, and cookie/identifier data (see our Cookie Policy).
We receive from third parties:
- Confirmation and status information from our payment processor and verification providers (for example, phone-verification results).
We do not intentionally collect special-category data. Please do not submit sensitive personal data through free-text fields.
3. Why we use your data and our lawful basis
| Purpose | Lawful basis (GDPR Art. 6) |
|---|---|
| Create and manage your account; provide core Platform features (search, messaging, quotes, profiles) | Performance of a contract |
| Bill and manage Entertainer Subscriptions | Performance of a contract |
| Verify phone numbers and prevent fraud and abuse | Legitimate interests; legal obligation |
| Display profiles, listings and reviews to other users | Performance of a contract; legitimate interests |
| Provide support and respond to queries | Legitimate interests; performance of a contract |
| Keep the Platform secure and working | Legitimate interests; legal obligation |
| Analytics and improving the Platform | Consent (for non-essential cookies) and/or legitimate interests |
| Marketing communications and advertising (incl. Meta and Google pixels) | Consent |
| Comply with legal, tax and accounting obligations | Legal obligation |
| Establish, exercise or defend legal claims | Legitimate interests |
Where we rely on legitimate interests, we have balanced those against your rights. Where we rely on consent, you can withdraw it at any time (see Section 9).
4. Aggregated and anonymised data, and no AI training
4.1 We may aggregate or anonymise personal data so that it no longer identifies you, and use that aggregated or anonymised data to understand how the Platform is used, to improve and develop it, and to produce statistics. Where data is truly anonymised, it is no longer personal data under the GDPR.
4.2 We do not use your personal data to train artificial-intelligence or machine-learning models, and we do not input personal data into third-party AI services. Any analytics or service improvement relies on aggregated or anonymised data as described above.
5. Marketing and cookies
We send marketing only where permitted, and you can opt out at any time via the unsubscribe link or by emailing privacy@hooray.ie. Non-essential cookies and tracking technologies (including analytics and the Meta and Google advertising pixels) are used only with your prior consent, managed through our cookie banner. See the Cookie Policy for full details.
6. Who we share data with
We share personal data only as needed:
- Other users — your public profile, listings, media and reviews are visible to other users and visitors. Messages and quotes are shared with the user you communicate with.
- Service providers (processors) acting on our instructions, including (current list, which may change):
- Supabase — database and hosting (EU region, Frankfurt).
- Stripe — Subscription payment processing.
- Resend — transactional and notification email.
- Twilio — phone-number verification.
- Netlify — website hosting and content delivery.
- Sentry — error monitoring and diagnostics.
- Plausible — privacy-focused analytics.
- Google (Google Ads) and Meta (Meta Pixel) — advertising and measurement, only with your consent.
- Professional advisers, auditors and authorities — where required by law or to protect our rights.
- A successor — in connection with a merger, acquisition or sale of assets, subject to this Policy.
We require processors to protect personal data under written data-processing terms.
7. International transfers
Most processing takes place within the EEA (for example, our database is hosted in Frankfurt). Some providers (such as advertising and certain infrastructure providers) may process data outside the EEA, including in the United States. Where they do, we rely on appropriate safeguards, such as the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. You can request more detail at privacy@hooray.ie.
8. How long we keep your data
- Account and profile data — for as long as your account is active, then deleted or anonymised within a reasonable period after closure, unless we must keep it longer.
- Financial and tax records (e.g. Subscription invoices) — retained for the period required by Irish tax and company law (generally up to 6 years).
- Messages and quotes — retained while relevant to the Platform relationship and for a limited period afterwards to handle disputes.
- Reviews — genuine reviews may remain visible after an account closes.
- Security, logs and analytics — retained for limited periods.
We keep data only as long as necessary for the purposes above or as required by law.
9. Your rights
Under the GDPR you have the right to:
- access a copy of your personal data;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”), in certain circumstances;
- restrict or object to processing, including objecting to processing based on legitimate interests and to direct marketing;
- data portability for data you provided, where processing is based on consent or contract; and
- withdraw consent at any time, without affecting prior processing.
You also have the right not to be subject to decisions producing legal or similarly significant effects based solely on automated processing. We do not carry out such automated decision-making.
To exercise any right, email privacy@hooray.ie. We will respond within one month (extendable for complex requests). There is normally no fee. We may need to verify your identity.
Note: for data that other users hold as independent controllers (see Section 1), you should contact that user directly; we will help where we reasonably can.
10. Complaints
If you have concerns, please contact us first at privacy@hooray.ie. You also have the right to lodge a complaint with the Irish supervisory authority:
Data Protection Commission (DPC)
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
If you are in another EEA country, you may complain to your local data-protection authority.
11. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, hosting with reputable providers, and monitoring. No system is completely secure; please keep your login credentials confidential.
12. Children
The Platform is for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact privacy@hooray.ie and we will delete it.
13. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, give additional notice.
14. Contact
Privacy/data queries: privacy@hooray.ie
General: support@hooray.ie
Postal: Hooray, Ireland
