Onsite Badge Ltd is a company registered in England and Wales. We operate the Onsite Badge platform — a web-based badge printing and guest check-in system for event professionals — accessible at onsitebadge.com.
For the purposes of UK GDPR and the Data Protection Act 2018, Onsite Badge Ltd is the data controller for personal data collected through this website and platform.
When you create an account or subscribe, we collect your name, email address, company name, and billing information. Payment details are processed securely by Stripe — we never store card details ourselves. We use this data to provide, manage, and bill for the service. The legal basis is contract performance.
When you use Onsite Badge to run an event, you upload guest lists containing names, company names, job titles, and other details. This data is:
You are the data controller for your guests' personal data. We act as your data processor. You are responsible for ensuring you have the appropriate legal basis to process your guests' data and for informing them how their data is used.
When you visit onsitebadge.com we collect standard analytics data including pages visited, time on site, browser type, and approximate location (country level). This helps us improve the site. The legal basis is legitimate interests.
If you contact us by email or through our contact form, we retain that correspondence to respond to you and maintain a record of our communications. The legal basis is legitimate interests.
We use essential cookies (required for login and session management — cannot be disabled) and optional analytics cookies (help us understand how visitors use the site — you can opt out via the cookie banner). We do not use advertising or tracking cookies and do not share cookie data with advertising networks.
We share your data only where necessary to provide the service:
We do not sell your data. We do not share your data with advertisers, data brokers, or any third party for marketing purposes.
Onsite Badge Ltd is a UK company. If you access the service from outside the UK, your data may be transferred to and stored in the UK. Some service providers including Stripe are based in the United States. Where data is transferred to the US, we ensure appropriate safeguards are in place including Standard Contractual Clauses approved by the UK Information Commissioner's Office.
Under UK GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interests. To exercise any of these rights, email info@onsitebadge.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
All data transmitted between your browser and our servers is encrypted via TLS (HTTPS). Data at rest is encrypted on Microsoft Azure servers. Access to production systems is restricted to authorised personnel only. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.
Onsite Badge is a professional tool intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a minor, contact us and we will delete it immediately.
We may update this Privacy Policy from time to time. When we make significant changes we will notify subscribers by email and update the date at the top of this page. Continued use of the service after changes are notified constitutes acceptance of the updated policy.