Privacy Policy

Last updated: 3 August 2026

This privacy policy explains how Scan Manager ("we", "us", "our") collects, uses, and protects your personal data when you use our web platform at https://events.sccpro.co.uk and our mobile applications (collectively, the "Service").

1. Who We Are

Scan Manager is a ticket scanning and event management platform operated by SCC Pro. For any privacy-related questions, contact us at hello@sccpro.co.uk.

2. Data We Collect

Account Data

When you register or are invited to the platform, we collect:

Name and email address
Organisation/company name
Phone number (optional)
Password (stored securely hashed, never in plain text)

Event & Ticket Data

Promoters upload or import ticket data including:

Event names, dates, and venues
Ticket holder names and email addresses
Ticket unique identifiers (barcodes/QR codes)
Order references and ticket types

Scanning & Usage Data

When door staff scan tickets, we record:

Scan timestamps and outcomes (valid, already used, not found)
Which door staff member performed each scan
Device sync status and connectivity information

Billing Data

Subscription payments are processed by Stripe. We do not store credit card numbers. Stripe handles payment data in accordance with PCI-DSS standards. We store your Stripe customer ID and subscription status.

3. How We Use Your Data

Provide the Service — authenticating users, managing events, validating tickets, and generating analytics
Process payments — managing subscriptions through Stripe
Communicate with you — sending password setup links, account invitations, and essential service notices
Improve the Service — analysing usage patterns to improve performance and features

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

All data is transmitted over HTTPS (TLS 1.2+)
Passwords are hashed using bcrypt
API keys are stored as SHA-256 hashes
Mobile app data is stored locally in encrypted SQLite databases and SecureStore
Server data is hosted on secure, managed infrastructure

5. Data Retention

We retain your account and event data for as long as your subscription is active. When you cancel your account:

Account data is retained for 30 days to allow reactivation, then deleted
Event and ticket data is anonymised or deleted within 90 days
Billing records are retained as required by UK tax law (typically 6 years)

6. Third-Party Services

Service	Purpose	Data Shared
Stripe	Payment processing	Email, name, payment method
Expo (EAS)	Mobile app delivery	Device identifiers for updates

7. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Delete your data ("right to be forgotten")
Export your data in a portable format
Object to or restrict processing

To exercise any of these rights, email hello@sccpro.co.uk and we will respond within 30 days.

8. Cookies

The web platform uses essential session cookies for authentication. We do not use advertising or tracking cookies. The mobile app does not use cookies.

9. Children

Scan Manager is not intended for use by children under 16. We do not knowingly collect data from children.

10. Camera Usage (Mobile App)

The mobile app requests camera permission solely to scan ticket QR codes and barcodes. Camera data is processed on-device in real time and is never recorded, stored, or transmitted. No photos or video are captured.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related enquiries:

Email: hello@sccpro.co.uk
Web: https://events.sccpro.co.uk