Last updated: 23 September 2026
Who we are and what this covers
This policy explains how Tassen Limited handles personal data in our mobile apps. It sits alongside our website privacy policy, which continues to cover tassen.xyz.
It covers two apps:
- LPX, the Friends of the Club (FOC) app, used by guests to manage their FOC status, invitations and entry
- LPX Staff, used by venue staff to manage admission at the door
Tassen Limited is the data controller. We are registered in England and Wales, company number 11223106, at 16–17 Little Portland Street, London.
If you have questions about this policy or how we handle your data, contact us at dataprotection@tassen.xyz.
What we collect, and why
| WHAT | WHY WE NEED IT | LAWFUL BASIS |
|---|---|---|
| Name, email, phone number | To create and manage your FOC account and contact you | Contract |
| Date of birth | To confirm you are over 21, as our venues are 21+ | Legal obligation |
| Home and contact address | Part of the FOC application | Contract |
| Profile photo | To identify you at the door | Contract |
| Identity document | To verify you are who you say you are | Contract |
| Instagram handle | Optional, part of your application | Consent |
| Contacts you choose to invite | To send an invitation on your behalf | Consent |
| Entry and visit records | To manage admission, FOC status and our own reporting | Legitimate interests |
| Annual Contribution and payment status | To manage your Annual Contribution | Contract |
| Device and diagnostic data | To keep the app working and fix faults | Legitimate interests |
We do not use your data for advertising, we do not track you across other companies’ apps or websites, and we do not sell your personal data.
Identity documents, photos and contacts
Three things deserve saying plainly.
Your identity document.
During your application we ask you to provide an identity document so we can confirm your identity and your age. Only authorised staff can view it, we use it for no other purpose, and we delete it once your application has been rejected or when you stop being an FOC. We do not share it with anyone outside Tassen Limited except where the law requires it.
Your profile photo.
Your photo is shown to door staff so they can confirm the person arriving is the FOC who was admitted. It is not used for facial recognition, it is not matched automatically against anything, and it is not shared outside the venue.
Your contacts.
If you choose to invite someone, the app can show your phone’s contacts so you can pick a person rather than typing their details. This happens on your device. We do not upload your address book, we do not store it, and we do not keep a record of anyone you did not actually invite. You can decline access to your contacts and still send invitations by entering a name and number yourself.
When you invite someone, we do hold their name and contact details so we can send the invitation and admit them — and we tell them, when we contact them, who invited them and how to ask us to remove their details.
Entry records, and who we share data with
When you are admitted to a venue we record that you attended, when you arrived and left, which event it was, who invited you if anyone, and what you paid. We use this to run admission, to work out your FOC standing, and for our own business reporting.
These records are not shared with other FOCs. Other FOCs can see only that you attended an event where that is part of a guest list they are on.
We share personal data with:
- Our hosting and IT providers, who store the data on our behalf
- Our messaging provider, who sends invitation and verification texts and emails
- Our payment provider, who processes Annual Contribution payments — we never see your full card details
- Professional advisers, and authorities where the law requires it
We do not sell your personal data, and we do not share it with advertisers.
Our providers may process data outside the UK. Where they do, we rely on the safeguards described in the Tassen website privacy policy.
How long we keep it, and deleting your account
| DATA | KEPT FOR |
|---|---|
| Identity documents | Until your application is rejected, or until you stop being an FOC |
| Your FOC record and profile | While you are an FOC, and 2 years afterwards |
| Entry and visit records | Kept indefinitely. Your personal details are removed when you delete your account, and the remaining records cannot identify you |
| Annual Contribution and payment records | 6 years, as required for tax and accounting |
| Messages you send us | As long as needed to deal with your enquiry |
You can delete your account at any time from the app, under your profile settings. You do not need to ask us, and you do not need a reason.
When you delete your account we remove your personal details — your name, email address, phone number, date of birth, profile photo, addresses and any identity document we still hold. Your account can no longer be used and you will not appear anywhere in the app or to our staff.
We keep a record that a visit happened, with your personal details removed, because we need accurate attendance and revenue figures for our own accounting. These anonymised records cannot be used to identify you and cannot be linked back to you.
If you would prefer your records removed entirely rather than anonymised, contact us at dataprotection@tassen.xyz and we will consider your request under your right to erasure.
Your rights, age, security and changes
You have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent where we rely on it. Withdrawing consent does not affect anything we did before you withdrew it.
To exercise any of these, contact us at dataprotection@tassen.xyz. We will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Age.
Our venues are for adults, and the app is not for anyone under 21. We ask for your date of birth during your application and do not knowingly hold data about children. If you believe we hold a child’s data, tell us and we will delete it.
Security.
We protect your data with encryption in transit, access controls limiting who can see identity documents and photographs, and the other measures described in the Tassen website privacy policy.
Automated decisions.
We do not make decisions about your FOC status by automated means alone. Applications are decided by people.
Changes.
If we change this policy we will update this page and, where the change is significant, tell you in the app.