Privacy & Cookie Policy

Last updated 25 June 2026

This policy explains how personal data is handled on centerstageos.com, the public website where venues request a free trial of, and sign in to, the CenterStage OS venue management platform. It is written to meet our obligations under the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Once your trial workspace is provisioned, your use of the CenterStage OS application (your .centerstageos.com instance) and the data you put into it are governed by the privacy notice presented inside that application. This policy covers only the marketing and sign-up site you are reading now.

1. Who is responsible for your data

The data controller for personal data collected through this site is CenterStage OS. You can reach the person responsible for data protection here:

2. What we collect and why

We collect only what we need to set up your trial and keep the service secure. We do not buy personal data from third parties and we do not run advertising or analytics trackers on this site.

Data	Why we collect it	Lawful basis
Venue / company name, your name, work email, chosen workspace address (subdomain)	To create and provision your trial workspace and email you a sign-in link	Taking steps at your request prior to a contract, and performance of that contract (Art. 6(1)(b))
Your consent to this policy, and the policy version, recorded at sign-up	To demonstrate that you agreed before we processed your details	Legal obligation / accountability (Art. 5(2), Art. 6(1)(c))
IP address and browser user-agent, captured when you submit the trial form	To prevent abuse and fraudulent or automated trial sign-ups and to secure the service	Our legitimate interests in security and abuse prevention (Art. 6(1)(f))
“Remember my last venue” preference stored in your browser	To pre-select your venue on the sign-in page next time	Your consent, given through the cookie banner (Art. 6(1)(a))

3. Cookies and local storage

This site does not use any advertising, profiling, or analytics cookies, and it loads no third-party trackers. Fonts and icons are served from our own servers, so simply visiting these pages does not disclose your visit to Google, Cloudflare, or any other third party.

The only client-side storage we use is:

• Strictly necessary: a small record of your cookie choice itself (centerstage_cookie_consent), so we don’t ask you on every page. This is exempt from the consent requirement because it is essential to providing a function you asked for.
• Preference (non-essential): your last selected venue (centerstage_last_venue), stored only if you choose “Accept all” in the cookie banner. If you choose “Essential only”, this is never written.

You can withdraw consent at any time by clearing this site’s data in your browser, which removes both values and makes the banner reappear on your next visit.

4. Who we share data with

We do not sell your personal data. We share it only as needed to deliver the service:

• Provisioning: the details you submit are used to create your tenant workspace on the CenterStage OS platform.
• Email delivery: your email address is used to send you the sign-in link for your trial.
• Hosting and infrastructure providers that operate our servers, acting as our processors under written terms.

Where a provider is located outside the European Economic Area or the UK, any transfer is made under appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

5. How long we keep it

• If your trial is not converted into an active account, the trial sign-up record — including your name, email, IP address, and user-agent — is retained for up to 12 months from sign-up and then deleted.
• IP address and user-agent are kept solely for security and abuse prevention and for no longer than 12 months.
• If you convert to an active account, the data in your workspace is retained and deleted under the privacy notice that governs the CenterStage OS application.
• When you ask us to erase your trial data, we remove the identifying fields promptly (see below), keeping only a non-identifying reference and timestamp as proof that the erasure was carried out.

6. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you and receive a copy of it;
• Rectify data that is inaccurate or incomplete;
• Erasure (“the right to be forgotten”) of your data;
• Restrict or object to our processing, including processing based on our legitimate interests;
• Data portability — to receive your data in a structured, commonly used, machine-readable format;
• Withdraw consent at any time, where we rely on consent, without affecting processing already carried out; and
• Lodge a complaint with a data protection supervisory authority in your country if you believe your rights have been breached.

To exercise any of these rights, email tom@themab.org. We will respond within one month. You can erase a trial sign-up yourself using the form below.

7. Erase your trial sign-up

If you submitted a trial request and want the personal data attached to it erased, enter the reference from your confirmation (it looks like CS-AB12CD) and the email you used. If they match, we will immediately overwrite the name, email, IP address, and user-agent on that record.

8. Changes to this policy

If we change how we handle personal data, we will update this page and revise the “last updated” date above. Significant changes affecting how we use your data will be communicated where we have a way to reach you.

9. Contact

Questions about this policy or your personal data? Email tom@themab.org.