Skip to content

GDPR Notice

Last updated: July 2026

If you're in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) gives you rights over your personal data. This notice explains how DrawsUp supports them and complements our Privacy Policy.

Who controls your data

DrawsUp is the data controller for your account and platform data. When you register for an event, the organizer running that event is also a controller of the registration data they receive, and uses it to run their event.

Legal bases for processing

  • Contract – to provide the service you sign up for (accounts, events, registrations, payments).
  • Legitimate interests – to keep the platform secure and to improve it, balanced against your rights.
  • Consent – for optional communications you opt into; you can withdraw it at any time.
  • Legal obligation – where we must retain or disclose information to comply with the law.

Your rights

Subject to the law, you can:

  • access a copy of your personal data;
  • correct inaccurate data or complete incomplete data;
  • erase your data (“right to be forgotten”);
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent where processing is based on it; and
  • lodge a complaint with your local supervisory authority.

Signing in with Google

If you choose “Sign in with Google”, Google acts as an independent controller for the sign-in itself; we process the identifier, verified email address and name it returns on the contract basis above, in order to give you an account. Choosing it is entirely optional – email and password work the same way – and you can disconnect it at any time from your account settings, provided you keep another way to sign in.

We request only the openid, email and profile scopes. We do not read your Google contacts, calendar or files, and we never post on your behalf.

Advertising cookies and consent

Some pages may display advertising through Google AdSense. In the EEA and UK, we ask for your consent before setting non-essential advertising cookies, and Google and its partners act as independent controllers for the ad data they collect. You can change or withdraw your consent at any time, and manage personalized ads via Google Ad Settings. See our Privacy Policy and Cookie Policy for details.

International transfers

Your data may be processed outside the EEA/UK by us or our service providers. Where it is, we rely on appropriate safeguards (such as standard contractual clauses) to protect it.

Exercising your rights

To make a request, contact us or email privacy@drawsup.com. We'll respond within the timeframes the law requires.