Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website or purchase tickets from our store. We are committed to protecting your privacy and processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, we are the data controller of your personal data.

1. What personal data we collect

We may collect and process the following categories of personal data about you:

Contact and identification details: Your full name, email address, billing address, and postal details, which you provide at checkout.
Order information: Details of the tickets and related products you purchase, including ticket type, quantity, price, and order reference number.
Technical data: When you visit our website, we automatically collect technical information such as your IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use to access this website. This data is collected via cookies.
Payment data: We do not store full payment card numbers on our servers. All card payments are processed securely by our third-party payment provider, who acts as a separate data controller or processor. We may receive a payment confirmation and the last four digits of your card for verification purposes.

2. How we use your personal data and our legal basis

We use your personal data only when we have a valid legal basis to do so. The table below explains our purposes and the legal bases we rely on:

Purpose of processing	Legal basis
To process your order, deliver your e-ticket, and manage your purchase (including event changes, cancellations, and refunds).	Performance of a contract – processing is necessary to fulfil our contract with you.
To meet legal and accounting obligations, such as tax and financial record-keeping.	Legal obligation – processing is necessary for us to comply with the law.
To prevent and detect fraud.	Legitimate interest – to protect our business and our customers from fraudulent activity.
To send you occasional updates about upcoming events and related news, where you have given your consent.	Consent – you have given us your active consent to send you these communications. You can withdraw your consent and unsubscribe at any time.
To improve our website, services, and customer experience through analytics.	Legitimate interest – to understand how our customers use our website and services, provided this does not override your rights.

3. Sharing your personal data

We share your personal data only to the extent necessary for the purposes set out in this policy, and only with:

Venue and event organisers: To facilitate your entry and ensure the event runs smoothly (e.g., we may share entry lists with your name and ticket type).
Payment processors: To process your payment securely. These providers handle your payment details in accordance with their own privacy policies.
IT and service providers: Who help us operate our website, send emails, and manage our business (e.g., hosting providers, email delivery services).
Legal or regulatory authorities: If required by law, or to protect our rights or the safety of others.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

4. Your data rights

Under UK data protection law, you have the following rights, which you can exercise at any time:

Right of access: You have the right to request a copy of the personal data we hold about you.
Right to rectification: You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to erasure (‘right to be forgotten’): You have the right to ask us to delete your personal data, where there is no good reason for us to continue processing it.
Right to object: You have the right to object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
Right to restriction: You have the right to ask us to suspend the processing of your personal data, for example, if you want us to establish its accuracy.
Right to data portability: You have the right to request the transfer of your personal data to another party, in a structured, commonly used, and machine-readable format.
Right to withdraw consent: Where we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details in the Contact Us section below. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

5. Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Order data: We keep your order information for the duration required by UK tax and accounting laws, which is generally 6 years after the end of the tax year in which the transaction occurred.
Marketing data: If you have consented to receive marketing emails, we will retain your contact details and preferences until you unsubscribe or withdraw your consent.
Technical data (e.g., cookies): Retention periods vary; please see our Cookie Policy for details.

After the retention period expires, we will securely delete or anonymise your personal data.

6. Cookies

We use cookies and similar technologies on our website. Some cookies are essential for the website to function properly and are set automatically. Other cookies, such as those for analytics or marketing, are only set after you have given your consent via our cookie banner.

For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. International transfers

We do not generally transfer your personal data outside the United Kingdom. If we use service providers located outside the UK, we will ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the Information Commissioner’s Office (ICO).

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data.