Privacy Policy for Spratton Festival
1. Introduction
At Spratton Festival, accessible at sprattonfestival.com, we are committed to safeguarding the privacy and personal data of our website visitors, customers, and users. We recognize and respect the importance of the personal information you share with us, and this Privacy Policy sets out how we collect, use, disclose, and protect your data. We process all personal data lawfully, fairly, and transparently, in accordance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy regulations.
2. Scope of This Policy and Data Controller Responsibility
This Privacy Policy applies to all personal data collected and processed through sprattonfestival.com and related digital communications. Spratton Festival acts as the data controller for any personal information we collect. This means we determine the purposes and means of data processing in accordance with applicable laws. Third-party processors who handle your data on our behalf are bound by contractual obligations to maintain data confidentiality and integrity.
If you have any questions or concerns regarding your data or this policy, please contact us at [email protected].
3. Categories of Personal Data We Collect
We may collect and process the following categories of personal data, either directly from you, automatically through your use of our services, or from trusted third parties:
– Usage Data: Includes details of your browser type and version, IP address, access times, browsing actions, URLs visited, and page interaction information.
– Account Data: Includes your name, postal address, email address, and phone number provided when purchasing tickets or creating an account.
– Profile Data: Includes information related to your user preferences, past festival attendance, ticket purchases, interests, and behavior on our platform.
– Communication Data: Includes messages and communications sent to us via email or contact forms, support requests, and our responses to those inquiries.
– Technical Data: Includes device type, operating system, browser plug-ins, screen resolution, and system configurations as collected by cookies or similar technologies.
– Transaction Data: Includes payment details (processed securely via third-party platforms), billing and delivery information, and receipt history.
– Preference Data: Includes records of your communication preferences, consent to receive marketing messages, and selections regarding specific products or services.
4. Legal Bases for Data Processing
We rely on the following lawful bases to process your personal data:
– Consent: When you explicitly provide your consent for us to use your data, such as subscribing to newsletters or agreeing to cookies that are not strictly necessary.
– Contractual Necessity: To fulfill or enter into a contract with you, such as when you purchase a ticket or request a service.
– Legitimate Interests: Where processing is necessary to pursue our legitimate business interests, including ensuring website security, enhancing user experience, and promoting festival offerings, provided such interests are not overridden by your fundamental rights.
– Legal Obligation: Where processing is necessary to comply with a legal requirement, such as tax reporting or responding to law enforcement requests.
5. Your Data Protection Rights
As a data subject, you are entitled to exercise certain rights regarding your personal data, subject to verification and applicable exceptions:
– Right of Access: Request access to your personal information and receive confirmation of how it is being processed.
– Right to Rectification: Request correction of inaccurate or incomplete information.
– Right to Erasure (Right to Be Forgotten): Request deletion of your data where there is no longer a legal basis for its processing.
– Right to Restriction: Request limited processing of your data under certain conditions.
– Right to Data Portability: Request transfer of your personal information to another controller, where technically feasible and appropriate.
To exercise any of these rights, please contact us directly at [email protected].
6. Security Measures
We implement appropriate technical and organizational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security safeguards include:
– Secure Socket Layer (SSL) encryption for data transmission
– Restricted user access and authentication protocols
– Regular backups and secure cloud storage
– Staff training on data protection and compliance procedures
While we take reasonable steps to secure your data, no method of transmission or storage over the Internet is completely secure, and we cannot guarantee absolute security.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside of your place of residence, including regions that may not offer the same level of protection as your local laws. In such cases, we ensure appropriate safeguards are in place, such as:
– Standard Contractual Clauses approved by the European Commission
– Binding corporate rules or certification mechanisms as applicable
These measures ensure that your data is protected in accordance with the GDPR, CCPA, and other relevant laws.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, subject to your rights and applicable legal requirements. Retention periods vary depending on the type of data:
– Usage and Technical Data: Up to 12 months for analytics purposes
– Account and Profile Data: As long as your account remains active, or up to 24 months after inactivity
– Communication Data: Retained for up to 3 years for service quality and dispute resolution
– Transaction Data: Retained for 7 years for legal and financial compliance
– Consent and Preference Data: Retained until consent is withdrawn or updated
9. Cookie Policy
Our website uses cookies and similar technologies to enhance user experience and provide analytics. These include:
– Essential Cookies: Necessary for the operation of the website and access to secure areas.
– Functional Cookies: Enable personalization, such as remembering preferences or login information.
– Analytics Cookies: Help us understand how visitors interact with our website, which allows us to improve performance and user experience.
– Performance Cookies: Monitor system performance and website uptime measurement.
For a comprehensive overview of the cookies we use and their specific functions, please refer to our full Cookie Policy, located in the footer of sprattonfestival.com.
10. Cookie Management and Compliance
We comply with GDPR and CCPA regulations by providing clear options for cookie consent when you access sprattonfestival.com. You can:
– Accept or manage cookie preferences via our cookie consent banner
– Modify your browser settings to block or delete cookies altogether
– Revoke previously given consent at any time by adjusting your user settings or contacting us directly
We ensure that no non-essential cookies are deployed without your prior consent.
11. Children’s Privacy
Our services are not directed at, nor knowingly intended for, children under the age of 13. We do not knowingly collect or process personal information from individuals in this age group. If we become aware that we have inadvertently collected data from a child under 13, we will take immediate steps to delete such information from our records. Parents or legal guardians who believe that we may have collected such data may contact us at [email protected].
12. Policy Updates
We may update this Privacy Policy from time to time as necessary to reflect changes in our practices, legal obligations, or for other operational reasons. Users are encouraged to review this page periodically for changes. Substantive changes will be communicated via appropriate channels, which may include emails or on-site notifications.
13. Contact Us
For questions, concerns, or to exercise your data protection rights, please contact us via:
Email: [email protected]
Website: https://sprattonfestival.com
We are fully committed to protecting your privacy and ensuring our continued compliance with all applicable data protection laws, including GDPR and CCPA. If you believe your rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
Thank you for trusting Spratton Festival with your information.