Privacy Policy
WHO WE ARE
Here at Boomtown Festivals UK Limited (company number 07871423) we take the protection of your Personal Data very seriously and are committed to maintaining the trust of our customers and visitors to our website in this respect.
We have compiled this Privacy Policy to let you (Data Subject) know when and why we collect your personal information (Personal Data), what we do with it, how we store it and the circumstances in which we may disclose it to others. This would only ever be in the course of our business operations to provide you with the service(s) you have chosen such as tickets, trader applications or working with us for example. We never sell, rent or trade email lists or personal information to other companies for marketing purposes.
We have put in place generally accepted standards of technology and operational security in order to protect your personal data from loss, misuse, or unauthorised alteration or destruction. However, no website can be completely secure and so we would urge you to notify us if you have any concerns. We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.
DATA PROTECTION PRINCIPLES
Anyone processing Personal Data must comply with the eight enforceable principles of good practice. These provide that Personal Data must be:
● processed fairly, lawfully and in a transparent manner (Fairness, Lawfulness and Transparency),
● processed for specified, explicit and legitimate purposes and in an appropriate way (Purpose Limitation),
● adequate, relevant and limited to what is necessary for the stated purpose (Data Minimisation),
● kept accurate and up to date (Accuracy),
● not kept longer than necessary for the stated purpose (Storage Limitation),
● processed in a manner that ensures appropriate security of Personal Data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage, by using appropriate technical or organisational measures (Security, Integrity and Confidentiality),
● not transferred to another country without appropriate safeguards being in place.(Transfer Limitation), and
● processed in line with Data Subjects’ rights (Data Subject’s Rights and Requests). We are responsible for and need to demonstrate compliance with the data protection principles listed above (Accountability).
FAIRNESS AND LAWFULNESS
The purpose of UK GDPR and UK data protection laws is not to prevent the processing of Personal Data, but to ensure that it is done fairly and without adversely affecting the rights of the Data Subject.
UK GDPR allows processing of Personal Data for specific purposes, which are where it is needed:
● for the performance of a contract,
● to comply with a legal obligation,
● in order to pursue our legitimate interests (or those of a third party) and where the interests and fundamental rights of the Data Subject do not override those interests,
● to protect the Data Subject’s vital interests,
● in the public interest, or
● in situations where the Data Subject has given explicit consent.
We, as Data Controller, will only process Personal Data on the basis of one or more of the lawful bases set out above.
We do ask for your personal details in forms when you subscribe for specific services or entering applications electronically. We may share this data with our partners for any necessary processing purposes only in relation to the provision of services we provide to you, such as:
● Tickets - Kaboodle are our ticketing agent and manage the ticket process on our behalf. When you choose your tickets through our website you will be redirected to Kaboodle website to provide your details and complete your purchase. Kaboodle will only use your personal information in relation to the ticketing process, including payment for your booking. They will not use these details to communicate offers, products or other festivals that are not related to Boomtown Festival, unless you have explicitly agreed to this at the time of purchase or you have previously registered with them for other events.
● When booking coach travel, accommodation or any other services through the The Kaboodle process, your personal information will be shared with our partners providing those services (such as National Express, Tangerine Fields, Podpads etc) for the sole purpose of providing the service to you. You will not be contacted by our partners about anything other than your booking, unless you have expressly agreed to this at the time or you have previously registered with them to be kept informed.
● If you sign up to our text messaging service your mobile phone number will be passed to our mobile text messaging service provider only for the purpose of sending you important texts in relation to the festival or the service to which you have subscribed.
● When you purchase merchandise online you will be redirected to our online store provider, Shopify, to complete the payment transaction. Click here for information on how Shopify handles your data.
● Where we are obliged to do so with regard to the Government’s Track and Trace initiative.
We comply with all relevant data protection laws in all our dealings with your personal data and ensure that our Data Processors do the same.
Special Categories of Data will only be processed with explicit consent of the Data Subject, unless the Data Controller can rely on one or more of the other lawful bases set out above. Occasionally there may be instances where we will require you to provide additional personal information, some of which may be sensitive (for instance for accessibility, lost property, feedback/complaints). We will always tell you why we are collecting your information and how we will use it.
We do have photographers and videographers filming at times during the event, which is clearly stated in our Terms and Conditions when you purchase a ticket. This allows us to Commented capture the event for use in future promotion on our website and social media and also to act as a lasting memory of how great each festival is. This is generally crowd shots but may include photos of individuals. If this is the case we will always try to ask your permission beforehand but this may not always be possible.
We reserve the right to access and disclose personal data to comply with all applicable laws and lawful government requests or requests by the police investigating suspected illegal activities, to operate our systems properly or to protect the rights, safety or property of Boomtown, website users or others. This includes any mandatory obligation to provide personal data of attendees to the event , where requested by the Government Track and Trace Initiative as a response to the Covid 19 Pandemic.
TRACKING technologies and personalised experiences
When you use our digital platforms including our websites, mobile sites, and mobile apps we and selected third-party organisations may collect information through technologies such as cookies, pixels, SDKs, and similar tools (for simplicity, we refer to all such technologies as "cookies").
These technologies help us deliver the services you request, improve your experience, and if you give us permission provide personalised content, recommendations, and marketing based on your activity and preferences across our platforms.
What Are Cookies and Similar Technologies?
Cookies are small text files stored on your device when you visit a website or use an app. They help recognise your device and store information about your preferences or past actions. Related technologies, such as pixel tags or SDKs in mobile apps, may also track interactions such as app usage, email opens, or in-app purchases.
Cookies can be categorised as either:
● First-Party Cookies: Set directly by Boomtown.
● Third-Party Cookies: Set by partners we work with, such as analytics, social media, or advertising providers.
Depending on their function, these cookies can also be classified as:
Essential Cookies
These are required to operate our digital platforms. For example, they help keep you logged in or ensure your ticket selections stay in your basket during checkout.
Analytics Cookies
These collect information about how users interact with our site or app such as which pages or features are used most frequently. This helps us understand and improve the performance and usability of our platforms.
Functionality Cookies
These remember your choices (like text size, preferences, or saved settings) and help customise your experience across sessions.
Advertising and Marketing Technologies
These cookies and similar technologies are used to show you content and offers tailored to your interests across web, email, and app experiences. For example, if you browse certain stages, events, or merchandise, we may later show you related content or reminders. We may also use your app interactions (e.g. favourites or visited areas) to customise recommendations or post-festival communications content.
We work with third-party providers like Facebook and Google who help us group users based on activity for remarketing purposes. These technologies do not personally identify you and comply with industry standards for online behavioural advertising. You can opt out of interest based advertising anytime through our Cookie Consent Tool or via your app/device settings.
Managing Your Preferences You can manage your cookie and tracking preferences via:
● Your browser or mobile device settings
● Email settings (e.g. disabling images or pixel tracking in your inbox)
Disabling certain cookies may affect the functionality or personalisation of your experience. For more information, visit the “Manage Cookies” or “Privacy Settings” area in your account or browser.
Facebook Remarketing and Similar Services
We may use remarketing tools to display ads based on your interactions with our site or app. This includes Facebook’s Custom Audiences and Lookalike Audiences, which allow us to advertise to you or similar users. You can opt out of Facebook ad targeting here: https://www.facebook.com/help/568137493302217
Personalised Content and Communications
With your consent, we may use your interaction data across website, app, ticketing and feedback channels to personalise your experience and communications. This may include event highlights, recommendations, promotional offers, and post-event recaps unique to your Boomtown journey. You can update your preferences or withdraw consent at any time.
Email and Newsletter Interactions
If you subscribe to our newsletters, we collect basic personal data and use tracking technologies (like open and click tracking) to understand what content resonates. We use Campaign Monitor to deliver these emails and track aggregate performance to improve our communications. You can unsubscribe at any time by clicking the link in any email.
DATA RETENTION
We only hold your personal data on our systems for as long as is necessary for the relevant purpose. If you want us to remove your details from your subscriptions (providing you do not have any bookings, any other contractual agreements or there is a legal basis for not doing so) then you can email us at info@boomtownfair.co.uk any time to request this. Please put ‘Personal Data’ in the subject heading.
TRANSFER LIMITATION
The UK GDPR restricts Personal Data transfers to countries outside the UK to ensure that the level of data protection afforded to individuals by the UK GDPR is not undermined.
We may only transfer Personal Data outside the UK if one of the following conditions applies:
a) the UK has officially confirmed that the country to which the Personal Data is being transferred has an adequate level of protection for the Data Subject’s rights and freedoms,
b) appropriate safeguards are in place, such as binding corporate rules or standard contractual clauses approved for use in the UK, or an approved code of conduct or a certification mechanism exists,
c) the Data Subject has provided explicit consent to the proposed transfer after being informed of any potential risks, or
d) the transfer is necessary for one of the other reasons set out in the UK GDPR, such as the performance of a contract between us and the Data Subject; reasons of public interest; to establish, exercise or defend legal claims; to protect the vital interests of the Data Subject where the Data Subject is physically or legally incapable of giving consent; or, in some limited cases, for our legitimate interest.
INTERNATIONAL DATA TRANSFERS (UK AND EU)
We sometimes need to share your personal data between the UK and the European Economic Area (EEA), for example when working with partners or services based in these locations. The UK and the EU currently recognise each other’s data protection rules as adequate. This means we can transfer data between the UK and EEA without needing extra permissions.
DATA SUBJECT’S RIGHTS AND REQUESTS
Personal Data must be processed in line with Data Subjects’ rights.
Data Subjects have the following rights, which apply in certain circumstances:
● The right to be informed about processing of Personal Data.
● The right of access to their own Personal Data.
● The right for any inaccuracies to be corrected (rectification).
● The right to have information deleted (erasure).
● The right to restrict the processing of Personal Data.
● The right to portability.
● The right to object to the processing of their Personal Data.
● The right to regulate any automated decision-making and profiling of Personal Data.
● The right to be notified of a Data Breach that is likely to result in high risk to their rights and freedoms.
● The right to make a complaint to the Information Commissioner’s Office or other supervisory authority.
If you have any questions or comments concerning personal information we hold about you, please contact info@boomtownfair.co.uk (please put ‘Personal Data’ in the subject heading’). In order to verify your request we will require 2 forms of identification (e.g driving licence, passport, birth certificate, council tax bill, vehicle registration document).
These forms of ID will be reviewed and held on our systems in line with this privacy notice. We welcome your comments on privacy issues so please do contact us with any queries or suggestions.
You have the right to lodge a complaint in relation to the processing of your personal data with the Information Commissioner’s Office, the public body responsible for information rights. More information can be found on their website at https://ico.org.uk, or you can write to them at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
https://ico.org.uk/concerns
Tel: 0303 123 1113
