Privacy Policy
WHO WE ARE
Here at Boomtown Festivals UK Limited (company number 07871423) we take the protection of your Personal Data very seriously and are committed to maintaining the trust of our customers and visitors to our website in this respect.
We have compiled this Privacy Policy to let you (Data Subject) know when and why we collect your personal information (Personal Data), what we do with it, how we store it and the circumstances in which we may disclose it to others. This would only ever be in the course of our business operations to provide you with the service(s) you have chosen such as tickets, trader applications or working with us for example. We never sell, rent or trade email lists or personal information to other companies for marketing purposes.
We have put in place generally accepted standards of technology and operational security in order to protect your personal data from loss, misuse, or unauthorised alteration or destruction. However, no website can be completely secure and so we would urge you to notify us if you have any concerns. We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.
DATA PROTECTION PRINCIPLES
Anyone processing Personal Data must comply with the eight enforceable principles of good practice. These provide that Personal Data must be:
- processed fairly, lawfully and in a transparent manner (Fairness, Lawfulness and Transparency),
- processed for specified, explicit and legitimate purposes and in an appropriate way (Purpose Limitation),
- adequate, relevant and limited to what is necessary for the stated purpose (Data Minimisation),
- kept accurate and up to date (Accuracy),
- not kept longer than necessary for the stated purpose (Storage
Limitation), - processed in a manner that ensures appropriate security of Personal Data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage, by using appropriate technical or organisational measures
(Security, Integrity and Confidentiality), - not transferred to another country without appropriate safeguards being in place.(Transfer Limitation), and
- processed in line with Data Subjects’ rights (Data Subject’s
Rights and Requests).
We are responsible for and need to demonstrate compliance with the data protection principles listed above (Accountability).
FAIRNESS AND LAWFULNESS
The purpose of UK GDPR and UK data protection laws is not to prevent the processing of Personal Data, but to ensure that it is done fairly and without adversely affecting the rights of the Data Subject.
UK GDPR allows processing of Personal Data for specific purposes, which are where it is needed:
- for the performance of a contract,
- to comply with a legal obligation,
- in order to pursue our legitimate interests (or those of a third
party) and where the interests and fundamental rights of the
Data Subject do not override those interests, - to protect the Data Subject’s vital interests,
- in the public interest, or
- in situations where the Data Subject has given explicit consent.
We, as Data Controller, will only process Personal Data on the basis of one or more of the lawful bases set out above.
We do ask for your personal details in forms when you subscribe for specific services or entering applications electronically. We may share this data with our partners for any necessary processing purposes only in relation to the provision of services we provide to you, such as:
- Tickets - Kaboodle are our ticketing agent and manage the ticket process on our behalf. When you choose your tickets through our website you will be redirected to Kaboodle website to provide your details and complete your purchase. Kaboodle will only use your personal information in relation to the ticketing process, including payment for your booking. They will not use these details to communicate offers, products or other festivals that are not related to Boomtown Festival, unless you have explicitly agreed to this at the time of purchase or you have previously registered with them for other events.
- When booking coach travel, accommodation or any other services through the The Kaboodle process, your personal information will be shared with our partners providing those services (such as National Express, Tangerine Fields, Podpads etc) for the sole purpose of providing the service to you. You will not be contacted by our partners about anything other than your booking, unless you have expressly agreed to this at the time or you have previously registered with them to be kept informed.
- If you sign up to our text messaging service your mobile phone number will be passed to our mobile text messaging service provider only for the purpose of sending you important texts in relation to the festival or the service to which you have subscribed.
- When you purchase merchandise online you will be redirected to our online store provider, Shopify, to complete the payment transaction. Click here for information on how Shopify handles your data.
- Where we are obliged to do so with regard to the Government’s Track and Trace initiative.
We comply with all relevant data protection laws in all our dealings with your personal data and ensure that our Data Processors do the same.
Special Categories of Data will only be processed with explicit consent of the Data Subject, unless the Data Controller can rely on one or more of the other lawful bases set out above.
Occasionally there may be instances where we will require you to provide additional personal information, some of which may be sensitive (for instance for accessibility, lost property, feedback/complaints). We will always tell you why we are collecting your information and how we will use it.
We do have photographers and videographers filming at times during the event, which is clearly stated in our Terms and Conditions when you purchase a ticket. This allows us to capture the event for use in future promotion on our website and social media and also to act as a lasting memory of how great each festival is. This is generally crowd shots but may include photos of individuals. If this is the case we will always try to ask your permission beforehand but this may not always be possible.
We reserve the right to access and disclose personal data to comply with all applicable laws and lawful government requests or requests by the police investigating suspected illegal activities, to operate our systems properly or to protect the rights, safety or property of Boomtown, website users or others. This includes any mandatory obligation to provide personal data of attendees to the event , where requested by the Government Track and Trace Initiative as a response to the Covid 19 Pandemic.
TRACKING COOKIES DATA
When you use our sites (including mobile sites or mobile apps), we and third party organisations may collect information by using ‘cookies’ and other technologies (for simplicity we refer to all such technologies as ‘cookies’).
When visiting our sites, creating an account or when you buy tickets, you agree to us and third party organisations using cookies in line with your cookie settings. You can use the Cookie Consent Tool to change your preferences at any time.
WHAT ARE COOKIES?
A cookie is a small text file—containing small amounts of information— that passes to your computer through your web browser so that the website can remember who you are.
The length of time a cookie will stay on your computer depends on whether it is a persistent or session cookie. Session cookies are temporary cookies that stay on your computer until you leave the website. Persistent cookies stay on your computer after you have finished browsing until they expire or are deleted.
A pixel tag or sometimes called a web beacon is an invisible image with a line of code which is placed within an email message or on a web page. Cookies can either be categorised into First or Third Party cookies. “First Party Cookies” are cookies that Boomtown places on your device whereas “Third Party Cookies” are cookies that another party controls but are placed on your device when you visit our site. For example, we use Google Analytics cookies to gather information about the user experience on our website.
WHAT ARE COOKIES USED FOR?
Cookies can be put into one of the following categories: strictly necessary; analytics, functionality and advertising cookies. The table provides more information about each category.
ESSENTIAL COOKIES
These cookies are essential to make our website work. They enable you to move around the site and use its features. Necessary services, like the ability to access secure areas cannot be provided without these cookies.
For example, keeping you logged in during your visit. Without these cookies the site might forget you and you’d have to constantly log back in. When you buy tickets, cookies make sure they’re still in your shopping basket when you get to the checkout.
ANALYTICS COOKIES
These cookies collect information about how people use our site, such as which pages are most frequently visited, and how people are moving from one link to another. Information collected on our open site is grouped together with information from other people’s use of our site on an aggregated basis. If you have logged into the client portal we may associate information from the cookies with your account. Overall, these cookies provide us with analytical information about how our site is performing and how we can improve it.
FUNCTIONALITY COOKIES
These cookies allow us to remember choices you make and tailor our site to provide enhanced features and content to you. For example, these cookies can be used to remember your user name (but not your password), they can also be used to remember changes you’ve made to text size, font and other parts of pages that you can customize.
ADVERTISING AND MARKETING COOKIES
These cookies are used to deliver marketing and advertising messages that are tailored to you based on what you have browsed, purchased or shown interest in. We use these cookies in conjunction with third party organisations who provide tools that enable us to group you with other users to target these messages and adverts. For example, when you browse our websites or apps, add tickets to your basket or make a purchase you may subsequently see adverts or messages for these or similar events. This could include an advert on Facebook, search results in Google or an email from us reminding you still have tickets in your basket. All third parties we work with conform to online behavioural advertising (OBA) industry standards to ensure you are not personally identified and you have the options to opt out in the future.
HOW TO MANAGE COOKIES FROM THIS SITE
In addition to our Cookie Consent Tool, most browsers will enable you to manage your cookies preferences e.g. have the browser notify you when you receive a new cookie or use it to disable cookies altogether. If you do decide to disable or delete these altogether some sites won’t work as well as they rely on cookies to provide you with the service that you have requested. If you do decide to disable or delete them altogether some sites won’t work as well as they rely on cookies to provide you with the service you have requested (see Strictly Necessary Cookies, above)
If you do not wish to allow us and third party organisations to use cookies within our emails, such as pixel tags, the best way to do this is not to enable images when you view our emails. In other words, only view the plain-text of the email. Some web browsers and email clients have settings or extensions available to disable / block such cookies such as Gmail.
CHANGING BROWSER SETTINGS
You can change your browser settings to limit which cookies can be set. These settings are usually found in the ‘options’ or ‘preferences’ menu for your browser.
FACEBOOK REMARKETING
Third parties, including Facebook, may use cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet, and use that information to provide measurement services and target ads. With Facebook remarketing you may see our ads on Facebook after you have visited our site. For this to happen Facebook uses a Custom Audience Pixel, which is activated once a visitor lands on a webpage and a unique cookie is placed in their web browser. Facebook lookalike audience targeting allows us to show ads on Facebook to people who are similar to those who have already visited or made a purchase from our website. To opt out of Facebook’s collection and use information for ad targeting visit: https://www.facebook.com/help/568137493302217
NEWSLETTER AND MAILING LISTS
As part of the registration process for our e-newsletters we collect personal information. We use that information to tell you our latest news, information on ticket and event updates, videos and photos. We also use it to update you on information that you have asked us to tell you about. We don't rent or trade email lists with other organisations and businesses.
We use a third-party email newsletter provider, Campaign Monitor , to deliver our newsletters. We gather statistics around email opening and click throughs using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see here. You can unsubscribe to general mailings at any time of the day or night by clicking the link at the bottom of the email.
DATA RETENTION
We only hold your personal data on our systems for as long as is necessary for the relevant purpose. If you want us to remove your details from your subscriptions (providing you do not have any bookings, any other contractual agreements or there is a legal basis for not doing so) then you can email us at info@boomtownfair.co.uk any time to request this. Please put ‘Personal Data’ in the subject heading.
TRANSFER LIMITATION
The UK GDPR restricts Personal Data transfers to countries outside the UK to ensure that the level of data protection afforded to individuals by the UK GDPR is not undermined.
We may only transfer Personal Data outside the UK if one of the following conditions applies:
a) the UK has officially confirmed that the country to which the Personal Data is being transferred has an adequate level of protection for the Data Subject's rights and freedoms,
b) appropriate safeguards are in place, such as binding corporate rules or standard contractual clauses approved for use in the UK, or an approved code of conduct or a certification mechanism exists,
c) the Data Subject has provided explicit consent to the proposed transfer after being informed of any potential risks, or
d) the transfer is necessary for one of the other reasons set out in the UK GDPR, such as the performance of a contract between us and the Data Subject; reasons of public interest; to establish, exercise or defend legal claims; to protect the vital interests of the Data Subject where the Data Subject is physically or legally incapable of giving consent; or, in some limited cases, for our legitimate interest.
DATA SUBJECT’S RIGHTS AND REQUESTS
Personal Data must be processed in line with Data Subjects’ rights.
Data Subjects have the following rights, which apply in certain circumstances:
- The right to be informed about processing of Personal Data.
- The right of access to their own Personal Data.
- The right for any inaccuracies to be corrected (rectification).
- The right to have information deleted (erasure).
- The right to restrict the processing of Personal Data.
- The right to portability.
- The right to object to the processing of their Personal Data.
- The right to regulate any automated decision-making and profiling of Personal Data.
- The right to be notified of a Data Breach that is likely to result in high risk to their rights and freedoms.
- The right to make a complaint to the Information Commissioner’s Office or other supervisory authority.
If you have any questions or comments concerning personal information we hold about you, please contact info@boomtownfair.co.uk (please put ‘Personal Data’ in the subject heading’). In order to verify your request we will require 2 forms of identification (e.g driving licence, passport, birth certificate, council tax bill, vehicle registration document). These forms of ID will be reviewed and held on our systems in line with this privacy notice.
We welcome your comments on privacy issues so please do contact us with any queries or suggestions.
You have the right to lodge a complaint in relation to the processing of your personal data with the Information Commissioner’s Office, the public body responsible for information rights. More information can be found on their website at https://ico.org.uk, or you can write to them at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
