Privacy Policy
Last Updated: [Date]
1. Introduction
Welcome to the Solstice Festival website (“we,” “us,” or “our”). We value your privacy and want you to be familiar with how we collect, use, and share information about you. By using our website, you agree to the terms of this Privacy Policy.
2. Who We Are
Name: Solstice Festival (operating in Northamptonshire, UK)
Contact Email: hello@solsiticefestival.co.uk
3. Personal Data We Collect
We collect and process the following types of personal data:
Name
Email Address
Payment Information (processed by Stripe; we do not store or have direct access to your financial data)
Other information: We may also process any information you provide when contacting us or completing forms (e.g., partner applications, charity referrals).
4. How We Collect Your Data
Ticket Purchases: When you purchase tickets, we receive your name and email address. Payment transactions are handled by Stripe, so your payment details are never stored on our servers.
Partnership Applications: If you apply to become a partner, you may provide information such as name, email, and business details.
Charity Referrals: When individuals or entities refer charities to us, we may collect the referring party’s and the charity’s contact information for follow-up.
Contact Forms & Emails: If you fill out a contact form or send us an email, we collect the data you provide and may archive correspondence.
Mailing List: If you sign up for our mailing list or otherwise consent to receive marketing communications, we collect your email address and related preferences.
5. Cookies & Tracking Technologies
We use cookies and similar technologies (e.g., pixels, tags, and scripts) to:
Enable essential site functionality (strictly necessary cookies).
Analyze site usage via Google Analytics to understand website traffic and improve user experience.
Display advertisements (where applicable).
When you first visit our site, you may see a cookie banner or notice. You can manage your cookie preferences via your browser settings or our cookie consent tool (if applicable).
6. How We Use Your Data
We use your personal data for the following purposes:
Providing Services: Processing and confirming your ticket purchases, and managing partner/charity applications.
Communications: Sending event updates, confirmations, or announcements relevant to your engagement with us.
Marketing: Sending newsletters or promotional materials related to future Solstice events or events in Northamptonshire, if you have opted in.
Customer Support: Responding to your inquiries and requests, and archiving correspondence for reference.
Website Improvement & Analytics: Understanding how users interact with our website so we can improve it, using tools like Google Analytics.
Legal & Compliance: Complying with applicable law, preventing fraud, and enforcing our Terms & Conditions.
7. Legal Basis for Processing
Under UK GDPR, our legal bases for collecting and using personal data include:
Contract: We process data as necessary to fulfill our contract with you (e.g., ticket purchases).
Legitimate Interests: For our marketing (where not overridden by your rights), improving our services, and maintaining site security.
Consent: Where required by law (e.g., for certain cookies or marketing communications), we will ask for your consent.
8. Data Sharing & Transfers
We do not sell or rent your personal data. We only share data with:
Service Providers we use to store or process data, such as:
Stripe for payment processing.
eventbookings.com for ticket purchasing/booking.
Airtable for data organization and storage.
Analytics & Advertising Partners, such as Google Analytics, to track and analyze site usage.
Legal or Regulatory Authorities if required by law or in the event of a legal claim.
International Transfers: We primarily store and process data within the UK or European Economic Area (EEA). If data is transferred to or stored in the USA (e.g., via Airtable), we ensure that those providers are GDPR-compliant and have adequate safeguards (such as Standard Contractual Clauses) in place.
9. Data Retention
We keep personal data only as long as necessary for the purposes outlined in this Policy or as required by law. Specifically:
Mailing List Data: We retain your name and email address for as long as you remain subscribed to receive communications about future Solstice events or related events in Northamptonshire. You can unsubscribe at any time.
Ticketing & Transaction Data: Retained for accounting or legal obligations (e.g., tax or regulatory requirements).
Contact Form Inquiries/Emails: Archived for reference and internal recordkeeping purposes.
10. Children’s Privacy
Our website and services are not intended for children. Parents or guardians must purchase tickets on behalf of children and supervise any minor’s attendance at our events. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data without parental consent, please contact us at hello@solsiticefestival.co.uk, and we will delete it.
11. Your Rights
Under the UK GDPR, you have the right to:
Access: Request a copy of the personal data we hold about you.
Rectify: Ask us to correct inaccurate or incomplete data.
Erase: Request deletion of your personal data when it’s no longer needed or if processing is unlawful.
Restrict: Ask us to restrict processing of your data in certain circumstances.
Object: Object to processing based on legitimate interests or direct marketing.
Data Portability: Receive your personal data in a structured, commonly used format.
To exercise any of these rights, email us at hello@solsiticefestival.co.uk. We may need to verify your identity before fulfilling your request. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your rights have been infringed.
12. Security Measures
We implement appropriate technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. This includes:
Secure Socket Layer (SSL/TLS) encryption on our website.
Access Controls: Limiting internal access to personal data on a need-to-know basis.
GDPR-Compliant Providers: Using reputable third parties (e.g., Stripe, Airtable) that adhere to strict security standards.
13. Links to Third-Party Sites
Our website may include links to external sites not operated by us. We have no control over the content and practices of these sites and cannot accept responsibility or liability for their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will post any changes on this page, and the “Last Updated” date at the top indicates when the latest modifications were made.
15. Contact Us
If you have any questions or concerns regarding this Privacy Policy or our data practices, please reach out:
Email: hello@solsiticefestival.co.uk