Witney Music Festival Privacy Policy
Effective date: 27 May 2025
1. Introduction
Witney Music Festival (“we”, “us”, or “our”) operates the website https://witneymusicfestival.
This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service, purchase tickets, or attend our events. We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Contact Information
Data Controller: Witney Music Festival
Email: info@witneymusicfestival.com
Website: https://witneymusicfestival.
VAT Number: 491 0182 06
3. Definitions
Personal Data: Information about a living individual who can be identified from that data, either alone or combined with other information we hold.
Processing: Any operation performed on personal data, including collection, storage, use, and deletion.
Service: Our website at https://witneymusicfestival.
Cookies: Small data files stored on your device when you visit our website.
4. Information We Collect
4.1 Personal Information You Provide
When you purchase tickets or contact us, we may collect:
- Full name
- Email address
- Phone number
- Postal address
- Date of birth (for age verification)
- Payment information (processed securely by our payment providers)
- Any information you provide in communications with us
4.2 Information Collected Automatically
When you visit our website, we automatically collect:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website
- Device information
- Location data (if you consent)
4.3 Event Information
When you attend our events, we may collect:
- CCTV footage for security purposes
- Photos and videos for promotional use
- Entry and exit times
- Information from security checks
5. How We Use Your Information
We use your personal data for the following purposes:
5.1 Ticket Sales and Event Management
- Processing ticket purchases
- Sending booking confirmations and tickets
- Verifying identity at entry
- Managing event capacity and safety
- Providing customer support
5.2 Communication
- Sending important event updates
- Marketing communications (with your consent)
- Responding to your inquiries
- Notifying you of changes to our services
5.3 Security and Safety
- Preventing fraud and unauthorised access
- Investigating security incidents
- Ensuring event safety and security
- Monitoring for prohibited activities
- Managing bans and exclusions
5.4 Legal Compliance
- Complying with legal obligations
- Cooperating with law enforcement
- Protecting our rights and interests
- Resolving disputes
5.5 Service Improvement
- Analysing website usage
- Improving our services
- Developing new features
- Understanding customer preferences
6. Legal Basis for Processing
Under UK GDPR, we process your personal data based on:
- Contract Performance: Processing necessary to provide tickets and services you’ve purchased
- Legitimate Interests: Security, fraud prevention, marketing, and service improvement
- Legal Compliance: Meeting legal obligations and cooperating with authorities
- Consent: Where you’ve given specific consent (e.g., marketing emails, location data)
- Vital Interests: Protecting health and safety at events
7. Sharing Your Information
We may share your personal data with:
7.1 Service Providers
- Payment processors
- Email service providers
- Website hosting providers
- Marketing platforms
- Security companies
7.2 Legal Requirements
- Law enforcement agencies
- Regulatory authorities
- Courts and legal advisors
- Emergency services
7.3 Event Partners
- Venue operators
- Security personnel
- Medical services
- Other suppliers necessary for event delivery
All third parties are required to protect your data and use it only for specified purposes.
8. Data Retention
We retain your personal data for as long as necessary to:
- Fulfil the purposes outlined in this policy
- Comply with legal obligations
- Resolve disputes and enforce agreements
Typical retention periods:
- Ticket purchase data: 7 years (for financial records)
- Marketing data: Until you unsubscribe or 3 years of inactivity
- CCTV footage: 30 days (unless required for investigations)
- Website analytics: 26 months
9. Your Rights
Under UK GDPR, you have the right to:
9.1 Access
Request a copy of personal data we hold about you
9.2 Rectification
Correct inaccurate or incomplete personal data
9.3 Erasure
Request deletion of your personal data (subject to legal obligations)
9.4 Restriction
Limit how we process your personal data
9.5 Portability
Receive your data in a structured, machine-readable format
9.6 Object
Object to processing based on legitimate interests or direct marketing
9.7 Withdraw Consent
Withdraw consent where processing is based on consent
To exercise these rights, contact us at info@witneymusicfestival.com. We may need to verify your identity before responding.
10. Cookies and Tracking
10.1 Types of Cookies We Use
- Essential Cookies: Required for website functionality
- Analytics Cookies: Help us understand website usage
- Marketing Cookies: Used for advertising and remarketing
- Preference Cookies: Remember your settings
10.2 Third-Party Services
We use:
- Google Analytics: Website traffic analysis
- Google Ads: Advertising and remarketing
- Social Media Platforms: Marketing and customer engagement
10.3 Managing Cookies
You can control cookies through your browser settings. Disabling cookies may affect website functionality.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted data transmission (SSL)
- Secure payment processing
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
However, no internet transmission is completely secure, and we cannot guarantee absolute security.
12. International Transfers
We primarily process data within the UK. If we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Adequacy decisions
- Standard contractual clauses
- Certification schemes
13. Children’s Privacy
Our services are not intended for individuals under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected such data, please contact us immediately.
14. Marketing Communications
14.1 Consent
We only send marketing communications with your consent or where we have a legitimate interest.
14.2 Unsubscribing
You can unsubscribe from marketing emails at any time by:
- Clicking the unsubscribe link in emails
- Contacting us at info@witneymusicfestival.com
- Updating your preferences on our website
15. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated by:
- Email notification
- Prominent website notice
- Updated “effective date” at the top of this policy
16. Complaints
If you have concerns about how we handle your personal data, you can:
- Contact us directly at info@witneymusicfestival.com
- Complain to the Information Commissioner’s Office (ICO):
- Website: https://ico.org.uk
- Phone: 0303 123 1113
17. Contact Us
For any questions about this Privacy Policy or our data practices:
Email: info@witneymusicfestival.com
Website: https://witneymusicfestival.
