Privacy Policy for The Late Spring Folk Festival


The event organiser, The Late Spring Folk Festival, has the legal responsibility to tell ticket buyers and event attendees how their personal information will be collected and used. You can find their Privacy Policy below or contact them to request it.

Privacy Policy for The Late Spring Folk Festival

Last updated: 26/11/2025
Organisation name: The Late Spring Folk Festival (the “Festival”, “we”, “us”, “our”)
Location: Dummer Down Farm, Basingstoke, Hampshire, UK

We are committed to protecting your privacy and complying with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

This Privacy Policy explains what personal data we collect, how we use it, how we keep it safe, and your rights.

1. What data we collect

We may collect the following information:

1.1 When you buy a ticket

  • Name
  • Email address
  • Billing address
  • Payment details (handled securely by Stripe, PayPal, or your chosen payment processor — we do not store card details)
  • Ticket type and purchase history
  • Any optional information you provide (e.g., accessibility requirements)

1.2 When you join our mailing list

  • Name (optional)
  • Email address
  • Subscription preferences

1.3 When you volunteer, trade, or perform at the festival

  • Contact details
  • Business information
  • Insurance details (where relevant)
  • Emergency contact details (volunteers only)

1.4 When you visit our website

  • IP address
  • Device and browser information
  • Cookies (see section 9)

1.5 When you contact us

  • Name
  • Email
  • Any information you voluntarily share

2. How we use your data

We only use your information for legitimate purposes, including:

2.1 To run the festival

  • Processing ticket orders
  • Sending essential event information
  • Managing volunteer, trader, and performer applications
  • Health & safety and safeguarding purposes

2.2 For marketing (with consent)

  • Sending newsletters
  • Promoting future festivals or events
  • Sharing important updates

You can unsubscribe at any time.

2.3 To improve our website and event

  • Analysing anonymised data
  • Understanding audience demographics
  • Tracking website performance

2.4 Legal and financial obligations

  • Accounting and tax reporting
  • Insurance and incident reporting
  • Preventing fraud

3. Legal bases for processing

We process personal data under the following lawful bases:

  • Contract — to provide your tickets or fulfil an application
  • Consent — newsletters and marketing
  • Legal obligation — accounting, safety, insurance
  • Legitimate interests — running a safe and efficient festival

4. How we store and protect your data

We take appropriate technical and organisational measures to keep your data secure.

Data may be stored in:

  • TicketTailor (ticket management)
  • Brevo (email newsletters)
  • Stripe / PayPal (payment processing)
  • Google Workspace or equivalent (internal documents)

All third-party providers comply with UK GDPR and operate secure systems.

5. How long we keep your data

We retain personal data only as long as necessary:

  • Ticketing records: 7 years (for accounting)
  • Mailing list data: until you unsubscribe
  • Volunteer/performer/trader records: up to 3 years
  • Incident reports: as required by law

You can ask us to delete your data at any time, unless we are legally required to keep it.

6. Sharing your data

We never sell your data.

We may share your information with:

  • Ticketing and payment providers (to process orders)
  • Email newsletter platforms
  • Emergency services (if required for safety)
  • Insurers (in the event of a claim)
  • Contractors working for the festival (only where essential)

All partners are GDPR-compliant and only receive what they need to perform their duties.

7. International transfers

Some of our service providers (e.g., Mailchimp) store data outside the UK.

Transfers are protected by:

  • UK adequacy regulations, or
  • Standard Contractual Clauses (SCCs)

This ensures your data remains protected.

8. Your rights

Under UK GDPR you have the right to:

  • Request access to your data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Withdraw consent (e.g., unsubscribe from marketing)
  • Request data transfer (data portability)
  • Object to certain uses of your data

To exercise any rights, contact us using the details below.

9. Cookies

Our website may use cookies for:

  • Basic site functionality
  • Analytics (e.g., Google Analytics or similar)
  • Social media integrations

You can control cookies through your browser settings.

10. Children’s data

We do not knowingly collect personal data from children under 16 without parental consent.

11. Contact us

For any privacy-related questions or requests:

📩 Email: info@latespringfolkfestival.co.uk
📬 Address: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website.