Privacy policy

The type of personal information we collect:

When you visit our site, we automatically collect certain information about your device, such as cookies that are stored on your device.  As you browse the site, we collect information about how you have interacted with the site.

When you place an order, we collect information such as name, delivery address and payment information.  

Lastly, when you visit our website, we ask if you would like to join our email marketing list. To receive our marketing emails, you must provide your name and email address.  And then, with your permission, we send you emails with news and information about our products and services. 

What we do with the information we collect:

We use the cookie information to improve our site by understanding how our customers browse and interact with it. For more information, see our cookie policy.

We use order and address information to fulfil your order and provide you with invoices/confirmation of your order.  

We use your email address to send you marketing emails about our products and services, with your permission.

Do we share your personal information?

We only share your information with 3rd parties to help provide you with our products and services: 

We use Squarespace to power our website and online shop.

We use Mailchimp for our email marketing. 

We use TicketTailor for selling tickets.

We use Google Docs to track and fulfil any orders.

Our lawful bases for processing your information:

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are most commonly the following circumstances: 

(a) Your consent. You can remove your consent at any time. You can do this by contacting heartoftherosefestival@gmail.com . b) We have a contractual obligation. (c) We have a legal obligation. (f) We have a legitimate interest.

How we store your personal information 

Your information is securely stored by Squarespace, Google and Mailchimp. For more information see their privacy policies: 

https://www.squarespace.com/privacy

https://policies.google.com/privacy?hl=en-GB

https://www.tickettailor.com/privacy-policy/

https://mailchimp.com/legal/privacy/

We keep email addresses and order information for as long as it is necessary.  When we no longer need this, we will delete it or anonymise it.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information. 

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at heartoftherosefestival@gmail.com  if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at:  heartoftherosefestival@gmail.com

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:     Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk  

Privacy Policy last amended August 2021