Who is collecting the information?
Cotton is an event venue who put on events,
For the purpose of the Data Protection Act 1998, the General Data Protection Regulation and any and all domestic legislation implementing the Regulation into English Law (the “Data Protection Laws”), Cotton, is a Data Controller in relation to your Personal Data in certain circumstances, which are set out below.
You can contact us at email@example.com with any questions you may have about privacy or data protection.
Please note that links from our website may take you to external websites not covered by this policy. We recommend that you check their privacy policies yourself before submitting any personal information. We will not be responsible for the content, function or information collection policies of these external websites.
What information do we collect from you?
We will only require you to provide personal information to us where it is necessary for us to provide you with a service (such as when you sign up to receive email notifications, follow us on social networks, use our website or purchase a ticket). This information may include the following:
- normal identification information, such as your full name, date of birth, age, gender, marital status;
- contact information, such as your postal address, email address and telephone number;
- social media identification information, such your Facebook page address, your Twitter handle, your Instagram handle and profile picture;
- additional information relevant to your use of our site and services, or your event or services, such as your marketing preferences,
- survey responses and feedback
In addition, we also automatically collect certain technical data that is sent to us from the computer, mobile device and/or browser when you access our website or social media sites.
Information we receive from other sources
Sometimes you will have given your consent to other websites, services or third parties to provide information to us.
For example, when you purchase a ticket for one of our events this is transacted through the Fatsoma event marketing platform. Fatsoma will pass back to us the data you provide during the purchase process. Please note that Fatsoma will not store credit or debit card information from payments made through our services other than where it is necessary for us to complete our obligations to you.
It could also include information from third parties that we work with to provide our products and services, such as technical support companies and advertising companies. Whenever we receive information about you from these third parties, we will let you know what information we have received and how and why we intend to use it.
How are we collecting this data?
We are collecting the data that you provide to us directly or via your use of our website. We receive personal data about you from Fatsoma when you purchase a ticket for one of our events via their platform.
We may collect information about your computer, including where available your IP address, operating system, browser type, statistics on your activities on our platform, information on how you came to our platform and data collected through Cookies, Pixel Tags, Web Storage and other similar technologies. This is statistical data about your browsing actions and patterns and does not identify any individual.
For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service. The information we collect includes which pages you view and which links you follow, details of the hardware and software that you are using to access the site and any passwords that you use on our website. This enables us to:
- estimate our audience size and usage pattern.
- store information about your preferences, and so allow us to customise our site according to your individual interests.
- retarget adverts to remind you about our events on Google or Facebook properties.
- speed up your searches.
- recognise you when you return to our site.
Our website is not intended for children and we do not knowingly collect data relating to children.
Why are we collecting this data?
We are collecting this data to keep you informed about events that we put on that may be of interest to you. We will tell you about our events and may, in certain circumstances, co-promote with other promoters of similar events and tell you about their events. We may keep in touch with you via email, push notifications on the Fatsoma app, Facebook updates, Twitter posts, Instagram posts or other communications. You may unsubscribe, unfollow or opt out of these communications at any time by following the links on the relevant communication.
What do we do with your information?
We take data protection law seriously, so below we have set out exactly how and why we use your information, and what our legal basis is to be able to use your information in each way.
We need all the categories of information listed above to allow us to enter into and perform our contract with you (e.g. purchasing a ticket and attending an event) *, to keep you informed about our events or services**, improve our website and services ***. The situations in which we will process your Personal Data are listed below. We have indicated by asterisks the purpose or purposes for which we are processing or will process your personal information.
- To contact you about any events or other offers you have expressed an interest in (**)
- To contact you about any events, offers or services which we feel may be of interest to you, (**)
- To contact you about any changes to events you have bought tickets for (*)
- To contact you with additional information about events you have bought tickets for (*)
- To contact you in the event of an issue with your use of our site (*)
- Dealing with any complaints you may have (*)
- To serve adverts for our events on third party sites (e.g. Google or Facebook ads) using cookies are re-targeting (**)
- To ensure our systems interact successfully with social media platforms including Facebook, Twitter and Instagram (***)
- To conduct data analytics studies to review and better understand use of our website and services (***)
- To review and improve the performance of our website, systems, processes and staff. (***)
- To interact and respond to any communications you send us, including social media posts that you tag us in. (*)
- To let you know about any important changes to our business or policies. (***)
Who might we share your information with?
We share your information with Fatsoma, our event marketing partner, to send push notifications and emails to keep you informed about our events. We may also share your information with other third-party marketing or advertising services to communicate with you, this may include Google and Facebook for the purpose of re-targeting you with adverts for our events.
Where we store your data
Amazon Web Services, Inc.
(Google G-Suite) Google LLC
(MailChimp) The Rocket Science Group, LLC dba MailChimp
Facebook, Inc. (Facebook)
(Google Analytics) Google LLC
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
How long do we keep hold of your information?
We have decided that ten years following the last contact with an individual is usually an appropriate period to hold data covering the legal limitation period (six years) and a moderate margin. As in most cases this is only archived data, not sensitive, not dangerous and will not be used there seems little risk to data subjects.
What rights do you have?
You have the right to unsubscribe
You have the right to unsubscribe at any time. Please follow the links on the emails you receive or unfollow us on the relevant social media channel.
You have the right to be informed
We have a legal obligation to provide you with concise, transparent, intelligible and easily accessible information about your personal information and our use of it. We have written this policy to do just that, but if you have any questions or require more specific information, you can get in touch with us.
You have the right to access your Personal Data
You have the right to ask us to confirm whether or not we hold any of your personal information. If we do, you have the right to have a copy of your information and to be informed of the following:
- why we have been using your information;
- what categories of information we were using;
- who we have shared the information with; and
- how long we envisage holding your information
In order to maintain the security of your information, we will have to verify your identity before we provide you with a copy of the information we hold.
The first copy of your information that you request from us will be provided free of charge, if you require further copies we may charge an administrative fee to cover our costs.
You have the right to correct any inaccurate or incomplete Personal Data
Where you have requested a copy of the information we hold about you, you may notice that there are inaccuracies in the records, or that certain parts are incomplete. If this is the case please contact us to let us know.
You have the right to be forgotten
There may be times where it is no longer necessary for us to hold personal information about you. This could be if:
- the information is no longer needed for the original purpose that we collected it for
- you withdraw your consent for us to use the information (and we have no other legal reason to keep using it)
- you object to us using your information and we have no overriding reason to keep using it
- we have used your information unlawfully
- we are subject to a legal requirement to delete your information
In those situations, you have the right to have your Personal Data deleted. If you believe one of these situations applies to you, please get in touch with us. Where you submit a request for us to delete your Personal Data, we will remove your data from our systems within a reasonable time.
You have the right to have a copy of your data transferred to you or a third party in a compatible format. Also known as Data Portability, you have the right to obtain a copy of your Personal Data for your own purposes. This right allows you to move, copy or transfer your Personal Data more easily from one IT system to another, in a safe and secure way.
This right shall only apply where:
- we are processing your information for the purposes of entering into or performing a contract; or
- you have provided consent for us to process your information.
If you would like us to transfer a copy of your data to you or another organisation in a structured, commonly use and machine-readable format, please contact us. There is no charge for you exercising this right.
You have the right to object to direct marketing
You can tell us at any time that you would prefer that we do not use your information for direct marketing purposes. Each communication you receive from us will contain a link for you to unsubscribe to future communications if you would not like to receive any direct marketing from us.
You have the right to object to us using your information for our own legitimate interests
Sometimes, we use your personal information to achieve goals that will help us as well as you. This includes:
- when we tell you about products or services that are similar to ones that you have already bought;
- when we use you information to help us make our business better; and
- when we contact you to interact, communicate or let you know about changes we are making.
We aim to always ensure that your rights and information are properly protected. If you believe that the way we are using your data is not justified due to its impact on you or your rights, you have the right to object. Unless we have a compelling reason to continue, we must stop using your Personal Data for these purposes.
In order to exercise your right to object to our use of your data for the purposes above, you can click the “unsubscribe” link which is set out in each of our communications to you, which will enable you to unsubscribe to communications from a specific party or in general.
You have the right to restrict how we use your Personal Data
You have the right to ask us to stop using your Personal Data in any way other than simply keeping a copy of it. This right is available where:
- you have informed us that the information we hold about you is inaccurate, and we have not yet been able to verify this;
- you have objected to us using your information for our own legitimate interests and we are in the process of considering your objection;
- we have used your information in an unlawful way, but you do not want us to delete your data; or
- we no longer need to use the information, but you need it for a legal claim.
If you believe any of these situations apply, please contact us at firstname.lastname@example.org.
You have rights related to automated-decision making and profiling
Any automated decision-making or profiling we undertake is solely for the purpose of tailoring the information which we provide to you. We will not use automated decision-making or profiling to make any decisions which will have a legal effect upon you or otherwise significantly affect you, and you have the right not to be subject to such decisions.
Contacting us and making a complaint
In addition, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the statutory body which oversees data protection law in the UK. Please visit the ICO website if you wish to lodge a complaint with the ICO.