1. Who we are
This website is operated by the HARROW CLUB (“we”, “us”, “our”). We are the data controller responsible for your personal data.
Website: http://nottinghilllitfest.com
Email: info@nottinghilllitfest.com
Registered address: HARROW CLUB, 187 FRESTON ROAD, LONDON, W10 6TH
Phone: 020 8969 2528
Charity number: 1054757
Our website address is: http://nottinghilllitfest.com.
2. The Types of Personal Data We Collect
We may collect and process the following categories of personal data:
a) Festival Attendees
- Name
- Email address
- Billing information
- Ticket purchase details
- Accessibility requirements (where voluntarily provided)
b) Mailing List Subscribers
- Name
- Email address
- Marketing preferences
c) Authors, Speakers, and Contributors
- Contact details
- Biographical information
- Professional information
- Payment details (where applicable)
d) Volunteers and Staff
- Contact details
- Emergency contact information
- Relevant experience
- Availability
e) Website Users
- IP address
- Browser type
- Cookie data
- Analytics information
3. How We Use Your Data (Lawful Basis)
We process your personal data under the following lawful bases:
Contract
To:
- Process ticket purchases
- Manage event attendance
- Administer speaker agreements
- Pay contributors
Legitimate Interests
To:
- Respond to enquiries
- Manage festival operations
- Improve our website and events
- Maintain relationships with authors, venues, and partners
Consent
To:
- Send marketing communications (where you have opted in)
- Use non-essential cookies
You may withdraw consent at any time.
Legal Obligation
To:
- Maintain financial records
- Comply with tax and regulatory requirements
4. Ticketing and Payment Providers
We use a third-party ticketing provider to process event bookings and payments. When you purchase tickets, your personal data is processed by that provider in accordance with their privacy policy.
We ensure that all third-party providers process data in compliance with UK data protection laws.
We do not store full payment card details on our systems.
5. Marketing Communications
If you sign up to receive festival news, we will use your email address to send updates about:
- Upcoming events
- Ticket releases
- Guest announcements
- Festival news
You may unsubscribe at any time by clicking the link in our emails or contacting us directly.
We do not sell or rent your data to third parties for marketing purposes.
6. Cookies
Our website uses cookies to improve user experience.
Essential Cookies
These enable core functionality such as:
- Login sessions
- Comment functionality
- Security features
Analytics Cookies
We may use analytics tools to understand how visitors use our website. These tools may collect anonymised usage data.
You can manage cookie preferences through your browser settings or our cookie banner.
7. Embedded Content
Our website may include embedded content (such as videos, social media feeds, or images). Embedded content behaves as if you visited the originating website directly.
These third-party websites may:
- Collect data about you
- Use cookies
- Track your interaction
We are not responsible for the privacy practices of external websites.
8. How Long We Retain Your Data
We retain personal data only for as long as necessary:
- Ticket purchase records: up to 6 years (for accounting purposes)
- Mailing list data: until you unsubscribe
- Enquiry emails: up to 12 months after resolution
- Speaker/contractor data: up to 6 years after the end of the contractual relationship
Data may be retained longer where required by law.
9. Data Sharing
We may share personal data with:
- Ticketing providers
- Payment processors
- Email marketing platforms
- IT and website hosting providers
- Professional advisers (e.g., accountants, legal advisers)
All third parties are required to process personal data securely and in accordance with applicable data protection laws.
We do not sell personal data.
10. International Transfers
Some of our service providers may process personal data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:
- UK adequacy regulations
- Standard Contractual Clauses
11. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Secure hosting
- Restricted access controls
- Encrypted payment processing
- Password-protected systems
12. Your Data Protection Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data
- Restrict processing
- Object to processing
- Request data portability (where applicable)
To exercise any of these rights, please contact us at info@nottinghilllitfest.com.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
13. Children’s Data
Our events are generally intended for adults unless otherwise specified. We do not knowingly collect personal data from children under 13 without parental consent.
14. Changes to This Policy
We may update this privacy policy from time to time. The latest version will always be available on our website.