[BRACKETED] placeholder filled in, before we go public. Delete this banner once it’s signed off.Last updated: [DATE]
Carnival of the Commons runs on trust. You bring the music and the good faith; in return we look after the handful of details you hand us, and we never do anything sneaky with them. Here is the plain version of what we collect, why, and how to tell us to forget you.
Who we are
This website is run by [CHARITY / LEGAL ENTITY NAME] (“we”, “us”), the organisation behind Carnival of the Commons. We are the “data controller” for the personal information described here. [We are registered with the Information Commissioner’s Office (ICO) under reference [ICO REGISTRATION NUMBER].] Talk to us about your data any time at [CONTACT EMAIL][ or by post at [POSTAL ADDRESS]].
What we collect
Only what you choose to give us through the forms on this site:
- Newsletter sign-up – your name and email address.
- Event waitlist – your email address.
- Volunteering & getting involved – your name, email address and any message you send.
- Contact enquiries – your name, email address and message.
- Musician sign-in – your name, email address and whatever you choose to tell us about your music.
We do not take payment details on this site. Tickets are sold through Ticket Tailor on their own platform, under their privacy policy.
Why we use it, and our lawful basis
- To send you our newsletter – with your consent, which you can withdraw whenever you like.
- To reply to you, arrange volunteering, and organise musicians – on the basis of our legitimate interests in running the charity and its events (and, where relevant, to take steps you have asked for).
- To manage event waitlists – with your consent / on the basis of our legitimate interests.
Who we share it with
We never sell your personal data. We share it only with the services that help us run the site, and only on our instructions:
- Fluent Forms – form submissions are stored in this website’s own database, hosted by [123reg].
- MailerLite – sends our newsletter (servers in the EU).
- Ticket Tailor – handles ticketing; if you buy a ticket you do so on their platform under their privacy policy.
- [Cloudflare] – content delivery and privacy-friendly, cookieless analytics.
Sending data outside the UK
Where a provider handles data outside the UK, we rely on appropriate safeguards (such as UK/EU adequacy or standard contractual clauses). MailerLite keeps data within the EU.
Cookies and analytics
We keep cookies to a minimum and use cookieless analytics – no advertising or tracking cookies. See our Cookie Policy for the detail.
How long we keep it
Newsletter details: until you unsubscribe. Form enquiries: [RETENTION PERIOD, e.g. 24 months], then deleted – unless the law says we must keep them longer.
Your rights
You can ask to see, correct, delete, restrict or object to our use of your data, ask for a copy to take elsewhere, and withdraw consent at any time. Just email [CONTACT EMAIL]. You also have the right to complain to the ICO at ico.org.uk.
Keeping it safe
We take reasonable technical and organisational steps to protect your information.
Children
This site is not aimed at children, and we do not knowingly collect data from children under 13.
Changes
We may update this policy now and then. The date at the top shows when it last changed.