Privacy policy

Last updated: 14 September 2026

Who we are

Baccanalia For Culture CIC is responsible for the personal information described in this policy. It covers our website, mailing list, Christmas Town and wider Baccanalia events and activities.

What we collect and why

We collect information you provide directly, through our booking and mailing-list services, and through your use of our website and emails.

Bookings: contact details, ticket information and transaction records, to manage bookings, payments, attendance, refunds and essential event communications. Our lawful basis is performing a contract with you or taking steps at your request before a booking. We also process necessary records to meet legal obligations.
Enquiries: contact details and correspondence, to respond to you. Our lawful basis is our legitimate interest in dealing with enquiries, or taking steps towards an agreement you have requested.
Marketing: email addresses, optional postcodes, preferences and subscription records, to send information about Baccanalia events and activities. Our lawful basis is consent.
Website security: technical information, including IP addresses, device information and security logs, for our legitimate interests in operating and protecting our website.

Where information is required to process a booking, we make this clear. Without it, we may be unable to complete your booking.

Accessibility and PA tickets

We may collect accessibility requirements or limited evidence of disability to arrange support or assess eligibility for a PA ticket.

We process necessary information to manage your booking and rely on your explicit consent to process information revealing health or disability. Please provide only what is needed for your request.

You can withdraw consent by contacting us. We will explain any effect on your request and discuss available alternatives.

Emails, tracking and advertising

We use Mailchimp to manage our mailing list and send updates about Christmas Town and wider Baccanalia events. We may select relevant updates using your postcode or preferences.

Mailchimp records email opens and link clicks associated with subscribers. We use recorded non-opens to select recipients for automated follow-up emails. This means you may receive a reminder if an earlier email was recorded as unopened.

Our website uses Meta pixels for advertising and measurement. These can share page visits, online identifiers, IP addresses and browser or device information with Meta. We may use this information to reach local or broader audiences and measure advertising results.

We rely on consent for this tracking. Consent to receive marketing emails is separate from consent to website advertising tracking.

You can unsubscribe from marketing using the link in our emails or by contacting us. You can also contact us to withdraw email-tracking consent. Unsubscribing does not stop essential communications about an existing booking.

Who receives information

We use Eventotron for ticketing, Stripe for payments, Mailchimp for email marketing, Meta for advertising, and providers supporting website hosting, maintenance and security. They receive information necessary for the relevant services.

We may also disclose information to professional advisers or authorities where necessary to meet legal obligations or establish, exercise or defend legal claims.

Where we provide box office services for another organiser, we identify this during booking and share the information necessary to manage the booking and deliver their event. The booking information explains the organiser’s responsibilities and applicable privacy notice.

Some providers also use information for their own purposes, including payment security and legal compliance, as explained in their privacy notices.

International processing

Our providers may process information outside the UK, including in the United States. Stripe also identifies processing in India. Eventotron states that its data storage is in the UK and EU.

Where overseas transfers require protection, applicable arrangements include UK adequacy regulations or approved contractual safeguards. Mailchimp and Stripe describe their arrangements in their data processing terms and privacy notice.

How long we keep information

We retain information for as long as needed for its purpose:

Booking and enquiry information while needed to deliver services, resolve outstanding matters or address legal claims.
Disability evidence while needed to assess eligibility and resolve any related review.
Mailing-list information while we have valid consent and a continuing reason to retain it. After withdrawal, we may retain a minimal record to honour your preference.
Relevant accounting records for six years from the end of the financial year they relate to, or longer where legally required.
Technical and tracking information for the period needed for security or the stated measurement and marketing purposes.

We delete or anonymise information when it is no longer needed. Providers may separately retain records to meet their own legal obligations.

Your rights

Depending on the circumstances, you can request access to, correction or deletion of your information, restriction of its use, or a portable copy. You can object to processing based on legitimate interests and to direct marketing, including associated profiling.

Where we rely on consent, you can withdraw it at any time. This does not affect processing carried out lawfully before withdrawal.

To exercise your rights, contact us using the details above. You can also complain to the Information Commissioner’s Office through its complaints service.