Accessibility
Tramlines Events Ltd PRIVACY NOTICE
Welcome to Tramlines Events Ltd’s Privacy Notice.
We consider the protection of your privacy to be extremely important. We are bound by and use
your personal data in accordance with the Data Protection Act 2018 and the General Data
Protection Regulation 2016/679 of April 27th 2016 (the “GDPR”).
We want to inform you as much as possible, respect you and give you control over what happens
to your personal data and what you share with us.
Our Privacy Notice is designed to make you aware of what data we are collecting and how we
collect it.
Please take time to read through our Privacy and Cookies Notice
https://tramlines.org.uk/tramlines-events-ltd-cookie-notice/ to understand your rights.
1.1 About us – Our contact details
Name: Tramlines Events Ltd
Address: C/O Superstruct Entertainment Ltd, 364-366 Kensington High Street, London, United
Kingdom, W14 8NS
E-mail: [email protected]
1.2 What personal data do we collect and how?
Personal data shall mean any information relating to an identified or identifiable natural person;
an identifiable natural person is one who can be identified, directly or indirectly, in particular by
reference to an identifier such as a name, an identification number, location data, an online
identifier or one or more factors specific to physical, physiological, genetic, mental, economic,
cultural or social identity.
We currently collect and process the following information:
• Personal identifiers and contact details (for example, name and contact details,
address, age / date of birth)
• Banking details
• Health data (only in limited cases i.e. if this is required under law)
• Cookies
• Your parents’ details if you are under 18
• CCTV images and recordings
• Ejection data (why you have been removed from the show)
1.3 Information you give us
We will collect your personal data directly from you when you:
• subscribe to our newsletters or to mailing lists;
• subscribe to a waiting list for an event;
• participate in a competition, promotion or survey;
• send an email, phone or online request to our customer service team or via our social
media channels;
• visit our websites and apps (see more in our Cookie Notice) .
• Are removed from the festival
• Are asked to have an in-depth search conducted
• Ask for a digital receipt whilst onsite from our bar supplier
1.4 Other information we collect about you and information we receive from third-party
sources
We also receive personal information indirectly, from the following sources:
• From ticketing agencies where you buy the tickets for the events and/or festivals
which we host;
• From affiliated companies within our group (our “Group”) if they reasonably think that
you would be interested in our events and/or festivals;
• From third parties where you have agreed to them sharing your information with us
for marketing purposes; and
• Government, tax or law enforcement agencies.
2.1 What do we use your data for?
➢ Service and Operational Purposes:
• to provide you with your event ticket and/or any other goods, services and
information that you have requested from us;
• to manage your entry to our events, including age and identification verification;
• to process payments; [if relevant]
• to provide you with customer service and support, deal with enquiries or updates to
our events and/or services;
• to improve and update our website and app and to make sure that content from
our website and app is presented to you in the most effective and optimal manner
(please view the specific Cookie Notice for more information).
➢ Third-party promotions:
We will share your personal data with third parties for their own marketing and promotional
purposes only after you have given us your consent. If you opt-in to any third-party
communications, you can opt out at any time by following instructions in the third-party
communications received.
➢ Direct Marketing Purposes (via email/phone/postal/app push)You may receive commercial offers from the organiser(s). If you do not wish to receive
them (anymore), please send an e-mail to the following address: [email protected]
➢ Legal Purposes: We may use your information to enable us to enforce our legal rights,
and/or to protect the rights, property or safety of our employees and/or other third
parties. To ensure your health and safety during the event, we will process any health
and/or mobility information you provide to us to comply with our legal obligations. CCTV
cameras may be present for the purposes of health and safety and crime prevention and
detection.
2.2 Legal grounds for processing your personal information
We will only use your personal data when the law allows us to. Under the DPA 2018 and the
GDPR the lawful bases we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time by contacting us at
(b) We have a contractual obligation (i.e. to provide you with the services you would like to
contract us to supply);
(c) We have a legal obligation (i.e. to detect fraud, or tax purposes);
(e) We need it to perform a public task;
(f) We have a legitimate interest (i.e. for direct marketing or improving our services) and your
interests and fundamental rights do not override those interests.
3. Who will your data be shared with?
We may share this information with:
• Affiliated companies within our Group (in accordance with data sharing agreements in
place with those entities) for service and operational purposes;
• Any other third-party outside our Group that you have given your consent to share your
information with for marketing purposes;
• Selected third parties that we work with, so that we are able to put on the events you
love and choose to attend, such as third party sub-contractors or service providers that
supply services for the event (e.g. venue or security staff or travel providers);
• Selected third parties who provide services to us in connection with making your
booking such as payment and ticketing providers;
• Affiliated companies within our Group for marketing purposes if we reasonably believe
that you would be interested in their event;
• Any other third parties and governmental institutions to comply with our legal obligations
and enforce our legal rights (i.e. tax obligations).
• We will share your data with Superstruct Digital Services B.V., an entity in our group, and with
third party technology providers including Braze and Looker, who each provide services to us in
connection with storing your data and communications in relation to your booking and the
festival. This sharing will take place in accordance with data sharing agreements.Before sharing any of your personal data with external providers, we require our providers to
sign an agreement confirming that your data will be kept secure and, where possible, place
them under the obligation to act in the capacity of data processor. This means that we
determine the purpose for which and the manner in which your data is to be processed and the
data processor is only allowed to handle your data according to the instructions and security
standards that we follow.
4. How do we protect your personal data?
We take all reasonable and appropriate technical and organisational measures to protect the
security of your personal information throughout the course of our business. Technical
safeguards are for example restrictive access, encryption, antivirus software, regular testing and
evaluation.
In case we transfer your information to a country which is outside the UK or the EEA we have
put in place contractual agreements or other measures with any recipients of your information to
ensure your personal data will be equally protected.
5. How long will we keep your personal data for?
Your information is securely stored on cloud-based platforms and services including Microsoft
Azure, AWS and other secure third-party tools used for social media management and partner
collaboration (e.g., Meta Business Suite, LinkedIn, or similar services).
We keep the information we collect only for as long as this is necessary for the purpose we
collected it. We will then dispose of your information by removing all files and backups from
personal computers, Cloud Storage, and external storage devices. Where data is stored on
third-party platforms, we will delete it through the platform’s data removal tools or request
deletion through the provider’s data management process, in accordance with their privacy and
retention policies.
6. What are your rights?
You are not required to pay any charge for exercising your rights. If you make a request,
we have one month to respond to you before you can complain at the relevant
Supervisory Authority.
Under data protection law, you can exercise the following rights:
Your right to withdraw consent- You can withdraw your consent at any given time by
contacting us at [email protected]
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you
think is inaccurate. You also have the right to ask us to complete information you think is
incomplete.Your right to erasure – You have the right to ask us to erase your personal information in
certain circumstances i.e. if your personal data are no longer necessary for the purpose they
were collected for or if you withdraw your consent.
Your right to restriction of processing – You have the right to ask us to restrict the processing
of your personal information in certain circumstances i.e. if you think that the information we
process is inaccurate or unlawful.
Your right to object to processing – You have the right to object to the processing of your
personal information only if we process the relevant information on legitimate or public interest
grounds.
Your right to data portability – You have the right to ask that we transfer the personal
information you directly gave us to another organisation, or to you, if we process the relevant
information on consent or contract grounds.
Your right to lodge a complaint – You have the right to lodge a complaint to the supervisory
authority if our response doesn’t satisfy your request.
[ICO:
Information Commissioner’s Office
Wycliffe house, Water Lane, Wilmslow
Cheshire SK9 5AE
ICO website: https://www.ico.org.uk
If you are based or the issue you would like to complain about took place in the European
Economic Area (EEA), please click here for a list of local data protection authorities in the EEA
countries.]
7. How to contact us
Please contact us at [email protected] if you wish to make a request or complain or have
any questions on how we use your personal data.
8. How do we keep this privacy notice up to date?
We will keep this privacy notice up to date to reflect changes in our products and services and
may unilaterally change this privacy notice. This notice was last updated on 28th May 2025.
Should this notice change in any fundamental way, a notice will be displayed on our website for
30 days. We recommend checking this page on our website from time to time.
