top of page

Privacy Policy

Guernsey Together Festival Privacy Policy

Last updated: 11 June 2026

This Privacy Policy explains how Guernsey Together Festival collects, uses, stores and protects personal information.

This policy applies when you visit our website, buy or register for tickets, contact us, sign up to receive email or SMS marketing, attend our event, complete forms, take part in competitions or promotions, or otherwise interact with us.

For the purposes of this policy, “we”, “us” and “our” means Guernsey Together Festival, operated by Oakwood-Lock Limited.

1. Who we are

Legal entity: Oakwood-Lock Limited
Trading / event name: Guernsey Together Festival
Address: Bad Habits, 54 Lower Pollet, St Peter Port, Guernsey, GY1 1WF
Email: info@guernseytogether.co.uk
Website: www.guernseytogether.co.uk

Oakwood-Lock Limited is the controller of the personal information we collect and use for Guernsey Together Festival, unless another organisation is clearly identified as the controller for its own services.

2. What this policy covers

This policy covers personal information we process in connection with:

  • Ticket sales and event registration

  • Event entry, wristband collection and access control

  • Under-18 and responsible adult processes

  • Customer enquiries and complaints

  • Website visits, contact forms and online forms

  • Email marketing

  • SMS marketing

  • Competitions, offers and promotions

  • Event operations, safety, security and welfare

  • Event photography, filming and media

  • Supplier, sponsor, trader and contractor communications

This policy should be read alongside our ticket terms, event entry conditions, cookie information, Mailchimp SMS terms, Eventbrite terms, and any other privacy notices shown to you when your information is collected.

3. The platforms we use

We use trusted third-party platforms to help operate the festival.

These include:

  • Eventbrite for ticketing, ticket registration, ticket transfers, attendee information and event communications linked to ticket orders

  • Wix for our website, website forms, website hosting and website-related tools

  • Mailchimp / Intuit for email marketing, SMS marketing, marketing audience management, unsubscribe records and campaign reporting

These platforms may process your personal information on our behalf, and they may also process certain information for their own legal, security, fraud prevention, analytics, platform improvement or compliance purposes in line with their own privacy notices.

When you use Eventbrite, Wix or Mailchimp features, their own terms and privacy information may also apply.

4. Personal information we collect

The personal information we collect may include:

  • Your name

  • Email address

  • Mobile phone number

  • Postal address, where provided

  • Ticket order details

  • Ticket type, ticket quantity and booking reference

  • Payment status and transaction information

  • Event attendance status

  • Wristband collection status

  • Under-18 ticket information

  • Responsible adult details

  • Accessibility information where you choose to provide it

  • Enquiry, complaint or customer service information

  • Marketing preferences

  • Email and SMS consent records

  • Unsubscribe and opt-out records

  • Competition or promotion entries

  • Website form submissions

  • Technical website data, such as device, browser, IP address, cookie information and usage data

  • Event images, video or audio where photography or filming takes place

  • Safety, welfare, incident or security information where necessary

We aim to collect only the information we reasonably need for the purposes explained in this policy.

5. How we collect personal information

We may collect personal information when you:

  • Buy or register for tickets through Eventbrite

  • Transfer or receive a ticket

  • Complete an Eventbrite order form

  • Complete a form on our website

  • Contact us by email, phone, website form, social media or other channels

  • Sign up to receive email marketing

  • Sign up to receive SMS marketing

  • Enter a competition, promotion or giveaway

  • Attend the festival

  • Collect or use wristbands

  • Provide under-18 or responsible adult information

  • Request accessibility support

  • Interact with our website

  • Interact with our email or SMS campaigns

  • Are photographed or filmed at the event

  • Provide information to our team, security, stewards, medical providers or event staff

We may also receive information from ticketing providers, contractors, security teams, medical providers, payment processors, website providers, marketing platforms, event partners, sponsors, authorities or other organisations where this is necessary and lawful.

6. Why we use your personal information

We may use your personal information to:

  • Process ticket purchases and registrations

  • Manage ticket orders and attendee lists

  • Send ticket confirmations and event information

  • Manage wristband collection and entry

  • Verify ticket validity

  • Manage under-18 entry and responsible adult requirements

  • Respond to questions, requests and complaints

  • Provide customer service

  • Send important event updates

  • Send operational or safety information

  • Manage event security, safety and welfare

  • Prevent fraud, misuse, duplicate tickets or unauthorised access

  • Provide accessibility support where requested

  • Run competitions, offers and promotions

  • Send email marketing where permitted

  • Send SMS marketing where permitted

  • Manage unsubscribe and opt-out requests

  • Analyse email and SMS campaign performance

  • Improve our website, communications and event planning

  • Meet legal, licensing, regulatory, accounting and insurance obligations

  • Protect our rights, property, staff, contractors, attendees and the public

7. Lawful bases for using personal information

We only use personal information where we have a lawful basis to do so.

Depending on the circumstances, we may rely on:

Contract

We use information where necessary to provide tickets, manage bookings, deliver event access, respond to ticket-related enquiries and provide the services you have requested.

Consent

We rely on consent for certain activities, including:

  • Email marketing where consent is required

  • SMS marketing

  • Some cookies and tracking technologies

  • Certain competitions, promotions or optional communications

  • Any optional information you choose to provide, where consent is the appropriate basis

You can withdraw consent at any time.

Legitimate interests

We may use information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

This may include:

  • Responding to enquiries

  • Running and improving the festival

  • Managing event operations

  • Preventing fraud or misuse

  • Sending limited event-related service communications

  • Keeping records of customer service matters

  • Managing supplier and contractor relationships

  • Protecting the safety and security of the event

Legal obligation

We may use information where necessary to comply with legal, licensing, accounting, tax, health and safety, safeguarding, insurance, regulatory or law enforcement obligations.

Vital interests

In an emergency, we may use personal information where necessary to protect someone’s life, health or welfare.

8. Eventbrite ticketing

We use Eventbrite to sell tickets, manage ticket orders, process registrations and administer attendee information.

When you buy or register for tickets through Eventbrite, Eventbrite may collect personal information such as your name, email address, ticket details, payment-related information, booking reference, and any custom order form answers.

We may access and use Eventbrite attendee information to:

  • Manage ticket orders

  • Verify tickets

  • Send event information

  • Manage attendee lists

  • Handle customer enquiries

  • Manage under-18 and responsible adult processes

  • Deal with refunds, transfers or ticket issues

  • Operate entry and wristband collection

  • Keep appropriate event records

Eventbrite may also process your information in accordance with its own privacy policy and terms. You should read Eventbrite’s privacy information when using its platform.

We will not use Eventbrite ticketing information for email or SMS marketing unless we have the appropriate consent or another lawful basis to do so.

9. Wix website

Our website is built and hosted using Wix.

When you visit or use our website, Wix may process information such as technical data, form submissions, contact details, device information, usage data, IP address and cookie information.

We may use Wix to:

  • Host and manage our website

  • Display event information

  • Receive contact form enquiries

  • Collect sign-ups or form submissions

  • Improve website performance

  • Manage website security

  • Understand how visitors use our website

Wix may process certain personal information on our behalf as our website provider. Wix may also process certain information for its own purposes in accordance with its own privacy policy and terms.

10. Cookies and website tracking

Our website may use cookies and similar technologies.

Cookies may be used to:

  • Make the website work properly

  • Keep the website secure

  • Remember your preferences

  • Understand website usage

  • Improve website performance

  • Support marketing, analytics or advertising where enabled

Some cookies are essential. Others may be optional and may require your consent.

Where required, we will use a cookie banner or cookie settings tool to explain cookie choices and allow you to manage consent.

You can also control cookies through your browser settings.

11. Email marketing

We may use Mailchimp / Intuit to send email marketing.

Email marketing may include:

  • Ticket announcements

  • Line-up news

  • Event updates

  • Offers and promotions

  • Countdown reminders

  • Important festival information

  • Future Guernsey Together Festival announcements

  • Related event news

We will only send email marketing where we have permission or where we are otherwise allowed to do so under applicable law.

Buying a ticket does not automatically mean you have agreed to receive email marketing, unless the sign-up process clearly gives you that choice or the law allows us to contact you about similar products or services and you have been given a clear opportunity to opt out.

Every marketing email will include an unsubscribe option.

If you unsubscribe from email marketing, we may keep a limited suppression record to make sure we do not send further marketing emails to that address unless you sign up again.

12. SMS marketing

We may use Mailchimp / Intuit to send SMS marketing.

We use personal information, including your mobile phone number and SMS consent status, to send you text messages about Guernsey Together Festival where you have specifically agreed to receive SMS marketing from us.

SMS marketing may include:

  • Ticket alerts

  • Event reminders

  • Offers and promotions

  • Final ticket availability messages

  • Festival updates

  • Important countdown messages

  • Future festival announcements

We will only send SMS marketing where you have given specific SMS marketing consent.

Email marketing consent is not the same as SMS marketing consent. Providing your mobile number for ticketing, customer service, responsible adult checks, event access or safety purposes does not automatically mean you have agreed to receive SMS marketing.

When you sign up for SMS marketing, we may record:

  • Your mobile number

  • Your SMS consent status

  • The date and time of consent

  • The method or form used to collect consent

  • Your unsubscribe or opt-out status

  • SMS messages sent to you

  • SMS campaign engagement where available

You can opt out of SMS marketing at any time.

Where available, you may be able to reply with an opt-out keyword such as STOP. In some countries, networks or sender formats, replies may not be supported. Where replies are not supported, we will include an unsubscribe link in our SMS messages.

Message and data rates may apply depending on your mobile provider.

If you opt out of SMS marketing, we may keep a limited suppression record to make sure we do not send further SMS marketing unless you sign up again.

13. Operational and service messages

Sometimes we may need to send you non-marketing messages about the event.

These may include:

  • Ticket confirmation information

  • Event access instructions

  • Wristband collection information

  • Responsible adult or under-18 entry information

  • Safety notices

  • Event changes

  • Weather or site updates

  • Important customer service replies

  • Refund or postponement information

  • Legal or administrative notices

These messages are not marketing. They may still be sent even if you have unsubscribed from marketing, where they are necessary for your booking, safety, legal compliance or event administration.

14. Under-18 and responsible adult information

Where under-18 ticket holders attend the festival, we may collect and use information relating to the under-18 ticket holder and their responsible adult.

This may include:

  • Names

  • Ticket references

  • Contact details

  • Responsible adult details

  • Relationship or nomination information

  • Entry and wristband status

  • Information needed to manage safeguarding, welfare or entry checks

We use this information to operate our under-18 entry policy, support safeguarding, manage entry, prevent misuse of under-18 tickets, and comply with event safety and licensing requirements.

We will not use under-18 information for marketing unless we have an appropriate lawful basis and it is lawful and appropriate to do so.

15. Accessibility information

If you contact us about accessibility support, we may collect information about your access needs.

We use this information to consider and provide reasonable support, manage access arrangements, respond to your request and operate the event safely.

Please only provide the information that is necessary for us to understand and respond to your request.

16. Competitions, promotions and giveaways

If you enter a competition, promotion or giveaway, we may collect information such as your name, contact details, entry details and eligibility information.

We use this information to administer the competition, contact winners, deliver prizes, prevent fraud, comply with legal obligations and promote the results where appropriate.

Marketing consent for competitions will be requested separately where required.

17. Photography, filming and media

Photography, video recording and audio recording may take place at the festival.

Images and recordings may be used for:

  • Event coverage

  • Promotional material

  • Social media

  • Website content

  • Press and media coverage

  • Sponsor and partner promotion

  • Archive purposes

  • Safety, security and incident review

Where we focus on specific individuals for promotional purposes, we will seek consent where appropriate.

General crowd photography and event footage may be captured as part of the event environment.

If you have a specific concern about being photographed or filmed, please speak to the event team where reasonably possible.

18. CCTV, security and incident information

The event site or surrounding areas may use CCTV, body-worn cameras, incident logs or other security measures.

We may process security or incident information to:

  • Protect attendees, staff, contractors and the public

  • Prevent and detect crime

  • Manage safety and welfare

  • Investigate incidents

  • Support insurance or legal claims

  • Comply with licensing, security or legal obligations

  • Share information with police, emergency services or authorities where appropriate

Security and incident information may include sensitive information in some cases. We will only use it where lawful and necessary.

19. Who we share personal information with

We do not sell personal information.

We may share personal information with trusted third parties where necessary, including:

  • Eventbrite

  • Wix

  • Mailchimp / Intuit

  • Payment processors

  • Ticket scanning and entry providers

  • Website and form providers

  • Email and SMS service providers

  • Security teams

  • Stewarding teams

  • Medical providers

  • Event contractors

  • Traders, suppliers and production teams where necessary

  • Sponsors or partners where you have consented or where sharing is lawful and clearly explained

  • Professional advisers

  • Insurers

  • Police, emergency services, regulators, licensing authorities or government bodies where required or appropriate

  • Legal, tax, accounting or compliance advisers

We only share information where there is a lawful reason to do so.

20. International transfers

Some of our service providers, including Eventbrite, Wix and Mailchimp / Intuit, may process personal information outside Guernsey.

This may include processing in the United Kingdom, European Economic Area, United States or other countries.

Where personal information is transferred outside Guernsey, we will take appropriate steps designed to protect it in line with applicable data protection law. This may include contractual safeguards, transfer assessments, approved transfer mechanisms, or relying on service providers’ own lawful transfer arrangements.

21. How long we keep personal information

We keep personal information only for as long as reasonably necessary.

Retention periods may vary depending on the type of information and why it is held.

In general:

  • Ticketing records may be kept for event administration, accounting, dispute, legal and audit purposes

  • Customer service records may be kept while needed to manage enquiries or complaints

  • Marketing records are kept while you remain subscribed

  • Unsubscribe and suppression records may be kept to respect opt-outs

  • SMS and email consent records may be kept to evidence consent

  • Competition records may be kept for the duration of the competition and any required follow-up period

  • Incident, safety and security records may be kept for legal, insurance, safeguarding or risk management purposes

  • Website analytics data may be kept for reporting and improvement purposes

We may keep certain records for longer where necessary for legal, regulatory, insurance, accounting, dispute resolution or compliance reasons.

22. How we protect personal information

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

This includes using reputable service providers, access controls, account security measures, staff awareness, data minimisation and appropriate administrative procedures.

No system can be guaranteed to be completely secure, but we aim to protect personal information appropriately and responsibly.

23. Your rights

Under applicable Guernsey data protection law, you may have rights in relation to your personal information.

These may include the right to:

  • Be informed about how your information is used

  • Access the personal information we hold about you

  • Ask us to correct inaccurate or incomplete information

  • Ask us to delete your information in certain circumstances

  • Ask us to restrict how we use your information in certain circumstances

  • Object to direct marketing

  • Object to certain processing based on legitimate interests

  • Withdraw consent at any time where we rely on consent

  • Ask for certain information to be transferred to another provider, where applicable

  • Not be subject to certain decisions based solely on automated processing

  • Complain to the relevant data protection authority

To exercise your rights, contact us at:

info@guernseytogether.co.uk

We may need to verify your identity before responding to certain requests.

We will respond to valid requests within the timeframe required by applicable law.

24. Marketing preferences and opt-outs

You can opt out of marketing at any time.

For email marketing, use the unsubscribe link in the email.

For SMS marketing, use the unsubscribe link in the SMS message or reply with an opt-out keyword such as STOP where that option is available.

You can also contact us at:

info@guernseytogether.co.uk

If you opt out of marketing, we may still send essential non-marketing messages where necessary for your ticket, booking, safety, legal compliance or event administration.

25. Children and young people

Our website, marketing and ticketing processes are not aimed at collecting marketing consent from children.

We do not knowingly collect email or SMS marketing consent from children under the age of 16.

Where under-18 ticket holders attend the event, we may process information relating to them where necessary for ticketing, safeguarding, responsible adult checks, entry management, welfare, safety and legal compliance.

Where possible, communications relating to under-18 ticket holders will be directed to the adult ticket buyer, parent, guardian or responsible adult.

26. Alcohol-related marketing

Guernsey Together Festival may include licensed bars or alcohol-related event information.

We will not intentionally send alcohol-focused email or SMS marketing to anyone who should not receive it.

Where required by law, platform rules or mobile carrier rules, we may use age-gating, audience controls or other checks before sending alcohol-related marketing content.

27. Links to other websites

Our website, emails, SMS messages and social media may contain links to other websites, including Eventbrite, sponsors, partners, traders or social media platforms.

This policy does not cover third-party websites or platforms. You should read their privacy information before providing personal information to them.

28. Automated decision-making and profiling

We do not currently make decisions with legal or similarly significant effects based solely on automated processing.

We may use basic marketing segmentation, such as grouping contacts by ticket status, marketing preference, attendance history or campaign engagement, to make communications more relevant.

You can object to direct marketing at any time.

29. Complaints

If you are unhappy with how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to contact the Office of the Data Protection Authority in Guernsey.

Office of the Data Protection Authority
Block A, Lefebvre Court
Lefebvre Street
St Peter Port
Guernsey
GY1 2JP

Telephone: +44 (0)1481 742074
Email: info@odpa.gg
Website: www.odpa.gg

30. Changes to this policy

We may update this Privacy Policy from time to time.

The latest version will be published on our website and will show the date it was last updated.

31. Contact us

For questions about this Privacy Policy or how we use personal information, please contact:

Oakwood-Lock Limited
Trading as: Guernsey Together Festival
Bad Habits
54 Lower Pollet
St Peter Port
Guernsey
GY1 1WF

Email: info@guernseytogether.co.uk
Website: www.guernseytogether.co.uk

bottom of page