If you buy a ticket, create an account, use one of our websites, apps, social media pages, or contact us directly, we collect and store certain information.

• Ticket Purchases - Tickets purchased through any affiliated site, collect and store data according to their respective policies and procedures. SJM Concerts will manage any data in accordance with UK GDPR and any relevant data sharing agreements that may be in place. In any instance, data is managed with customers best interests in place, to ensure the event experience is delivered
• Event Attendance - We may collect data through surveillance cameras, Wi-Fi registrations, or cashless payment systems.
• Website & App Usage - Data about your device, browser, and interactions with our site.
• Marketing & Preferences - If you opt in, we may use your data to personalise recommendations and offers through our dedicated brands and partner sites.
• Accessibility Requirements - If you voluntarily provide accessibility details, we use this information to enhance your experience.

Additional Details:

• If you create an account or purchase a product from us, we will collect your contact and billing information.
• When you purchase tickets to one of our events, or an event for which we are a co-promoter, we will receive your information from ticket agents used to sell tickets for our promoted and co-promoted events, or the venues we hire to put on the event. This includes your name, contact details and ticket purchase information, such as number of tickets bought and seat number(s).
• If you buy tickets for one of our events, or an event we co-promote, ticket agents selling tickets and venues we hire will share information with us, such as your name, contact details, ticket purchase data, number of tickets bought, and seat number(s).
• If you attend an event, the following information may also be collected:
  • Video surveillance cameras (signs will be displayed to notify you).
  • Free-to-use Wi-Fi (if you register to use it).
  • Cashless payment wristbands for event access and purchases.
• If you use a social media feature on our website or apps and/or post to social media platforms, we may receive information about you from that social media site.
• If you have accessibility requirements, we want to meet them in the most effective way to ensure you have the best event experience possible. This may involve you providing information about your mental or physical health.
• We very rarely collect personal information from children. If we do, we will always seek parental consent and only collect such information for specific purposes.
• In some cases, we use suppliers who collate geodemographic data to personalise our services for you and enhance your experience.

We collect and store certain personal data depending on how you engage with us. This includes:

• Ticket Purchases - Tickets purchased through any affiliated site, collect and store data according to their respective policies and procedures. SJM Concerts will manage any data in accordance with UK GDPR and any relevant data sharing agreements that may be in place. In any instance, data is managed with customers best interests in place, to ensure the event experience is delivered
• Event Attendance - We may collect data through surveillance cameras, Wi-Fi registrations, or cashless payment systems.
• Website & App Usage - Data about your device, browser, and interactions with our site.
• Marketing & Preferences - If you opt in, we may use your data to personalise recommendations and offers through our dedicated brands and partner sites.
• Accessibility Requirements - If you voluntarily provide accessibility details, we use this information to enhance your experience.

All data collected under the Gigs and Tours brand is processed in accordance with this SJM Concerts Privacy Policy.

Collecting and using your information allows us to provide you with the best event experience. It also lets us share exciting news, offers, and upcoming events while complying with our legal obligations.

The Performance of Our Contract

Purchasing a ticket enters you into a contract with us. We then use your information in the following ways:

• Processing the order
• Taking payment
• Providing customer support

Legitimate Business Interests

We may also use your information based on legitimate interests, which include:

• Conducting analysis and market research to improve and customise our products and services to create the best experience.
• Marketing purposes, unless consent is required for such marketing. For details on consent, see the "Where Consent Has Been Given" section below.
• Sending customer service emails, including booking confirmations and event reminders.
• Preventing or detecting unlawful behaviour, protecting or enforcing our legal rights, or as otherwise permitted by law. For example, we are committed to making sure our events are as protected from ticket touting as possible. Your information may be used to prevent ticket touting, misuse of our intellectual property (e.g., our brands), fraud, or other criminal activity.
• Creating a profile for you to deliver the best personalised experience. For example, if you have purchased tickets for a punk rock gig, we want to let you know about other punk rock events we think you will love.
• Ensuring the security of our operations and our Event Partners' operations.

Where Consent Has Been Given

If you have given us clear and explicit consent, we can further develop your event experience with us. We understand how important your privacy is and will always aim to contact you with something valuable. This value may be through:

• Contacting you with news, offers, and information on events, products, and services we think you will love. These may be delivered via email, push notifications, SMS, or social media platforms.
• You can change your marketing preferences with us at any time by clicking unsubscribe on any communication you may receive. Additionally you can contact data@sjmconcerts.com with any queries or fulfilment in relation to this.
• Providing you with location-based services to let you know what is going on around you and/or the event.
• Providing advertising and marketing communications tailored to your experience using our websites and apps (see the relevant site's Cookies Policy for more information if applicable).
• Meeting your accessibility requirements, where explicitly required and consent is provided.

We process your data to:

• Fulfil your ticket purchases (contractual necessity).
• Provide customer service and event access.
• Send you important service emails (e.g., ticket confirmations, event reminders).
• Improve our events and services through analysis and market research.
• Comply with legal and security obligations.
• Forensically examine sales data to ensure promoter conditions have been met

Where you have given explicit consent, we also use your data to:

• Send marketing emails, push notifications, or SMS messages about upcoming events.
• Personalise your experience by recommending similar events.
• Provide targeted advertising and social media promotions.

We may share your information with:

1. Gigs and Tours (SJM Concerts' Ticketing Brand)
   • For ticket fulfilment and event access.
   • For customer support enquiries related to ticket purchases.
   • If marketing data is collected through Gigs and Tours, it is processed in accordance with this Privacy Policy as part of SJM Concerts.
2. Event Partners and/or Co-Promoters (e.g., artists, record label venues, promoters) where necessary for event delivery.
3. Legal & Security Authorities - If required by law, we may share data for fraud prevention or security purposes.

You are always in control of your personal data that we collect and store. To help you understand how you can implement any choice you make, we have detailed those choices and rights below.

Choices:

• To stop receiving our marketing, you can unsubscribe via a link in any of our marketing emails, change your preferences within your account, or contact us, and we will do it for you.
• If cookies are applicable to the site you are using; to opt out of the use of cookies and tracking tools, please refer to the relevant site Cookies Policy.
• To opt out of location tracking and/or push notifications, adjust the settings on your device or keep your location services off. Full instructions are available in your manufacturer’s device guide.
• To stop web push notifications, use your browser settings.

Rights:

• Right of access - you can see all the information we hold on you.
• Right of rectification - you can amend or edit any of the information we hold.
• Right to erasure (the "right to be forgotten") - you can request that we delete all the information we hold on you.
• Right to restrict processing - you can restrict how we use your information.
• Right to data portability - we will provide a copy of the information we hold.
• Right to object to processing - you can object to us processing any of the information we hold.
• Right not to be evaluated on the basis of automated processing - these are processes carried out without human involvement. Typically, we do not carry out such processing.

To exercise these rights, you can initiate a Subject Access Request. To do this, please email data@sjmconcerts.com.

Any changes you make to your data or preferences will be actioned immediately, while deletion and restriction requests will be handled according to circumstances within one month.

Under GDPR, you have the following rights:

• Right of Access - Request a copy of your data.
• Right to Rectification - Correct inaccurate data.
• Right to Erasure - Request deletion of your data.
• Right to Restrict Processing - Limit how your data is used.
• Right to Data Portability - Obtain your data in a structured format.
• Right to Object - Object to certain uses of your data, including marketing.

How to Exercise Your Rights:

• For Gigs and Tours enquiries you can contactGigs and Tours Customer Service via the customer service portal.
• For any other SJM Concerts data protection enquiries please contact data@sjmconcerts.com

We want you to know that your information is always protected.

The security measures we put in place for your personal data depend on the type of information collected. Your information will only be held for as long as required to provide you with the services you request, for the purposes outlined in this policy, and for any legal purposes for which we are obliged to keep the information.

Your information will be securely deleted when it is no longer required for these purposes, in line with our existing company policies.

When transferring or sharing your data, strict rules are in place to ensure it remains protected to a high standard. Where your information is transferred outside the UK, we will use one of the mechanisms listed below:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• UK Adequacy Regulations
• Binding Corporate Rules

If you have any questions regarding this notice, please refer to the contact details at the top.

We implement industry-standard security measures to protect your data and only retain it for as long as necessary. Data transfers outside the UK comply with:

• UK GDPR Standard Contractual Clauses
• UK Adequacy Regulations
• Binding Corporate Rules (BCRs)

In the event of a data breach affecting your personal data, we will notify affected customers in accordance with our legal obligations under UK GDPR. If the breach occurs within Gigs and Tours' systems, SJM Concerts is responsible for issuing notifications as required.

If you have any concerns, you can reach out to our DPO or file a complaint with the UK Information Commissioner's Office (ICO).