• If you create an account or purchase a product from us, we will collect your contact and billing information.
• If you buy tickets for one of our events, or an event we co-promote, ticket agents selling tickets and venues we hire will share information with us, such as your name, contact details, ticket purchase data, number of tickets bought, and seat number(s).
• If you attend an event, the following information may also be collected:
  • Video surveillance cameras (signs will be displayed to notify you).
  • Free-to-use Wi-Fi (if you register to use it).
  • Cashless payment wristbands for event access and purchases.
• If you use our websites or apps, we collect device and traffic information, such as your IP address, browser, device, and location. We may also collect data on the site you arrived from, what you used our site/app for, and the site you visited afterwards. Full details of our Cookies Policy will be found on the website that directed you to this Privacy Policy.
• If you use a social media feature on our website or apps and/or post to social media platforms, we may receive information about you from that social media site.
• If you have accessibility requirements, we want to meet them in the most effective way to ensure you have the best event experience possible. This may involve you providing information about your mental or physical health.
• We very rarely collect personal information from children. If we do, we will always seek parental consent and only collect such information for specific purposes.
• In some cases, we use suppliers who collate geodemographic data to personalise our services for you and enhance your experience. The ‘Your Rights & Choices’ section below details how you can manage these options.

1. The Performance of Our Contract
   Purchasing a ticket enters you into a contract with us. We then use your information in the following ways:

   • Processing the order
   • Taking payment
   • Providing customer support
   
   

2. Legitimate Business Interests
   We may also use your information based on legitimate interests, which include:

   • Conducting analysis and market research to improve and customise our products and services to create the best experience.
   • Marketing purposes, unless consent is required for such marketing. For details on consent, see the "Where Consent Has Been Given" section below.
   • Sending customer service emails, including booking confirmations and event reminders.
   • Preventing or detecting unlawful behaviour, protecting or enforcing our legal rights, or as otherwise permitted by law. For example, we are committed to making sure our events are as protected from ticket touting as possible. Your information may be used to prevent ticket touting, misuse of our intellectual property (e.g., our brands), fraud, or other criminal activity.
   • Creating a profile for you to deliver the best personalised experience. For example, if you have purchased tickets for a punk rock gig, we want to let you know about other punk rock events we think you will love.
   • Ensuring the security of our operations and our Event Partners’ operations.

• Third-party service providers (data processors) for the IT infrastructure on which our products and systems are built.
• Co-promoters and/or Event partners are involved in creating and delivering your event experience. When this information is shared it is in accordance with their privacy policy.
• Third party services and goods providers to ensure so that they can process and fulfil your orders.
• Government agencies or other authorised bodies where permitted or required by law.
• Any successor to all or part of our business.

You are always in control of your personal data that we collect and store. To help you understand how you can implement any choice you make, we have detailed those choices and rights below.

Choices:

• To stop receiving our marketing, you can unsubscribe via a link in any of our emails, change your preferences within your account, or contact us, and we will do it for you.
• To opt out of the use of cookies and tracking tools, please refer to our Cookies Policy.
• To opt out of location tracking and/or push notifications, adjust the settings on your device or keep your location services off. Full instructions are available in your manufacturer’s device guide.
• To stop web push notifications, use your browser settings.

Rights:

• Right of access – you can see all the information we hold on you.
• Right of rectification – you can amend or edit any of the information we hold.
• Right to erasure (the “right to be forgotten”) – you can request that we delete all the information we hold on you.
• Right to restrict processing – you can restrict how we use your information.
• Right to data portability – we will provide a copy of the information we hold.
• Right to object to processing – you can object to us processing any of the information we hold.
• Right not to be evaluated on the basis of automated processing – these are processes carried out without human involvement. Typically, we do not carry out such processing.

To exercise these rights, you can initiate a Subject Access Request. To do this, please email data@sjmconcerts.com.

Any changes you make to your data or preferences will be actioned immediately, while deletion and restriction requests will be handled according to circumstances within one month.

The security measures we put in place for your personal data depend on the type of information collected. Your information will only be held for as long as required to provide you with the services you request, for the purposes outlined in this policy, and for any legal purposes for which we are obliged to keep the information.

Your information will be securely deleted when it is no longer required for these purposes, in line with our existing company policies.

When transferring or sharing your data, strict rules are in place to ensure it remains protected to a high standard. Where your information is transferred outside the UK, we will use one of the mechanisms listed below:

• Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO)
• UK Adequacy Regulations
• Binding Corporate Rules

If you have any questions regarding this notice, please refer to the contact details at the top.

The SJM Concerts Team.