Privacy Policy

Hatherleigh Festival is a volunteer-run, non-profit community festival. This policy explains what personal information we collect through our website, why we collect it, and what we do with it. We’ve kept it short and plain.

Who we are

Hatherleigh Festival is an unincorporated voluntary committee based in Hatherleigh, Devon. For the purposes of UK data protection law, the festival committee is the data controller for information collected through hatherleighfestival.co.uk.

If you have any questions about this policy or your data, contact us at .

What we collect and why

Mailing list: If you sign up to our mailing list, we collect your name and email address so we can send you news about the festival. You can unsubscribe at any time using the link in any email we send, or by emailing us.

Event sign-ups and ticket purchases: When you sign up for an event or buy a ticket through our website, we collect your name and email address. For some events, we also collect additional information about attendees (for example, dietary requirements, age categories, or workshop preferences). Where an event is run by another organisation in partnership with the festival, the attendee information for that event is shared with the organisation running it, solely so they can deliver the event you’ve signed up for.

Payments: Payments are processed by Stripe. We do not see or store your card details — Stripe handles these directly under their own privacy policy (stripe.com/privacy).

Website analytics: We use Google Analytics to understand how visitors use our site (for example, which pages are most read). Google Analytics collects information such as your approximate location, device type, and the pages you visit. This is used in aggregate and we do not use it to identify individual visitors. You can opt out via your browser settings or Google’s opt-out tools.

Who sees your information

Your information is only visible to the festival committee and the website administrators. We do not sell, rent, or share your data with third parties for marketing purposes.

The exceptions, all necessary to run the festival, are:

  • The organisation running an event you’ve signed up for, where applicable (as described above).
  • Stripe, which processes your payment.
  • Google Analytics, for aggregate website statistics.
  • Our website and email service providers, who host the systems we use.

How long we keep it

We keep mailing list contacts until you ask us to remove you. Ticket and attendee data is kept for up to two years after the relevant event, for accounting, reconciliation, and reporting purposes (including to grant funders), after which it is deleted.

Your rights

Under UK data protection law you have the right to:

  • ask us what personal data we hold about you
  • ask us to correct anything that’s wrong
  • ask us to delete your data
  • ask us to stop using your data for a particular purpose
  • complain to the Information Commissioner’s Office (ico.org.uk) if you think we’ve handled your data badly

To exercise any of these rights, email .

Cookies

Our website uses cookies for two purposes: to make essential parts of the site work (for example, remembering items in your basket when buying tickets), and for Google Analytics as described above. You can disable cookies in your browser, but some parts of the site may not work properly if you do.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.

Last updated: May 2026