Privacy Policy

This Privacy Policy explains how Red Media Live collects, uses, shares and protects your personal data when you visit redmedialive.co.uk, buy tickets, join a waitlist, sign up to hear from us, or attend one of our events. It also sets out your rights under data protection law and how to exercise them.

We are committed to handling your personal data responsibly and transparently, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). Where we process the personal data of individuals in the EU, we also comply with the EU GDPR.

1. Who we are

Red Media Live ("RML", "we", "us", "our") is the data controller responsible for your personal data. This means we decide how and why your personal data is processed.

• Trading name: Red Media Live
• Registered company name: Red Media Live Ltd
• Registered in: England & Wales, company no. 11454648
• Contact email: [email protected]

If you have any questions about this policy or how we handle your data, contact us at [email protected].

2. The personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact data — your name, email address, and (where you provide it) phone number and postal address.
• Ticketing and event data — details of tickets you buy or register for, ticket type (e.g. General Admission or VIP), order references, and attendance information.
• Payment data — payment card and billing details are collected and processed directly by our payment provider (Stripe). We do not store your full card details on our systems.
• Marketing and communications data — your preferences for receiving marketing from us, and your inclusion on our mailing lists (including the general RML list and event-specific waitlists).
• Correspondence data — the content of any messages you send us via the contact form, email, or social media.
• Technical and usage data — IP address, browser type and version, device information, and information about how you use our website, collected via cookies and similar technologies (see Section 6).
• Accessibility and dietary data — if you tell us about accessibility needs or dietary requirements for an event, this may include health-related information, which is a "special category" of data (see below).

3. How we collect your data

• Directly from you — when you buy a ticket, join a waitlist, subscribe to our mailing list, complete a form, or contact us.
• Automatically — through cookies and similar technologies when you use our website.
• From third parties — such as our ticketing platform (Ticket Tailor) and payment provider (Stripe) when you complete a transaction, and from social or advertising platforms if you interact with us there.

4. How and why we use your data

We only use your personal data where the law allows us to. The table below sets out our purposes and the corresponding lawful basis under UK GDPR.

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights, and we will always act in a way you would reasonably expect. Where we rely on consent, you can withdraw it at any time (see Section 11).

5. Marketing communications

We will only send you marketing emails where you have given us consent, for example by ticking a box when you sign up, join a waitlist, or subscribe. We use Mailchimp to manage our mailing lists, which may include a general RML audience and event-specific waitlists.

You can opt out at any time by clicking the "unsubscribe" link in any marketing email, or by emailing [email protected]. Withdrawing consent will not affect service messages we need to send you about a ticket you have already purchased (for example, event details or changes).

6. Cookies

Our website uses cookies and similar technologies. Cookies are small files placed on your device that help the site function, remember your preferences, and help us understand how the site is used. We use:

• Strictly necessary cookies — required for the website and core functions such as ticketing and payments to work. These do not require consent.
• Analytics cookies — we use Google Analytics to understand how visitors find and use our site so we can improve it.
• Advertising cookies — we use the Meta (Facebook and Instagram) Pixel to measure the performance of our advertising and to show you relevant ads.

We only set non-essential cookies (analytics and advertising) where you have given consent through our cookie banner. You can change or withdraw your consent at any time using the "Cookie settings" link in our banner, or by clearing cookies in your browser. You can read more in Google's cookie information and Meta's cookie policy.

7. Who we share your data with

We do not sell your personal data. We share it only with trusted third parties who help us run our business, and only for the purposes described above. These include:

• Ticket Tailor — our ticketing platform, to process ticket sales and manage attendee lists.
• Stripe — our payment provider, to process card payments securely.
• Mailchimp (Intuit) — to manage our mailing lists and send emails.
• Hosting and IT providers — Namesco (names.co.uk), which hosts and serves our website.
• Professional advisers — such as accountants and lawyers, where reasonably necessary.
• Authorities and regulators — where we are required to do so by law.

These providers act as our data processors and are bound by contract to keep your data secure and use it only on our instructions.

8. International data transfers

Some of our providers (for example Stripe and Mailchimp) are based outside the UK, including in the United States. Where your personal data is transferred outside the UK, we make sure it is protected by an appropriate safeguard, such as:

• a UK "adequacy" decision or the UK Extension to the EU–US Data Privacy Framework; or
• the International Data Transfer Agreement or Standard Contractual Clauses approved for use in the UK.

You can ask us for more information about these safeguards by emailing [email protected].

9. How long we keep your data

We keep your personal data only for as long as we need it for the purposes set out in this policy, and to meet our legal obligations. In general:

• Transaction and financial records — retained for 6 years to comply with UK tax and accounting rules.
• Marketing and mailing list data — kept until you unsubscribe or ask us to remove you, and then deleted or anonymised within a reasonable period.
• Waitlist data — kept for the duration of the relevant event cycle and a reasonable period afterwards, then deleted.
• Enquiry and correspondence data — kept for up to 2 years after our last contact, unless needed for a longer period.

When we no longer need your data, we will securely delete or anonymise it.

10. How we keep your data secure

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. Payments are handled by Stripe using industry-standard encryption, and we limit access to your data to those who need it. While no online service can be guaranteed to be completely secure, we take reasonable steps to protect your information and have procedures to deal with any suspected data breach.

11. Your rights

Under data protection law, you have the following rights in relation to your personal data:

• Access — to request a copy of the personal data we hold about you.
• Rectification — to have inaccurate or incomplete data corrected.
• Erasure — to ask us to delete your data in certain circumstances ("right to be forgotten").
• Restriction — to ask us to limit how we use your data in certain circumstances.
• Portability — to receive certain data in a portable format, or have it transferred to another provider.
• Objection — to object to processing based on legitimate interests, and to object to direct marketing at any time.
• Withdraw consent — where we rely on consent, you can withdraw it at any time without affecting processing carried out before withdrawal.
• Automated decision-making — you have rights in relation to automated decisions. We do not make decisions with legal or similarly significant effects based solely on automated processing.

12. How to exercise your rights

To exercise any of these rights, email us at [email protected]. We will respond within one month. There is normally no charge, although we may charge a reasonable fee or refuse a request that is clearly unfounded or excessive. We may need to verify your identity before acting on a request.

13. Complaints

We hope to resolve any concerns you have, so please contact us first. You also have the right to complain to the UK's data protection regulator:

• Information Commissioner's Office (ICO)
• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113
• ico.org.uk

14. Children's privacy

Our website and events are intended for adults. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Third-party links

Our website may contain links to third-party sites (for example our ticketing pages or social media). This policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to read their privacy policies.

16. Changes to this policy

We may update this policy from time to time. When we do, we will change the "last updated" date at the top of this page. Where changes are significant, we will take reasonable steps to notify you.

17. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at [email protected].