GDPR (General Data Protection Regulation)
Who we are…
The Lustleigh Show is an unincorporated organisation, based in Lustleigh.
We’re strictly non-profit.
Our website address is: https://thelustleighshow.com, but you probably know that because you’re here.
What personal data we collect and why we collect it…
If we had the time or brainpower to be concocting grand schemes to steal all of your personal data, we would definitely pick something easier than organising a whole show in order to do it.
We only collect personal data where absolutely necessary, and always tell you what we’re going to do with it.
The main reason we collect personal data on this site is that so you can buy a ticket to our lovely show. For that, we need your name, so we know who you are and can help you if you lose your ticket, and your email address so we can send you our much-coveted ticket.
We will also ask if you’d like us to keep you informed about what we do in the future. If you say yes, then we’ll add you to our Mailchimp list and may send you a few emails in the lead up to future shows, if not, then once the show is over, we’ll delete your data.
We never share that data, or sell it, or post it on the noticeboard at the edge of the village.
When you do buy a ticket, it is processed by our ticketing partner Guestlist. They use a few cookies, and process your data, because they need to. If you haven’t had enough of reading privacy policies today, you can also look at theirs here.
Hopefully, when buying a ticket, you do actually pay us, and that bit is done by Stripe. They handle money for loads of people, so are good at keeping things private, and so are fully compliant with GDPR, PECR, and every other four letter initialism you can think of. If you thought the Guestlist privacy policy was good, well just wait until you read theirs.
Traders…
If you apply to be a trader at the Lustleigh Show, you also use our site to complete a form with all your details.
We do this because we need to know all about you. It helps us make our decision on which traders are coming, and helps us undertake due diligence, and to know who to ask when the time comes to pay the bill.
We share public information about your company or organisation (which might be your name if you are a sole trader), and we post that on our website. Let us know if you’d like us not to do this, but it helps people know who is coming, and who to contact.
Personal information contained within your form is never shared – we don’t post your name or email anywhere, unless you ask us to.
The form is managed by powr.io who have spent loads of time and effort making sure they are GDPR compliant. You’re probably really excited to know what they do with your data, and if so, this is where you can find out. I’d love to say they do really exciting Machiavellian things with it, but unfortunately, they just keep it safe, and protect it, and boring things like that.
Comments…
You are able to comment on certain pages and posts on our website, and if you feel the urge to do so, we collect the data shown in the comments form, which we then display on the website. You are not obliged to provide real information, and if you wish to call yourself Tallulla Happenpepper, we won’t judge.
Behind the scenes, we do collect your IP address and browser user agent string to help spam detection, but we can’t and don’t link this to any other data you provide.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: Gravatar Service. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media…
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies…
Cookies are delicious treats, available from bakery related stalls at our show.
But apparently there are also cookies on the internet. We don’t use many – mainly an anonymised Google Analytics so we can see what pages people look at, and so that we can brag in the pub about how many people visit our page.
If you comment on the site, that’ll leave a cookie, so that you can pick up where you left off.
And if you buy a ticket, or apply to be a trader, you’ll get cookies from our provider partners, but only essential ones that you need to complete your transaction. It just wouldn’t work if by the time you gave your card details, it had forgotten who you were.
Embedded content from other websites…
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
Analytics…
Our analytics is anonymous. We don’t know who anyone is, or why they are looking at what they look at.
It is pretty much all so that we can boast that we get more website visitors than the village hall. Even though we don’t know who you are.
For instance, when we see that one person (I’m guessing that is you!) has ever read this page, we’ll always have to wonder who you are, and why you haven’t got better things to do with your time.
Who we share your data with…
We use data you give us to do the thing you asked us to do.
If you want a stall at the show, we use your data to help that happen.
If you want to buy a ticket (and now you’ve sat through reading the privacy policy, I really think you should treat yourself) then we use it to get you that ticket.
We don’t share your data with anyone, apart from where one of our provider partners above helps us provide the service. It is definitely better that way, otherwise we’d have to have a ticket hotline to the phone box in the middle of the village, and a rota of WI volunteers waiting to take your postal order.
We probably would also have to hand over your data if a court ordered us to, but that doesn’t seem very likely.
How long we retain your data…
If you ask us to contact you again to let you know about the show in the future, then we’ll keep you on our MailChimp list. you can leave at any time by unsubscribing in the link in the email, by contacting us, or by changing your email address to hide from us, because then we’ll get upset, throw a hissy fit and delete you (we automatically remove people from our list where our email bounces more than once, including your related details like your name).
If you haven’t, then we’ll delete your data as soon as the show is over for the year.
For traders, we keep your details on file, in case we need to contact you, for instance in the case of a consumer query.
If you leave a comment on the site, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
What rights you have over your data…
If you have given us your data, left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
If you scrawl your personal details on the inside of a portaloo at the show, we can’t promise we’ll notice, and probably can’t provide you a copy.
Where we send your data…
Visitor comments may be checked through an automated spam detection service, held in session and not written to disc.
Additional information:
How we protect your data…
We take protecting your data seriously, and your personal data is always kept protected, on secure systems.
What data breach procedures we have in place…
In the highly unlikely event of a data breach, we will inform you as soon as we know.
What third parties we receive data from…
We don’t buy any data in, although we do occasionally look at social media to see who follows our page.
That’s more people than the village hall, too.
What automated decision making and/or profiling we do with user data…
The aged commodore 64 which runs the internet in Lustleigh isn’t capable of making decisions by itself, and nor is this website.
We don’t profile with data, and we’re not sure what we’d do with your profile if we had one.