Privacy Notice
Clifton Festival of Music Limited (“CIFM”) takes the security of your personal information very seriously. We collect, hold and process your personal information through your use of this website, including any data you may provide through this website or by email, post or telephone when you for example sign up to our newsletter, purchase a ticket, book a workshop or other events through this website or make enquiries about our events.
This website is not intended for children and we do not knowingly collect data relating to children.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal information about you so that you are fully aware of how and why we are using your personal information.
Who we are
The CIFM website, www.cliftonfestival.com, is owned and operated by CIFM
(We, Us, Our). We are a registered charity and registered with the Information Commissioner’s Office as a data controller.
What information do we collect about about you
We may collect, hold and process the following data about you:
Personal information including first name, last name, title, date of birth and gender.
Contact information including billing address, delivery address, email address and telephone numbers.
Financial information including bank account and payment card details.
Transaction information including details about payments to and from you and other details of tickets or other things you have purchased from us.
Technical information including internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Profile information includes purchases or orders made by you, your interests, preferences, feedback and survey responses.
Usage including information about how you use our website and our offers.
Marketing and Communications including your preferences in receiving marketing from us and our third parties and your communication preferences.
How is your personal information collected?
Directly from you
You may give us your identity, contact and financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal information you provide when you
• Buy tickets or book workshops or other events;
• Subscribe to our mailing and emailing lists;
• Request marketing to be sent to you;
• If you correspond with us or make a donation to us;
• Enter a competition, promotion or survey; or
• Give us some feedback.
From third parties or publicly available sources
We may receive personal information about you from various third parties such as Google, facebook, Instagram and Twitter
How we use this information
We may use your information to provide you with information about our events, tickets and bookings which you have requested on the following bases:
Where it is necessary to meet our contractual obligations to you such as providing a ticket for an event which you have booked
Where it is necessary for our legitimate interests.
Where we need to comply with a legal or regulatory obligation.
Where you have given your explicit consent.
We may contact you about our offers or events which may be of interest to you but only if you opted to allow this at the time you provided us with your details or since. If you no longer want us to use your information in this way please update your details by emailing us at info@cliftonfestival.com
We do not use automated means to make decisions
Disclosure of your personal information
We will only share your personal information with third parties where we are legally obliged to or for operational efficiency with a venue where we are holding an event.
We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
Please note that where you have provided information to our box office at Colston Hall, they have their own privacy notice and policy which you can access at https://bristolbeacon.org/policies/privacy-policy/. If you use a payment facility for purchasing tickets e.g. paypal please also refer to the privacy policy for the payment provider.
How we protect your personal information
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those staff, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
The transmission of information over the internet is not completely secure. We will do our best to protect your personal information, but we cannot guarantee the security of the data transmitted to this site and any transmission is at your own risk.
How long do we keep your personal information?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances you can ask us to delete your data.
​
In some circumstances we may anonymise your personal information (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
How do we store your personal information?
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Stay in control of your information
We respect the fact that your personal information is your information, and we’ll make it easy for you to update or change your personal details or marketing permissions. Please help us to help you by letting us know if your contact details change or if you spot any errors in the information we hold about you.
Keeping your details up to date
Please help us to keep your information up to date by emailing us at info@cliftonfestival.com if your personal information changes (i.e. if you move house or change your email address) or if you wish to correct it. We will endeavour to correct,
update or delete information you have provided to us as quickly as possible.
Access to your information
You also have the right to request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. You will not have to pay a fee to access your personal information. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Opting out
You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.
Where you opt out of receiving marketing messages, this will not apply to personal information provided to us as a result of purchasing a ticket or other transactions.
Right to be forgotten
This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully or where we are required to erase your personal information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Changes to this privacy policy
We reserve the right to amend this privacy statement in the future. Any changes we make to this privacy policy will be posted on this page and where appropriate, notified to you by email.
Cookie Policy
A cookie is a small file of letters and numbers that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
We use other cookies to enhance your experience navigating through our website, anonymously collecting information on pages visited which allows us to improve the performance of our website.
We may use the following cookies:
Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to use a shopping cart or make use of e-commerce services.
Analytical/performance cookies They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These may be used to recognise you when you return to our website. This enables us to personalise our content for you and remember your preferences (for example, your choice of language or region).
Third Party Cookies
CIFM use third parties to either provide additional functionality on the websites (such as Facebook Like buttons) or to track users anonymously (such as Google Analytics) and report back to funders and stakeholders the information needed to allow us to continue to provide the website and events programme. Some of these services will set cookies in the process, but may use these cookies for their own purposes. CIFM does not have direct control over these websites or cookies.
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.
Right to lodge a complaint
If you have a concern about the way we are collecting or using your personal information, please raise your concern with us first. Alternatively, you can contact the Information Commissioner’s Office at ico.org.uk/concerns
