Privacy Policy

1. Introduction

Bromyard Speed Festival (“we”, “us”, “our”) is committed to protecting your personal data and handling it responsibly.

This policy explains how we collect, use, and protect your data when you use our website or interact with us.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Bromyard Speed Festival is the data controller responsible for your personal data.

For any queries, please contact:
[email protected]

3. Data We Collect

We collect only the data necessary to operate the event and provide our services.

This may include:

  • Name
  • Email address
  • Telephone number
  • Order and ticket details
  • Vehicle information (where relevant)

Important design decision:
We deliberately do not collect billing addresses during checkout. This is a conscious security decision to avoid storing information that could indicate the location of valuable or unique vehicles associated with the event.

4. How We Collect Data

We collect data when you:

  • Purchase tickets or register via our website (powered by WooCommerce)
  • Submit forms (for example vendor, vehicle, or contact enquiries)
  • Contact us directly

5. How We Use Your Data

We use your data for the following purposes:

  • To process orders and registrations (lawful basis: contract)
  • To manage event participation (lawful basis: contract)
  • To contact you about your order or event changes (lawful basis: contract and legitimate interests)
  • To respond to enquiries (lawful basis: legitimate interests)
  • To maintain security and prevent misuse (lawful basis: legitimate interests)

We do not use your data for intrusive or unrelated purposes.

6. Payments (WooCommerce & SumUp)

Our website uses WooCommerce to manage orders and SumUp as our payment processor.

  • Payment details (such as card information) are processed securely by SumUp
  • We do not store full payment card details on our systems
  • Only essential transaction data (such as order reference, amount, and status) is stored within WooCommerce

SumUp acts as an independent data controller for payment processing. Their privacy policy applies to how they handle payment data.

7. Communications

We may contact you using the details you provide if:

  • There is an issue with your order
  • The event changes (for example timing, cancellation, or safety updates)
  • We need additional information regarding your booking

We intentionally keep communications relevant and minimal. We do not run bulk marketing campaigns or share your data for marketing purposes.

8. Analytics (Google Analytics)

We use Google Analytics to understand how visitors use our website and to improve performance.

Google Analytics may collect:

  • IP address (anonymised where configured)
  • Device and browser information
  • Pages visited and interactions

This data is aggregated and does not directly identify you.

Lawful basis: legitimate interests (improving website performance and usability)

You can control or disable cookies via your browser settings.

9. Data Sharing

We do not sell your data.

We only share data where necessary with trusted providers, including:

  • WooCommerce (website and order management)
  • SumUp (payment processing)
  • Hosting and infrastructure providers
  • Analytics providers (Google)

These providers are given only the data required to perform their role.

10. Data Retention

We retain data only as long as necessary to:

  • Deliver the event and associated services
  • Meet legal, tax, or accounting obligations
  • Resolve disputes

Where possible, data is deleted or anonymised after the event lifecycle.

11. Data Security

We apply appropriate technical and organisational controls, including:

  • Data minimisation (collecting only what is necessary)
  • Avoidance of sensitive location data (such as billing addresses)
  • Use of reputable, secure platforms (WooCommerce, SumUp)
  • Restricted access to administrative systems

12. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (where applicable)
  • Restrict or object to processing
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact:
[email protected]

13. Cookies

We use cookies where necessary to:

  • Enable core site functionality (for example checkout via WooCommerce)
  • Support analytics (Google Analytics)

Where required, you will be given the option to manage cookie preferences.

14. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

15. Updates to This Policy

We may update this policy from time to time. Updates will be published on this page.

16. Contact

For any privacy-related queries:
[email protected]

Share