Last updated: 21 August 2026 · UK GDPR & Data Protection Act 2018 · ICO
Privacy Policy
The data controller for Derby Deaf Events bookings is Derby Deaf Events.
If you have any questions about how your personal information is used, please contact:
derbydeafevents@mail.com
When you make a booking, we may collect the following information:
Identity and contact information: your full name, email address, and optional telephone number.
Booking information: event tickets, food pre-orders, bingo cards, books, strips, and any notes or other information you provide as part of your booking.
Payment information: payment status and payment provider references. We do not store your full card number. Card payment information is processed by Stripe, PayPal and/or Square.
Technical information: a necessary session cookie used to maintain your booking cart. We may also collect your IP address and browser information when you complete checkout on our public booking website.
Staff and administration information: where applicable, IP addresses and activity logs may be recorded when authorised staff access the administration system.
We use your information to:
Process and manage your booking.
Process payments and payment plans.
Send booking confirmations and tickets.
Send your QR code for event entry.
Prepare food orders and other items included in your booking.
Match your name and booking information when you arrive at the event.
Provide books, strips, bingo cards, or other items purchased with your booking.
Maintain appropriate financial and accounting records.
Protect our website and administration systems against fraud, misuse, and security threats.
Maintain security and administrative audit records.
We do not use your booking information for marketing unless we obtain separate, clear consent from you.
Under the UK GDPR, we rely on the following lawful bases:
We process information where it is necessary to take and fulfil your booking, provide tickets and QR codes, manage payments, and provide the products or services included in your booking.
We may process information for security, fraud prevention, system protection, and administrative audit purposes. We consider your rights and interests when relying on this lawful basis.
We may retain and process information where necessary to comply with legal, tax, accounting, or other applicable obligations.
Child tickets must be booked by a responsible adult.
We may store a child ticket or booking label under the responsible adult's name. We do not require children to provide their own email address or telephone number for booking purposes.
Please do not provide unnecessary personal information about children when making a booking.
We may share the information necessary to provide our booking service with trusted service providers, including:
Payment providers: Stripe, PayPal and/or Square, where required to process payments.
Email and hosting providers: used to send booking confirmations, tickets, and QR codes.
QR code services: where required to generate or display QR codes. The information sent to such a service may include the ticket verification URL.
We only share information that is reasonably necessary for the relevant service.
Some service providers may process information outside the UK or European Economic Area. Where this occurs, appropriate safeguards will be used where required by applicable data protection law, such as UK adequacy regulations or appropriate contractual safeguards.
We use a strictly necessary session cookie called dde_sess to maintain your booking cart and, where applicable, support authorised staff administration access.
This cookie is necessary for the operation of the booking system and is not used for advertising.
We do not use advertising cookies on the booking website.
We keep booking and payment records for as long as reasonably necessary to administer the event and meet our legal, accounting, and financial obligations.
Booking and accounting records will typically be retained for up to 6 years after the relevant event year, unless a longer retention period is required or permitted by law.
Staff activity and security logs are retained for as long as reasonably necessary for security and audit purposes and are then deleted or anonymised periodically where appropriate.
Depending on the circumstances, you may have the right to:
Request access to the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Ask us to erase your personal information where there is no valid reason for us to continue processing it.
Ask us to restrict how we process your information.
Object to certain types of processing.
Request your personal information in a portable format where the right applies.
To exercise your rights, please contact:
derbydeafevents@mail.com
Please include your booking reference where available so that we can identify your booking.
You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.
We take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
Our security measures may include:
HTTPS encryption in production.
Access-controlled administration accounts.
Role-based access controls.
CSRF protection.
Secure password hashing.
Activity and security logging.
No online system can be guaranteed to be completely secure. If you believe you have identified a security or privacy problem, please contact us promptly at:
derbydeafevents@mail.com
Bookings are subject to our Booking Terms & Conditions.
Bookings are non-refundable. If you cannot attend the event on the day, your booking payment will not be refunded and will automatically be donated to charity, subject to the applicable booking terms.
Please contact David Leader before the event if you are unable to attend and provide the reason for your cancellation.
If you have any questions about this Privacy Policy, your personal information, or your booking, please contact:
derbydeafevents@mail.com
Privacy Policy · Booking Terms · Checkout