PRIVACY POLICY

Last updated: Thursday, 26th March 2026

This Privacy Policy explains how Ranch Jam Festival and Aurora Music Corporation Ltd collect, use, store, and protect your personal data when you visit our websites, purchase tickets, or interact with us. This policy applies to all official Ranch Jam Festival platforms and websites where the same data processing activities apply.

1. Who We Are (Data Controller)

Event Brand: Ranch Jam Festival
Event Dates: 14–16 August 2026
Company Name:
Aurora Music Corporation Ltd is the data controller responsible for your personal data.
Aurora Music Corporation Ltd is registered with the Information Commissioner’s Office (ICO).
For operational purposes, Aurora Music Corporation Ltd uses 25Eight Events Ltd, a subsidiary operating under the same ICO registration, to manage certain communications and data protection enquiries on its behalf.
We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Ticketing & Event Registration Data

Tickets for Ranch Jam Festival are sold via our official ticketing partners: OnTick and Skiddle. When you purchase tickets, we may receive:

Full name
Email address
Phone number
Postal address
Date of birth or age verification (where required)

This data is used to process ticket purchases, manage entry, and provide customer support.

b) Marketing Data (Consent Only)

We only collect and use marketing data where you have given explicit consent: Name and email address, Marketing preferences, Consent and subscription history.

Important:
Your data is used for marketing purposes only where you have opted in. You can withdraw your consent at any time.

c) Technical & Usage Data

When you visit our website, we may collect: IP address, browser type and device information, pages visited and interaction data. This is collected via cookies and similar technologies. Please refer to our Cookie Policy for further details.

3. How We Collect Your Data

We collect personal data: When you purchase tickets via OnTick or Skiddle, and when you opt in to marketing communications. When you contact us via forms or email. Through cookies and analytics tools when browsing our website.

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent (Art. 6(1)(a)) – for marketing communications (only where you have opted in)
Contract (Art. 6(1)(b)) – for ticket purchases and event delivery
Legal obligation (Art. 6(1)(c)) – for compliance with legal requirements
Legitimate interests (Art. 6(1)(f)) – for event management, security, and website analytics

You may withdraw your consent at any time.

5. How We Use Your Data

We use your personal data to:

• Process ticket purchases and manage event entry
• Send booking confirmations and event updates
• Provide customer support
• Send marketing communications (only with your consent)
• Improve our website and services
• Meet legal and regulatory obligations

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with trusted, GDPR-compliant third parties where necessary:

OnTick– ticketing and event access
Skiddle – ticketing and event management
Email marketing providers – for sending communications (only where consent is given)
Website hosting providers – for site operation
Analytics providers – for website performance
Regulators or law enforcement - where required by law

All third parties process data under appropriate data processing agreements.

International Transfers

If your data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

• Adequacy decisions
• Standard Contractual Clauses (SCCs)

Where third parties act as independent data controllers (such as ticketing providers), their own privacy policies will apply.

7. Data Retention

We retain personal data only as long as necessary:

Marketing data: Until you withdraw consent or unsubscribe
Ticketing and financial data: Up to 7 years (legal requirements)
Customer enquiries: Up to 12 months
Technical data: Typically 30–90 days

8. CCTV and Event Photography

CCTV Monitoring

For the safety and security of attendees, staff, and the event site, CCTV systems will be in operation throughout the Ranch Jam Festival.

CCTV is provided and managed by:

Century Fire & Security Ltd

CCTV footage may capture images of attendees and is used for:

• Crime prevention and detection
• Public safety and incident management
• Protection of staff, attendees, and property

The lawful basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR).

CCTV footage may be shared with law enforcement or relevant authorities where necessary.
Footage is retained only for as long as reasonably required for security purposes.

Event Photography and Videography

Official photographers and videographers will be present at the Ranch Jam Festival.
Photography and video footage may be captured in crowds and public areas and may be used by Aurora Music Corporation Ltd for:

• Marketing and promotional purposes
• Social media content
• Website and advertising materials

This may include images where individuals are identifiable.
The lawful basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR).

Where appropriate, signage will be displayed at the event to inform attendees of photography and filming.

Consent and Acknowledgement

By purchasing a ticket and attending Ranch Jam Festival, you acknowledge and agree that:

• You may be recorded on CCTV for safety and security purposes
• You may appear in photographs or video recordings taken at the event
• These images and recordings may be used for promotional and marketing purposes without compensation

If you have concerns about being photographed or filmed, please contact us in advance or speak to event staff on the day, and we will make reasonable efforts to accommodate your request where possible.

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request the deletion of your data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the ICO

To exercise your rights, please contact us using the details below.

10. Data Security

We implement appropriate technical and organisational measures, including:

• SSL encryption
• Secure systems and access controls
• Regular security monitoring
• Data minimisation practices

11. Contact Details

Data Protection Contact:
dataprotection@25eightevents.com

General Enquiries:
info@25eightevents.com

Supervisory Authority:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Telephone: 0303 123 1113

These contact channels are managed by 25Eight Events Ltd, acting on behalf of Aurora Music Corporation Ltd.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the updated date shown above.