Privacy Policy
Last updated: 23 June 2026
1. Who we are & how to contact us
Crowded Flat (“we”, “us”, “our”) is an event organiser committed to protecting your privacy and ensuring your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or wish to exercise your data protection rights, please contact us at: enquiries@crowded-flat.co.uk
2. What personal data we collect
- Information you provide: name, email address, phone number, ticket purchase information, event registration details, and any information submitted through contact forms, mailing list sign-ups, competitions, or direct communications.
- Automatically collected: IP address, browser type, device information, pages visited, and website usage data collected through cookies and analytics tools.
3. How we use your data
- To manage event registrations, bookings, and ticket purchases.
- To provide customer support and respond to enquiries.
- To send event updates, important event information, and customer communications.
- To send marketing communications and promotional offers where you have opted in.
- To improve our events, services, and website experience.
- To prevent fraud and protect the security of our services.
4. Sharing your data with third parties
We may share your data with trusted third-party providers who help us deliver our services, including ticketing platforms, payment processors, email marketing providers, website hosting companies, and analytics services. We do not sell your personal data. We may also disclose information where required by law or to protect our legal rights.
5. Cookies and tracking
Our website may use cookies and similar technologies to understand visitor behaviour, improve functionality, and enhance user experience. You may choose to accept or reject non-essential cookies when visiting our website. Cookie preferences can also be managed through your browser settings.
6. Data storage & international transfers
Your personal data is stored securely within the UK or European Economic Area (EEA). Where data is transferred outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal protections.
7. Data retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. Booking, registration, and customer communication records may be retained for up to 3 years. Website analytics data is typically retained for up to 12 months.
8. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data.
- Object to or restrict certain processing activities.
- Receive your data in a portable format.
- Withdraw consent at any time where consent is the lawful basis for processing.
To exercise these rights, please contact us at enquiries@crowded-flat.co.uk.
9. Children
Some events organised by Crowded Flat may be suitable for individuals under the age of 18. We are committed to protecting the privacy of all attendees, including minors. If you are under 18, you should seek permission from a parent or guardian before providing us with personal information. We do not knowingly collect personal data from children without appropriate consent. If you believe we have collected such data without consent, please contact us so we can take the necessary steps to remove it.
10. Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services. The most current version will always be published on this page with the updated “Last updated” date.
11. Complaints
If you are unhappy with how we handle your personal data, you can contact us directly or lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk.