Privacy policy

1. Who we are

The data controller is Sauly Events Ltd, which runs TN90s Festival, registered in England & Wales (company number 14390156). Registered office: Office 11, Romney Marsh Business Hub, Mountfield Road, New Romney, Kent, TN28 8LH.

Contact us about your data at events@saulyevents.co.uk or on the event day line, 07391 043108. This policy covers this website and TN90s Festival events, including Family Day.

2. What we collect

When you buy a ticket

Tickets are sold by Skiddle, which has its own privacy policy. Skiddle shares booking details with us, such as your name, email address, ticket type and order reference. We never receive or store your card details.

When you contact us

We keep your emails, messages, notes of calls and any details you give us, so we can reply and keep a record.

When you join our mailing list

Your email address, the list you joined (our main mailing list or the Family Day lineup list), when you signed up and the fact that you agreed to hear from us. When you sign up on this website, these details are emailed straight to our inbox (events@saulyevents.co.uk) and nothing is stored on the website. We may later move our mailing list to a mailing list provider; if we do, we'll update this policy. You can unsubscribe at any time by replying to any of our emails or emailing us.

When you attend

Records of incidents, first aid, refusals of entry and removals; CCTV and body-worn video operated by our security contractor (see section 5); and photos and video taken at the event that may be used in our marketing.

Health and access information

Sometimes we need health information, for example for carer ticket applications, access requirements, medication or medically necessary food brought on site, or first aid. We treat this with extra care.

Children's information

On Family Day we may record limited details about a child, provided by their parent or guardian, if they're involved in a lost child report, first aid or a safeguarding concern.

On this website

If you accept marketing cookies, the Meta Pixel collects information about how you use this site (see section 4).

3. Why we use it, and our lawful bases

• Contract: to admit you, manage your booking, and handle refunds and transfers.
• Legitimate interests: to answer enquiries, keep the event safe and secure, prevent crime, manage refusals of entry, promote our events and use event photos and video in our marketing.
• Legal obligation: to meet our premises licence conditions, our duties to the local authority and police, and health and safety law.
• Vital interests: to give first aid or emergency help, or to protect a child.
• Explicit consent: to assess carer ticket applications and access or medical requirements.
• Consent: for our mailing list, and for marketing and analytics cookies, including the Meta Pixel.

You can withdraw consent at any time, and object where we rely on legitimate interests.

4. Cookies and the Meta Pixel

This site works without marketing cookies. We use the Meta Pixel (by Meta Platforms) to measure our Facebook and Instagram adverts, but only if you say yes. On your first visit we ask once, with a small banner (Accept or No thanks); nothing is loaded until you accept. If you accept, the Pixel records the pages you visit, when you click through to buy tickets on Skiddle, and when you sign up to our mailing list.

We store your choice in your browser (not on our servers) for 12 months. You can change your mind at any time with the same Cookie settings link. If you withdraw consent, the Pixel stops loading.

If you accept, Meta receives information such as your IP address, browser details and the pages you visit. Meta is based in the USA, and these transfers are covered by safeguards approved under UK law. You can also manage this through your browser settings or your Meta advert settings.

This site loads its fonts and images from its own server. These don't set cookies.

The Instagram feed on our homepage and Lineup page is provided by Elfsight. It loads as you scroll down to it and sets no cookies. To show our latest posts, your browser connects to Elfsight's servers, and Elfsight receives your IP address, operating system and browser type. Elfsight keeps this for 7 days to prevent misuse and fix errors, stored encrypted on Google Cloud servers in California, USA. The feed also saves one small note in your browser (eapps-instagram-feed-red-like-time), which only records when its "like" animation last played. You can clear it at any time by clearing your browser's site data.

5. CCTV and body-worn video

Our security contractor, an independent SIA-licensed company, may operate CCTV and body-worn cameras at the event for safety, crime prevention and accurate records of incidents, searches and refusals of entry. Body-worn cameras record only when activated. The security contractor holds this footage and is responsible for it under its own policy.

To ask for footage of yourself, email us as soon as possible with the date, time, location and a description of what you were wearing. We'll pass your request to the contractor. Footage is deleted on a short cycle, so please be quick.

6. Who we share it with

• Skiddle, our ticketing partner;
• our security contractor, and medical and welfare providers working at the event;
• the emergency services, police and Kent County Council, where there's a risk to someone's safety, a crime or a safeguarding concern;
• the venue and local authority, where our licence requires it;
• our IT and email providers, including our website and email hosting, and Elfsight (our Instagram feed); and
• Meta, only if you accept marketing cookies.

We never sell your personal information, or share it with others for their own marketing.

7. How long we keep it

• Booking and attendance records: up to 2 years after the event.
• Emails and other correspondence: up to 2 years after the matter is closed.
• Mailing list: until you unsubscribe.
• Incident, first aid and safeguarding records: as long as needed, including for any claim or investigation.
• Refusal of entry and ban records: up to 3 years, then reviewed.
• Health information for access or carer tickets: deleted shortly after the event, unless there was an incident.
• Financial records: 6 years, as tax law requires.
• CCTV and body-worn video: held by the security contractor under its own policy.

8. Your rights

You have the right to: get a copy of your data; have it corrected; have it deleted where we have no good reason to keep it; restrict how we use it while a concern is looked into; object to how we use it (including for marketing); move it to another provider; and withdraw consent at any time.

Email events@saulyevents.co.uk. We'll reply within one month, free of charge, and may ask you to confirm your identity.

9. Children

Friday to Sunday are strictly 18+. On Family Day, we only collect information about children as described in section 2, and we never send marketing to children.

10. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and we'll highlight any significant changes on this page.

11. Complaints

Please contact us first so we can try to put things right. You can also complain to the Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF · 0303 123 1113 · ico.org.uk.