For details on ticketing terms as well as our conditions of purchase, please see Terms and Conditions.
2. How do we collect your information and what information do we collect?
We collect personal data as defined by the General Data Protection Regulation (GDPR) and Privacy and Electronic Communications Regulations (PECR).
We obtain personal information from you when you enquire about our activities and ask to receive information from VBF, become a VBFriend, donate to us or purchase a ticket to an event.
Such personal information may include, but is not limited to:
- Full name
- Postal address
- Phone number
- Email address
- IP (Internet protocol) or MAC (Media Access Control) address
- Photographic or video footage of audience members
- Limited Payment card details (these are not stored in a usable format)
- Feedback/Comments (unless given in anonymous surveys)
VBF raises funds from individuals, companies and foundations who want to support our mission of enriching lives through classical musical experiences, enabling us to remain financially independent. Any information that we gain from third parties and store under GDPR regulations you will have already given your permission to share or will be publicly available.
3. How do we use this information?
Data will only be processed where authorised by the GDPR. We may use your personal information for the following purposes:
- To provide you with the services, products or information you have requested (for example to send you our regular newsletter or your tickets),
- To administer the VBFriends scheme for members,
- To contact you about your membership or any events that you have attended or your support of VBF,
- To process payment details for donations, Gift Aid and payment,
- To plan future activities and to further our charitable aims,
- To market future events and developments.
We will only contact you if you’ve previously expressed an interest in our work. If you do not or no longer wish to receive marketing material from us, please let us know at any time at the bottom of our communications or using the contact details at the end of this policy.
4. Sharing your information?
We use a variety of services to bring you our musical experience however, we will never share your information with third parties for marketing purposes.
We may need to provide your information to our contractors, suppliers or selected third parties who provide services on our behalf (e.g. our caterers). This would only be to the extent necessary to enable you to receive those services that they are conducting on behalf of VBF.
When you make any online payment to us, we will need to share your information with our payment processor, Stripe. Limited unusable payment data will be stored securely on Stripe to ensure security and privacy. We process your information differently depending on the type of payment:
- For one-off online purchases (e.g. tickets and hampers) we use WooCommerce; your information will be stored on our site and on Stripe.
- For subscription payments for VBFriends as well as one-off donations, we use WP Simple Pay; your information is only stored on Stripe.
To send you our newsletter and marketing information, we use Mailchimp. To manage and track our relationship with you, including communications preferences and donation/transaction history, we use Donorfy. For administrative purposes, we use Google Workspace and our website is built using WordPress.
We may also need to disclose your information if required to do so by law or as expressly permitted under the DPA.
5. How do we protect and store your information?
All of the services detailed above can only accessed by authorised users through highly secured dashboards.
All online payments are processed with Stripe which is a PCI Service Provider Level 1 (the most stringent level of certification available in the payments industry) and makes use of AES-256 level encryption to ensure your payment data remains secure.
We take appropriate measures to ensure that information disclosed to us is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used. However, you should be aware that the use of the Internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the Internet.
If your activity lapses completely we’ll keep your data for a maximum of 6 years, unless we receive a request for it to be removed earlier.
6. Right of Access
You have the right to ask for a copy of the information we hold about you. If you would like a copy of some or all of your personal information, please let us know using the contact details at the end of this policy.
We want to ensure that your personal information is accurate and up to date. If any of the information that you have provided us changes, for example if you change your email address, name or payment details, or if you wish to cancel your registration, please let us know the correct details using the contact details at the end of this policy. You may ask us, or we may ask you, to correct information you or we think is inaccurate, and you may also ask us to remove information which is inaccurate.
‘Cookies’ are small pieces of information stored on the hard drive of a user’s computer which contain information about the user. The information is used to track a visitor’s use of the website and to compile statistical reports on website activity.
VBF may store information about your user preferences (e.g. preferred text size) using cookies (files which are sent by us to your computer or other access device) which we can access when you visit our site in the future. We do this to help enhance and enrich your interaction with our website and to ensure we can deliver our services.
If you want to delete any cookies that are already on your computer, please refer to instructions for your file management software to locate the file or directory that stores cookies.
If you want to prevent our cookies being stored on your computer in future, you may do so by referring to your internet browser’s instructions. You can do this by clicking on the “Help” menu. Please note, however, that if you disable our cookies you may not be able to access certain areas of our site.
8. Links to other websites
9. How to contact us
If for any reason you wish to advise us that you do not want us to share your data, no longer require our services or do not want us to contact you, please send an email to firstname.lastname@example.org or let us know in writing and posting a letter to The Vache Baroque Festival, The Vache, Vache Lane, Chalfont St. Giles, HP8 4SD.
10. Changes to this policy
This website, as well as our systems, are designed to comply with the following national and international legislation with regards to data protection and user privacy:
- UK Data Protection Act 1998 (DPA)
- EU Data Protection Directive 1995 (DPD)
- EU General Data Protection Regulation 2018 (GDPR)