UK GDPR Privacy Statement

Fire in the Mountain – Privacy Notice

At Fire in the Mountain Festival, we are committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Fire in the Mountain is organised by Fire in the Mountain Festival Limited, registered address at Banc-y-Mor, Llanfihangel-y-Creuddyn, Aberystwyth, SY23 4LG
We act as the “Data Controller” for the personal information you provide.

If you have any questions about this Privacy Notice or how we handle your data, you can contact us at:
Email: info@fireinthemountain.co.uk


2. What Personal Data We Collect

We may collect and process the following types of information:

  • Contact details (name, email address, phone number, postal address)

  • Ticketing information (ticket type, purchase details, booking reference)

  • Payment information (processed securely by our payment provider; we do not store your card details)

  • Marketing preferences

  • Emergency contact details (if required for safety purposes)

  • Photos and video recordings taken at the event

  • Health or accessibility information (only where voluntarily provided)

3. How We Use Your Personal Data

We use your data for the following purposes:

  • To process and manage your ticket purchase

  • To communicate essential event information

  • To ensure safety and security at the festival

  • To manage entry systems and wristbands

  • To comply with legal or regulatory requirements

  • To send marketing communications where you have opted in

  • To improve our services and event operations

4. Legal Basis for Processing

We process your data under one or more of the following legal bases:

  • Contractual necessity – to provide the ticket or services you have purchased

  • Legal obligation – for safety, security, and record-keeping

  • Legitimate interests – event management, security, and marketing to existing customers

  • Consent – for marketing communications or special category data (e.g., accessibility needs)

5. Data Sharing

We may share necessary data with:

  • Ticketing providers

  • Payment processors

  • Security, medical, and event management partners

  • Marketing service providers

  • Local authorities or emergency services (where required)

We do not sell your personal data.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements. Typical retention periods range from 1–3 years, depending on the data type.

7. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent at any time

  • Request data portability

To exercise any of these rights, contact us at info@fireinthemountain.co.uk

8. Security

We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.

9. Photography & Filming

Please be aware that photography and filming may take place during the festival for promotional and documentation purposes. If you have concerns or wish to avoid being captured, please speak to a member of staff or contact us in advance.

10. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be posted on our website with the “last updated” date.

Last updated: 04/11/25