Privacy Policy
Centre for Events and Festivals Community Interest Company (CEF)
Last updated: April 2025
At the Centre for Events and Festivals Community Interest Company (“CEF”, “we”, “our”, or “us”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you subscribe to receive updates, news, event invitations, and sector-specific information and opportunities from us.
1. Who We Are
The Centre for Events and Festivals Community Interest Company is a UK-registered community interest company supporting the events and festivals sector. Our mission includes sharing knowledge, resources, and opportunities across the industry.
2. What Data We Collect
When you subscribe or engage with us, we collect the following personal data:
Full Name
Email Address
Job Role
Organisation
Country of Residence
Sector of Work
3. Purpose and Legal Basis for Processing
We collect and process this data under the lawful basis of Consent (UK GDPR Article 6(1)(a)).
Your data is collected to:
Send relevant news and updates
Share event invitations and participation opportunities
Provide tailored content based on your role, organisation, sector, or country
Improve our understanding of sector and geographic engagement (anonymised analysis only)
You may withdraw your consent at any time by using the unsubscribe link in our communications or by contacting us at the email below.
4. Data Storage and Retention
Your data is securely stored and processed using MailerLite, our email marketing platform.
We retain your data:
For as long as you remain subscribed to our communications
For up to 30 days after you unsubscribe, after which your data will be permanently deleted
5. Data Sharing and Transfers
We do not sell or share your personal data with third parties for marketing purposes.
Your data may be transferred outside the UK (e.g. to MailerLite servers) under appropriate safeguards, including standard contractual clauses, to ensure your rights and protections under UK data protection law remain intact.
6. Your Data Protection Rights
Under the UK GDPR, you have the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw consent at any time
Lodge a complaint with the Information Commissioner’s Office (ICO)
7. Children’s Privacy
Our communications and services are not intended for individuals under the age of 13. We do not knowingly collect data from children.
8. Contact Us
If you have any questions or wish to exercise your rights under this policy, please contact: