Privacy Policy
This privacy policy explains how Country on the Quay (“we”, “us”, “our”) collects, uses and protects personal information when you visit countryconwy.com or sign up for festival updates.
Who is the data controller?
For the purposes of UK GDPR and the Data Protection Act 2018, the data controller is Country on the Quay. You can contact us at countryconwy@gmail.com about anything in this policy or to exercise your rights.
What we collect and why
1. Email address (mailing list)
- What: the email address you submit via the “Stay in the loop” form, plus a timestamp, your browser user-agent, the page that referred you and any UTM tracking parameters in the URL (used to understand which channel drove the sign-up).
- Why: to send you news about the festival — line-up announcements, ticket releases, trader/sponsor opportunities and similar — and to understand which marketing channels are working.
- Lawful basis: consent (UK GDPR Art. 6(1)(a)). You give consent by submitting the form.
- How long we keep it: until you unsubscribe or until 24 months after the last festival you engaged with, whichever is sooner.
- Who we share it with: sign-ups are stored in a managed PostgreSQL database operated by Supabase Inc. (970 Toa Payoh North, Singapore) acting as our data processor. Supabase complies with UK GDPR via the UK International Data Transfer Addendum and Standard Contractual Clauses. When we send marketing emails we may also share addresses with an email service provider; that provider will be named here before any emails are sent.
- How to withdraw: click “unsubscribe” in any email we send, or email countryconwy@gmail.com and we'll delete your record from the database.
2. Contact form / email enquiries
- What: any information you include when emailing
traders@,sponsors@orinfo@at countryconwy.com. - Why: to respond to your enquiry.
- Lawful basis: legitimate interests (handling business correspondence) or, where applicable, performance of a contract.
- Retention: kept for as long as needed to handle the enquiry and any follow-up, up to 24 months.
3. Analytics & advertising cookies (only if you accept)
- What: Google Analytics (GA4) and Meta (Facebook) Pixel — only if you click Accept on our cookie banner.
- Why: to understand which pages are popular, where visitors come from, and to measure the performance of festival promotion on Meta and Google.
- Lawful basis: consent (UK GDPR Art. 6(1)(a) and PECR reg. 6).
- Retention: as set by the providers — typically up to 14 months for GA4 event data and up to 24 months for Meta. See our Cookie Policy for more detail.
- How to withdraw: change your cookie choices.
What we do NOT do
- We do not sell your data to anyone, ever.
- We do not run analytics or advertising trackers without your consent.
- We do not require you to create an account just to read the site.
International transfers
Some of our service providers (e.g. Google Analytics, Meta) are based outside the UK/EEA. Where data is transferred outside the UK we rely on the UK International Data Transfer Addendum and / or the EU Standard Contractual Clauses to ensure equivalent protection.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased (the “right to be forgotten”)
- Restrict or object to our processing of your data
- Have your data transferred to another provider (data portability)
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email countryconwy@gmail.com. We aim to respond within one calendar month.
Complaints
If you’re not happy with how we’ve handled your personal data, please contact us first at countryconwy@gmail.com so we can try to put things right. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to this policy
We may update this privacy policy from time to time. The “Last updated” date at the top will reflect the latest version. Material changes affecting how we use existing personal data will be communicated by email where practical.