Privacy Policy

1. Who we are

The data controller is [LEGAL ENTITY TO BE CONFIRMED], the organiser of Christmas in the Sky at Abingdon Airfield. You can contact us at hello@christmasinthesky.co.uk.

2. Information we collect

When you register for priority tickets we collect:

• Your first name
• Your email address
• Your mobile number
• Your marketing consent

We also collect limited technical information: the campaign links that brought you to the site (UTM parameters and referrer), your device type and browser, and an approximate location (city and country) derived from your IP address at the time you visit. We store a one-way hash of your IP address for security and rate limiting. We never store the raw IP address.

3. How we use your information

We use your information to:

• Tell you when Christmas in the Sky tickets are released and give you priority access
• Send event news, launch offers and important updates about the event
• Respond to your enquiries and provide customer support
• Understand how our marketing performs and improve the website
• Comply with our legal obligations

4. Marketing communications

If you tick the consent box when registering, we may contact you about Christmas in the Sky by email, SMS and WhatsApp. You can unsubscribe at any time using the link in our emails, by replying STOP to a message, or by contacting us directly.

5. Lawful basis

We process your personal information on the following lawful bases:

• Your consent, for marketing communications
• Our legitimate interests in promoting and operating the event and in measuring our advertising
• Compliance with legal obligations

6. Sharing your information

We do not sell your personal information.

We use trusted service providers to operate the website and our communications. These may include:

• Website hosting (Vercel)
• Database and authentication (Supabase)
• Email, SMS and WhatsApp marketing platform [CRM TO BE CONFIRMED: Klaviyo or Brevo]
• Advertising measurement (Meta, TikTok) using hashed contact details
• Website analytics (Google Analytics), only with your cookie consent
• Approximate location lookup (ipapi.co) and maps (MapTiler)
• Transactional email (Resend)

These providers process information only on our instructions and are required to keep it secure.

7. Data security

We use appropriate technical and organisational measures to protect your information against unauthorised access, loss, misuse or disclosure. No internet transmission is completely secure and we cannot guarantee absolute security.

8. Data retention

We keep your information for as long as the Christmas in the Sky event programme is active and for a reasonable period afterwards to meet legal obligations. If you unsubscribe we keep the minimum needed to respect your preference.

9. Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Restrict or object to processing
• Withdraw consent at any time
• Receive a copy of your data in a portable format
• Complain to the Information Commissioner's Office (ICO)

To exercise any of these rights, contact hello@christmasinthesky.co.uk.

10. Cookies

Our website uses essential storage and, with your consent, analytics and marketing cookies. See our Cookie Policy for details and to understand your choices.

11. Third-party links

Our website may link to third-party websites. We are not responsible for their privacy practices.

12. Children

Christmas in the Sky is a family event, but registration is intended for adults. We do not knowingly collect personal information directly from children under 13.

13. Changes to this policy

We may update this policy from time to time. Changes will be published on this page with an updated date.