Privacy and Cookie Policy
Our website address is: https://www.heart-events.co.uk
This privacy and cookie policy sets out how HEART EVENTS ("us", "our" or "we") uses and protects any information that you give HEART EVENTS when you use this website.
HEART EVENTS may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 10th June 2018.
For your privacy, the information you provide to us via this website is sent with 256 bit encryption via a secure server and is only used within HEART EVENTS.
What personal data we collect and why we collect it
The only personal information we collect via this website is that which you deliberately provide us when you complete one of our enquiry forms. You consent to us using your data at the point at which you give it to us. You can subsequently ask us to delete all of the personal data you have given us by request.
What we do with the information we collect
- For Venue or Event Managers, we use the information you give us to provide our services and answer your enquiry by telephone or email.
- For Artistes, should we decide to add you to our roster of acts we may post 'basic and necessary information' about your act on our website, this will NOT include your address, NOR telephone, NOR email, NOR prices. 'Basic and necessary information' WILL include the name of your act, a description, set lists, photos and videos. When you give us your information you are providing consent for us to use it and post your 'basic and necessary information' on our website in order to aid the process of promotion and arrangement of new bookings for your act.
- We keep the information you provide to us for internal record keeping.
- We may use the information to focus or improve our services.
- We may periodically send you emails, your consent may be withdrawn at any time.
Cookies
Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device. Cookies do lots of different jobs, like remembering your preferences and they generally improve the user experience. Also to help us understand visitor habits and to enable us to market our website.
Cookies can be deleted by clearing your browser cache/deleting web history.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
Analytics
Performance cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works. We use Google Analytics, which uses cookies to track visitor quantities, locations and browsing habits and thus they help us to improve our website and services.
Google Analytics uses the following cookies on this website:
Cookie Name | Expiration Time | Description |
---|---|---|
_ga | 2 years | Used to distinguish users. |
_gid | 24 hours | Used to distinguish users. |
_gat | 1 minute | Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_ . |
If you follow this Google link you can opt out of Google Analytics performance cookies
By using our website, you agree that we can place these cookies on your device.
Who has access to your data
Members of our team have access to the information you provide us in order to answer your enquiries.
Who we share your data with
We respect your right to privacy. None of the information we collect is passed on to other parties, except when required as part of the business services we provide for you, or as required under UK law. Non-personal data is shared with Google Analytics.
How long we retain your data
We keep the information provided in enquiries for at least 6 years.
What rights you have over your data
If you have sent an enquiry message via our contact forms, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.
Controlling your personal information
You may choose to restrict the use of your personal information in the following ways:
If you have subscribed to marketing emails you can easily unsubscribe from them by following the link at the bottom of marketing emails.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law. You may request details of personal information which we hold about you under the Data Protection Act 1998. If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.
Erasing personal data
You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. See below for contact details.
Data Controller
HEART EVENTS is the controller and responsible for your personal data (collectively referred to as ”Organisation”, “we”, “us” or “our” in this privacy notice).
If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the details set out below.
Contact information
Email: sammy @ heart-events.co.uk
Where we send your data
The personal data mentioned above is stored on our Hosting provider's servers in the EU. Enquiries are processed in England. Non-personal data is sent outside the EU to Google Analytics.
ICO Registration
Heart Events is registered with the Information Commissioners Office (ICO) to collect, retain, store and pass on personal information on Artists, Hirers, Suppliers and other Agents in accordance with the General Data protection Regulations 2018. Our registration number is A8504226.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy and cookie policy. You should exercise caution and look at the privacy statement applicable to the website in question. We are in no way liable for any problems you may have when on another website that is not ours or under our control.
Security
How we protect your data
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Our website is HTTPS secure and has been validated to have a secure SSL certificate which provides industry standard data encryption of information transferred from your computer to the website.
All our website pages are secured with SSL 256 bit encryption. Our SSL Digital Certificate is provided by 'Let's Encrypt' and has the SHA-256 Hash Signature Algorithm with Asymmetric RSA Encryption.
The computers used to access enquires in order to process them are protected by a firewall and anti-virus and are not removed from company premises.
The staff that have access to these enquires have been trained in Data Protection.
Security Logs
The IP addresses of visitors are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 14 days.
This site is scanned for potential malware and vulnerabilities by Sucuri's SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in reviews) during their scan. For more details, please see Sucuri's privacy policy.
This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.
YouTube
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
Google Web Fonts
For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our plugin. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. If your browser does not support web fonts, a standard font is used by your computer.