Privacy Policy | The House & Garage Orchestra

1. Who We Are

This Privacy Policy applies to The House & Garage Orchestra Ltd ("THGO", "we", "us", or "our"), a UK-based live music event company. We are committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy-related enquiries, please contact us via our Contact page.

2. What Data We Collect

We may collect the following personal data when you interact with our website or services:

Name and email address (via mailing list sign-up or contact form)
Phone number (if provided via contact form)
Message content submitted through our contact form
IP address and browser/device information (collected automatically)
Cookie identifiers and advertising interaction data (only with your consent)

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to enquiries submitted through our contact form
To send you event news and updates if you have joined our mailing list
To process and manage event-related bookings or requests
To show you relevant advertising about our events (only with your cookie consent)
To maintain the security and functionality of our website

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR to process your personal data:

Consent — for mailing list sign-ups and advertising cookies/pixels
Legitimate interests — for ensuring the security and functionality of our website
Contractual necessity — where we need your data to fulfil a booking or service request

5. We Do Not Sell or Share Your Data

We do not sell, rent, or trade your personal data to any third party under any circumstances. We do not share your data with third parties for their own marketing purposes.

Where necessary for the delivery of our services, we may use trusted third-party processors (for example, email delivery or ticketing platforms). These processors are bound by strict data processing agreements and may only process your data on our instructions.

6. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Specifically:

Contact form enquiries: retained for up to 12 months
Mailing list data: retained until you unsubscribe
Cookie/advertising data: as defined by the respective cookie duration (see Cookie Policy)

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access — request a copy of the data we hold about you
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data ("right to be forgotten")
Right to restrict processing — request that we limit how we use your data
Right to data portability — receive your data in a structured, commonly used format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — withdraw consent at any time where processing is consent-based

To exercise any of these rights, please contact us via our Contact page. We will respond within 30 days in accordance with UK GDPR requirements.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. Our website uses HTTPS encryption for all data transmissions.

9. Cookies

We use cookies and tracking pixels exclusively for advertising purposes relating to our events. For full details, please read our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO), at ico.org.uk.