Privacy Policy

Last updated: 6 July 2026

This Privacy Policy explains how Helstonbury Music Festival collects, uses, stores and protects personal information when you use our website, contact us, place a merchandise pre-order, make a payment, or interact with us online.

Our website is: https://helstonbury.com/

For the purposes of UK data protection law, Helstonbury Music Festival is the data controller for the personal information we collect and use through this website.

Contact details:

Helstonbury Music Festival
c/o The Blue Anchor
50 Coinagehall Street
Helston
Cornwall
TR13 8EL

Email: helstonbury@hotmail.com

If our contact details change, we will update this Privacy Policy.

1. What this Privacy Policy covers

This Privacy Policy covers personal information collected through helstonbury.com and related website activity.

At present, we do not sell tickets online, we do not take donations through the website, and we do not operate a website mailing list or newsletter sign-up.

The only online orders we currently take through the website are for merchandise pre-orders.

If we add new website features in future, such as online ticket sales, donations, or mailing list sign-ups, we will update this Privacy Policy where needed.

2. What personal information we collect

We may collect and use the following types of personal information.

Website enquiries

When you contact us through the website, by email, social media, or any enquiry form, we may collect:

Your name
Your email address
Your phone number, if provided
Your message and any information you choose to include
Any replies or follow-up communication between you and us

Merchandise pre-orders

When you place a merchandise pre-order through the website, we may collect:

Your name
Your billing address
Your delivery address, where delivery is offered or needed
Your email address
Your phone number, where needed
Details of the merchandise you have pre-ordered
Order notes or collection details
Payment status
Transaction reference numbers
Refund, cancellation or customer service information

We use this information to process and manage your pre-order, contact you about your order, arrange collection or delivery where relevant, and keep appropriate financial records.

Payments through Dojo

We use Dojo to process card payments. Dojo is a trading name of Paymentsense Limited.

When you pay by card, your payment information is handled securely by Dojo and its payment partners. We do not intentionally collect or store your full card number, card security code or full payment card details on our own website systems.

We may receive limited payment information from Dojo, such as:

Confirmation that payment has been made
The amount paid
The date and time of payment
Transaction reference numbers
Payment status
Limited card information, such as card type or the last four digits, where provided by Dojo

Dojo may process your personal information as an independent data controller for payment processing, fraud prevention, security, legal compliance and payment service purposes.

You should read Dojo’s own privacy policy to understand how Dojo handles your information.

Dojo Privacy Policy: https://dojo.tech/legal/privacy/

Website accounts

If our website allows you to create an account, we may collect:

Your name
Your email address
Your username
Your password in encrypted form
Your billing and delivery details
Your order history
Your account preferences

You are responsible for keeping your login details safe.

If our website does not currently use customer accounts, this section only applies if account functionality is enabled in future.

Volunteers, performers, traders, suppliers and event contacts

If you contact us about performing, volunteering, trading, supplying services, sponsoring, supporting, or otherwise working with the festival, we may collect:

Your name
Your contact details
Organisation, band, act, charity or group name
Role or position
Website or social media links
Information about your enquiry, application, request or proposal
Relevant practical information needed to organise the festival
Payment, invoice or booking details, where relevant

Photography, video and media at events

Helstonbury is a public festival. Photography and filming may take place during the event for promotional, documentary, press, social media and archive purposes.

We may use images or video that show the event atmosphere, performers, volunteers, organisers, traders and attendees.

Where practical and appropriate, we will seek consent for close-up, clearly featured images, especially where the person is not performing or otherwise clearly taking part in a public-facing role.

If you have concerns about an image or video of you being used, please contact us and we will review your request.

Technical website information

When you use our website, we may collect technical information such as:

IP address
Browser type and version
Device type
Operating system
Pages visited
Time and date of visits
Referring website or search engine
Approximate location based on IP address
Cookie and consent preferences
Website error logs and security logs

This helps us keep the website secure, understand how people use it, and improve it.

3. How we collect personal information

We collect personal information when:

You provide it directly to us
You fill in a form on the website
You place a merchandise pre-order
You make a payment through Dojo
You email or message us
You interact with us on social media
You attend, perform at, volunteer at, trade at, or otherwise take part in the festival
Our website automatically collects technical information through cookies, logs and similar technologies

We may also receive limited information from trusted third parties, such as payment providers, website hosting providers, security tools, analytics providers, social media platforms, or event partners.

4. Why we use your personal information

We use personal information for the following purposes:

To operate the Helstonbury website
To respond to enquiries
To process and manage merchandise pre-orders
To process payments through Dojo
To arrange collection, delivery, refunds and customer service where relevant
To manage performer, volunteer, trader, supplier, sponsor and event enquiries
To promote and document the festival
To improve our website, services and events
To keep our website and payment systems secure
To prevent fraud, misuse or unauthorised access
To keep records for tax, accounting and legal purposes
To comply with legal obligations
To deal with complaints, disputes or legal claims

5. Our lawful bases for using personal information

Under UK data protection law, we must have a lawful basis for using your personal information.

Depending on the situation, we rely on one or more of the following lawful bases.

Contract

We use your information where it is necessary to provide something you have requested, such as processing a merchandise pre-order, arranging collection or delivery, dealing with a payment, or handling a refund.

Legal obligation

We use your information where we need to comply with the law, including tax, accounting, financial record keeping, fraud prevention and legal reporting obligations.

Legitimate interests

We use your information where we have a legitimate interest in running, protecting and improving the festival and website.

This may include:

Responding to enquiries
Managing event operations
Keeping appropriate records
Preventing fraud or misuse
Securing the website
Dealing with disputes or complaints
Using general event photography and video for reasonable promotional, documentary and archive purposes

We only rely on legitimate interests where we believe our interests are not overridden by your rights and freedoms.

Consent

We rely on consent for certain activities, such as non-essential cookies, or certain featured photography or video use where consent is appropriate.

You can withdraw consent at any time.

6. Payments and card security

Card payments are processed by Dojo. We do not store your full card details on our own website.

Dojo and its payment partners are responsible for securely handling card payment information during the payment process. We receive only the information needed to confirm and manage your merchandise pre-order or payment.

We take reasonable steps to keep payment-related information secure, including using a reputable payment provider, restricting access to order information, and keeping website software and security measures under review.

7. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies are small files stored on your device. Some cookies are necessary for the website to work properly. Others help us understand how the website is used, improve performance, remember preferences, or support embedded content.

Essential cookies

Essential cookies are needed for the website to function. They may be used for:

Website security
Remembering items in a basket
Completing checkout
Remembering cookie preferences
Protecting forms from spam or misuse
Keeping the website stable

Essential cookies do not usually require consent.

Non-essential cookies

We will only use non-essential cookies where required consent has been given.

These may include:

Analytics cookies
Performance cookies
Embedded media cookies
Social media cookies

You can manage your cookie preferences through the cookie banner or cookie settings on the website, where available.

You can also control cookies through your browser settings. Blocking some cookies may affect how the website works.

8. Who we share personal information with

We only share personal information where needed and where we have a lawful reason to do so.

We may share information with:

Dojo and payment partners, to process card payments
Website hosting providers
Website developers or maintenance providers
WordPress, WooCommerce and plugin providers where relevant
Delivery or postage providers, where delivery is offered or needed
Analytics providers, where enabled
Security, anti-spam and fraud prevention providers
Accountants, bookkeepers or financial advisers
Insurers, legal advisers or professional advisers
HMRC, regulators, law enforcement or public authorities where required
Event partners, venues, performers, volunteers, suppliers or contractors where necessary to run the festival

We do not sell your personal information.

9. International transfers

Some of the services we use may process personal information outside the United Kingdom.

Where this happens, we will take reasonable steps to make sure appropriate safeguards are in place, such as using providers that offer UK GDPR-compliant transfer protections, adequacy arrangements, or approved contractual safeguards.

10. How long we keep personal information

We only keep personal information for as long as needed.

As a guide:

Enquiries are usually kept for up to 2 years after the last contact, unless we need them for longer
Merchandise pre-order and payment records are usually kept for up to 6 years for tax, accounting and legal purposes
Website security logs are usually kept for a limited period unless needed to investigate security issues
Volunteer, performer, trader, supplier and sponsor records may be kept for up to 3 years after the relevant event or contact, unless needed for longer
Photographs and video may be kept as part of the festival’s promotional and historical archive unless you raise a valid objection and we agree that removal is appropriate
Cookie consent records may be kept to show that we respected your choices

We may keep information for longer if required by law, tax rules, insurance, dispute resolution, safeguarding, fraud prevention, or legal claims.

11. How we protect personal information

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

These steps may include:

Using secure payment providers
Restricting access to personal information
Using password protection and account security
Keeping website software and plugins under review
Using security tools to protect the website
Backing up website data where appropriate
Using secure email and admin access where possible
Deleting or anonymising information when it is no longer needed

No website, email system or online service can be guaranteed to be completely secure, but we take security seriously and aim to use appropriate safeguards.

12. Your rights

Under UK data protection law, you have rights over your personal information.

These may include the right to:

Ask for a copy of the personal information we hold about you
Ask us to correct inaccurate or incomplete information
Ask us to delete your information in certain circumstances
Ask us to restrict how we use your information
Object to certain uses of your information
Ask for your information in a portable format in certain circumstances
Withdraw consent where we rely on consent
Complain to the Information Commissioner’s Office

Some rights are subject to legal limits. For example, we may need to keep certain order, payment or accounting records even if you ask us to delete them.

To exercise your rights, contact us at:

helstonbury@hotmail.com

We may need to ask for proof of identity before responding.

13. Marketing and mailing lists

We do not currently operate a website mailing list or newsletter sign-up.

We will not use merchandise pre-order details to add you to a mailing list without your consent.

We will not sell your details to third parties for marketing.

14. Links to other websites

Our website may link to other websites, including social media platforms, payment providers, performer websites, sponsor websites and partner organisations.

We are not responsible for the privacy practices of other websites. You should read their privacy policies before giving them your personal information.

15. Social media

If you interact with us on social media, the relevant platform may process your personal information according to its own privacy policy.

We may see your username, profile information, comments, messages, reactions and anything else you choose to share with us through those platforms.

16. Children and young people

Our website is not aimed at collecting personal information from children without appropriate involvement from a parent, guardian, school, organiser or responsible adult.

If we need to collect information about a child or young person for a festival-related reason, such as a performance, competition, safeguarding matter, or group activity, we will only collect what is necessary and will handle it carefully.

If you believe a child has provided personal information to us without appropriate permission, please contact us.

17. Complaints

If you are concerned about how we use your personal information, please contact us first so we can try to resolve the issue.