1. Who we are
This Privacy Policy explains how Tartan Talks Ltd ("we", "us", "our") collects, uses, and protects your personal data when you visit tartantalks.co.uk, buy a ticket, or attend one of our events.
Tartan Talks Ltd is a company registered in Scotland, company number SC826909. We are the data controller for the personal data described in this policy. You can reach us at [email protected].
2. What data we collect
We only collect the personal data we need to run our events, manage your tickets, and keep in touch with you about Tartan Talks. That includes:
- Identity and contact data — name, email address, phone number.
- Ticket and attendance data — events you've bought tickets for, tickets you've used at the door, your ticket number, and whether you're a Tartan Talks member.
- Payment data — handled by our payment processor (Stripe). We do not store full card details ourselves.
- Communication data — messages you send us, newsletter sign-ups, and your marketing preferences.
- Technical data — IP address, device, and browser information collected automatically when you visit the site (see "Cookies" below).
3. How we use your data
- To sell and issue tickets, and to admit you at the door.
- To send you booking confirmations, ticket QR codes, and event reminders.
- To manage memberships and member-only access.
- To send you newsletter updates about future events only where you've opted in or are an existing customer who hasn't opted out.
- To respond to your messages and provide customer support.
- To meet our legal, accounting, and tax obligations.
- To improve the site and our events.
4. Our legal basis for using your data
Under UK GDPR, we rely on one of the following bases each time we use your data:
- Performance of a contract — when we use your data to issue and honour your ticket.
- Legitimate interests — when we email existing customers about similar future events, or when we use technical data to keep the site secure.
- Consent — when you opt in to our newsletter, or to non-essential cookies.
- Legal obligation — for accounting, tax, and regulatory record-keeping.
You can withdraw consent at any time by emailing [email protected] or using the unsubscribe link in any marketing email.
5. Who we share your data with
We share your data with carefully chosen processors who help us run Tartan Talks. They only process your data on our instructions and under contract.
- GoHighLevel (HighLevel Inc.) — our CRM, ticketing, and email platform.
- Stripe — payment processing.
- Vercel and Neon — hosting our website and the database that holds your ticket records.
- Google — fonts, analytics where applicable.
Some of these providers operate outside the UK or the European Economic Area. Where that's the case, transfers are protected by the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an equivalent safeguard.
We do not sell your personal data to anyone.
6. Cookies and similar technologies
We use a small number of cookies to make the site work and to understand how it's used. Strictly necessary cookies don't require your consent. Anything else (analytics, preferences) is only set after you accept. You can change your choices at any time via the "Cookie preferences" link in the footer.
7. How long we keep your data
- Ticket and attendance records: up to 6 years from the event for accounting and legitimate interest purposes.
- Customer accounts: while your account is active, then archived for up to 24 months.
- Marketing preferences: until you unsubscribe, plus a short suppression-list retention so we don't email you again.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Have it corrected if it's wrong, or completed if it's incomplete.
- Have it deleted in certain circumstances.
- Restrict or object to our processing.
- Data portability — receive your data in a portable format.
- Withdraw consent where we relied on it.
- Complain to the Information Commissioner's Office (ico.org.uk) if you think we've handled your data badly.
To exercise any of these rights, email [email protected]. We aim to respond within one month.
9. Security
We use industry-standard security measures to protect your data — encrypted connections (HTTPS), restricted access, and reputable processors. No system is completely secure, so we recommend you keep your account email up to date and let us know straight away if you suspect anything unusual.
10. Children
Tartan Talks events are aimed at adults in business. We don't knowingly collect data from anyone under 18. If you think a child has shared data with us, please contact us and we'll delete it.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will always reflect when it was last changed. Material changes will be flagged via email to ticket holders or members where appropriate.
12. Contact us
Questions about your data or this policy? Email [email protected].