Privacy Policy

Updated 30 March 2026

This privacy notice tells you what to expect us to do with your personal information when you interact with MCLF Events Ltd, including when you purchase tickets, register for events, or contact us.

Contact details and data controller information

What information we collect, use, and why

Lawful bases and data protection rights

Where we get personal information from

How long we keep information

Who we share information with

How to complain

Contact Details

Data Controller: MCLF Events Ltd

Email: info@heavyhandedevents.com

Website: heavyhandedevents.com

ICO Registration Number: ZC107869

What Information We Collect, Use, and Why

We collect and use the following categories of personal information:

Ticketing and Event Bookings

Full name

Email address

Booking and payment confirmation details

Dietary or accessibility requirements (where voluntarily provided)

Contact and Enquiries

Name

Email address

Any information you choose to include in your message

Marketing Communications

If you have opted in to receive marketing from us, we may also hold:

Email address

Communication preferences

You can withdraw your consent to marketing at any time by clicking the unsubscribe link in any email we send, or by contacting us directly at info@heavyhandedevents.com.

Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information. You can find out more about lawful bases on the ICO's website.

We rely on the following lawful bases depending on the purpose:

Contract – When you purchase a ticket or register for an event, processing your personal data is necessary to fulfil that contract with you. This covers issuing tickets, managing bookings, and communicating essential event information.

Legal Obligation – In certain circumstances we are required by law to collect or retain your personal data, for example for financial record-keeping purposes.

Legitimate Interests – We may process certain data where it is in our legitimate interests to do so, such as responding to enquiries or improving our events, provided this does not override your rights.

Consent – Where we send you marketing communications, we will only do so with your explicit consent. You may withdraw consent at any time.

Your Data Protection Rights

Depending on the lawful basis we rely on, you may have some or all of the following rights:

Right of access – You can ask us for copies of your personal information. Read more

Right to rectification – You can ask us to correct or delete information you think is inaccurate or incomplete. Read more

Right to erasure – You can ask us to delete your personal information in certain circumstances. Read more

Right to restriction of processing – You can ask us to limit how we use your personal information. Read more

Right to object – You can object to the processing of your personal data in certain circumstances. Read more

Right to data portability – You can ask us to transfer your personal information to another organisation or to you. Read more

Right to withdraw consent – Where we rely on consent, you can withdraw it at any time. Read more

We must respond to any request within one month. To make a data protection rights request, please contact us at info@heavyhandedevents.com.

Where We Get Personal Information From

We collect personal information directly from you in the following ways:

When you purchase a ticket or register for an event through our website or Ticket Tailor

When you submit an enquiry or contact form via our website (using Google Forms)

When you sign up to receive marketing communications from us

When you contact us directly by email

Data Processors

We use trusted third-party service providers (data processors) who handle personal data on our behalf and are contractually bound to do so only in accordance with our instructions and applicable UK GDPR requirements.

Google Forms

We use Google Forms to collect personal data submitted through our website. Google LLC processes this data on our behalf to securely collect and store form responses. Google may store data on servers located outside the United Kingdom. Where this occurs, appropriate safeguards are in place, including Standard Contractual Clauses approved under UK GDPR, to ensure your data remains protected.

Ticket Tailor

We use Ticket Tailor to manage event registrations and ticketing. Ticket Tailor Ltd processes personal data such as names, email addresses, and booking information on our behalf in order to administer event bookings and communicate with attendees.

How Long We Keep Information

Ticketing and booking data is retained for 12 months following the date of the event.

Contact and enquiry data is retained for 12 months from the date of your enquiry.

Marketing data is retained until you withdraw your consent or request erasure.

After these periods, your personal data will be securely deleted or anonymised.

Who We Share Information With

We do not sell your personal data. We may share your information in the following limited circumstances:

With our data processors (Google, Ticket Tailor) as described above, solely to deliver our services

With organisations we are legally obliged to share information with, for example HMRC for financial compliance purposes

With emergency services or venue operators where this is strictly necessary for the safety of attendees

We will not share your personal data with any third party for their own marketing purposes.

Cookies

Our website may use cookies — small text files stored on your device — to help the site function and to understand how visitors use it. We aim to use only cookies that are strictly necessary. Where we use any analytics or preference cookies, we will ask for your consent first. For more information about cookies and how to control them, visit ico.org.uk/cookies.

How to Complain

If you have any concerns about how we use your personal data, please contact us in the first instance: