1. Overview

Desi Celebrations (“Desi Celebrations”, “we”, “us”, or “our”) is committed to safeguarding the privacy and personal data
of our customers, website visitors, and event attendees.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you interact with our website
https://desicelebrations.co.uk/,
purchase tickets, create an account, or communicate with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller Information

Desi Celebrations is the data controller responsible for your personal data.

If you have questions relating to data protection or this Privacy Policy, please contact us using the details above.

3. Scope of This Policy

This Privacy Policy applies to:

• Visitors to our website
• Customers purchasing tickets online
• Users creating an account on our website
• Individuals contacting us via email, forms, or other communication channels

This policy does not apply to third-party websites or services linked from our site.

4. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

4.1 Information You Provide Directly

• First name
• Last name
• Email address
• Phone number

4.2 Account & Transaction Information

• Account login details (if you create an account)
• Ticket purchase history
• Order references and transaction status

Note: We do not collect or store full payment card details.

5. How We Collect Personal Data

We collect personal data when you:

• Purchase tickets through our website
• Create a user account
• Contact us for enquiries or support
• Request refunds or assistance

All data collection is limited to what is necessary for legitimate business and legal purposes.

6. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contractual necessity — to process ticket purchases and provide event access
• Legal obligation — to comply with tax, accounting, and regulatory requirements
• Legitimate interests — to operate, improve, and secure our services
• Consent — where applicable (e.g., optional communications in the future)

7. How We Use Your Personal Data

Your personal data may be used to:

• Process and confirm ticket purchases
• Generate and deliver electronic tickets
• Manage user accounts and order history
• Communicate essential event-related information
• Provide customer support and handle refund requests
• Prevent fraud and ensure platform security
• Comply with legal and financial obligations

We only use your data for clearly defined, lawful purposes.

8. Payments & Financial Information

All online payments are securely processed through Stripe, a third-party payment gateway.

• We do not store or process payment card details on our servers
• Stripe acts as an independent data controller for payment-related data
• Payment data is handled in accordance with Stripe’s own privacy and security standards

9. Email Communications

We send emails primarily for transactional and service-related purposes, such as:

• Order confirmations
• Ticket delivery
• Event updates
• Important service notices

Emails are sent using Brevo, which acts as a data processor on our behalf.
We do not send unsolicited marketing emails.

10. Sharing of Personal Data

We may share limited personal data with trusted third-party service providers strictly where necessary, including:

• Payment processing: Stripe
• Email delivery: Brevo
• Website hosting & ticketing systems: WordPress and associated event/ticketing plugins

All third parties are contractually required to:

• Process data only on our instructions
• Implement appropriate security measures
• Comply with applicable data protection laws

We do not sell, trade, or rent personal data to third parties.

11. Cookies & Tracking Technologies

At present, our website does not actively use analytics, marketing, or tracking cookies.
However, we reserve the right to implement:

• Essential cookies for website functionality
• Performance and analytics tools
• Marketing or remarketing cookies

Where required by law, users will be informed and given the opportunity to provide consent through a cookie notice.

12. Accounts & Guest Checkout

Users may:

• Purchase tickets as a guest, or
• Create an account for convenience and order tracking

Account information is stored securely and accessible only to authorised personnel.

13. Refunds & Data Retention

Refunds are handled manually by our team.

We retain personal data only for as long as necessary to:

• Fulfil contractual obligations
• Maintain financial and accounting records
• Handle disputes, refunds, or chargebacks
• Comply with legal and regulatory requirements

When data is no longer required, it is securely deleted or anonymised.

14. Children & Minors

Our events are open to a general audience.

• Children may attend events with parental consent
• Ticket purchases must be completed by adults (18+), as online payment is required

We do not knowingly collect personal data directly from children.

15. Data Security

We implement appropriate technical and organisational safeguards to protect personal data against unauthorised access,
accidental loss, misuse, disclosure, or alteration.

Access to personal data is restricted to authorised personnel only.

16. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent where applicable

Requests can be made by emailing celebrations.desi@gmail.com
We may need to verify your identity before processing your request.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal, operational, or regulatory changes.
The most current version will always be available on our website.

18. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: