Privacy Policy
Last updated: [insert date]
This Privacy Policy explains how Avocado Moon (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit www.avocadomoon.com (the “Website”), purchase event tickets, or otherwise engage with our services.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
The data controller is Avocado Moon, located at:
Milner House, 12–14 Manchester Square, London, England, W1U 3PP
📩 Email: info@avocadomoon.com
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at the email above.
2. Personal Data We Collect
We may collect and process the following types of personal data:
Identity and Contact Information: name, surname, email address, phone number, and other details provided during event registration or newsletter sign-up.
Payment Information: securely processed by trusted third-party providers (e.g., Stripe, PayPal, WooCommerce, Eventbrite).
Technical Data: IP address, browser type, operating system, device information, and browsing behaviour collected via cookies and analytics tools.
Communications Data: any information you voluntarily provide via forms, emails, or messages (e.g., feedback, inquiries).
We do not collect sensitive personal data unless explicitly required (e.g., dietary preferences or accessibility needs for events).
3. Purpose of Processing
Your personal data is collected and used for the following purposes:
To manage event bookings, ticket sales, and communications related to your participation.
To process payments, invoices, and receipts.
To send updates, confirmations, and logistical details about events.
To send marketing or newsletter communications (only with your consent).
To analyse and improve our Website and user experience.
To comply with legal, accounting, and tax obligations.
4. Legal Basis for Processing
We process your personal data under the following lawful bases:
Performance of a contract – to deliver the services you request (UK GDPR Article 6(1)(b));
Consent – for newsletters and marketing activities (Article 6(1)(a));
Legal obligation – for compliance with tax, accounting, and other UK legal requirements (Article 6(1)(c));
Legitimate interests – for website security, fraud prevention, and service improvement (Article 6(1)(f)).
5. Data Retention
We keep your personal data only as long as necessary to fulfil the purposes outlined above:
Booking and transaction data: up to 10 years (for accounting and tax compliance).
Marketing data: until you withdraw consent.
Website analytics: stored anonymously and used for internal improvements only.
6. Data Sharing
We share personal data only with trusted third parties essential to our operations, such as:
Payment processors (e.g., Stripe, PayPal);
Event management platforms (e.g., WooCommerce, Eventbrite);
Professional advisers (accountants, legal consultants);
Hosting and IT service providers;
Public authorities when legally required.
All third parties are required to respect the confidentiality and security of your data and to comply with UK GDPR.
Your data is not sold or transferred outside the UK unless adequate data protection safeguards (such as Standard Contractual Clauses) are in place.
7. Data Security
We adopt appropriate technical and organisational measures to ensure your personal data is protected against unauthorised access, misuse, loss, or disclosure.
All payment data is encrypted and handled securely by certified payment gateways.
8. Your Rights Under the UK GDPR
You have the following rights regarding your personal data:
Access – request a copy of the data we hold about you.
Rectification – correct inaccurate or incomplete information.
Erasure (“Right to be forgotten”) – request deletion of your data.
Restriction – limit how we process your data.
Portability – receive your data in a machine-readable format.
Objection – object to processing based on legitimate interests or direct marketing.
Withdraw consent – withdraw your consent for marketing at any time.
To exercise any of these rights, contact us at info@avocadomoon.com.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk
9. Cookies
We use cookies to enhance your browsing experience, analyse site traffic, and personalise content.
You can manage or withdraw your cookie preferences at any time.
See our Cookie Policy for details: www.avocadomoon.com/cookie-policy.
10. Updates to This Policy
We may update this Privacy Policy periodically to reflect legal or operational changes.
The latest version will always be available on this page, with the date of the last update displayed above.