TICKETS ON SALE NOW FOR 28th - 31st August 2026

Privacy Policy

Welcome to CeltFest’s Privacy Notice. You may be viewing this notice through our website, mobile application, ticketing services, or onsite digital systems (collectively referred to as the “Platform”).

We take the protection of your privacy extremely seriously. CeltFest processes personal data in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

This Privacy Notice explains what personal data we collect, how and why we use it, and the rights you have over your information. We aim to be transparent, respectful and to give you meaningful control over your personal data.

We recommend reading this Privacy Notice together with our Cookie Notice, which explains how cookies and similar technologies are used on our Platform.

For further information about data protection, please visit the Information Commissioner’s Office (ICO): https://ico.org.uk

 

  1. About Us

Our Contact Details

Name: CeltFest (Organised by Afon Mel Events Ltd)
Address: Afon Mêl Honey Farm & Meadery,
Maesnewydd, Cross Inn,  Llandysul, Ceredigion SA44 6NN
Email: celtfest@afonmel.com

 

  1. What Personal Data Do We Collect and How?

“Personal data” means any information relating to an identified or identifiable individual.

We may collect and process the following categories of personal data:

  • Personal identifiers and contact details (name, postal address, email address, telephone number, date of birth)
  • Payment and transaction details
  • Account or registration information (where applicable)
  • Emergency contact details
  • Health, mobility, or accessibility information (only where required by law or voluntarily provided to ensure safety and accessibility)
  • Parent or guardian details where an attendee is under 18
  • Employer or organisation details (for staff, press, trader, or artist accreditation)
  • Cookies, device identifiers, and usage data
  • CCTV images and recordings
  • Incident, safeguarding, or ejection records where required for safety, security, or legal reasons
  • Children’s Personal Data. Where we process personal data relating to children, we take additional care to protect their information. We only process children’s personal data where it is necessary and appropriate, and where required, with the involvement or consent of a parent or legal guardian.

 

 

  1. Information You Give Us

We collect personal data directly from you when you:

  • Purchase tickets or register for festival events
  • Create an account or log into festival systems
  • Subscribe to newsletters or mailing lists
  • Join waiting lists for events
  • Enter competitions, prize draws, promotions, or surveys
  • Contact our customer service team or engage via social or digital channels
  • Use onsite cashless payment systems or request digital receipts
  • Visit our websites or apps (see Cookie Notice)
  • Apply to perform, trade, volunteer, or work at the festival
  • Register for staff, press, contractor, or artist accreditation
  • Request personal assistance tickets or accessibility services
  • Register for accessible camping or viewing areas
  • Are involved in a safety, welfare, or safeguarding incident

 

  1. Information We Receive from Third Parties

We may receive personal data about you from:

  • Ticketing and payment providers
  • Digital service and platform providers
  • Affiliated cultural or event organisations

 

  • Marketing partners (only where you have given consent)
  • Social media platforms (where used for sign‑in or interaction)
  • Government, regulatory, or law enforcement authorities where required by law

 

  1. What Do We Use Your Data For?

5.1 Service & Operational Purposes

We use personal data to:

  • Provide tickets, bookings, and festival services
  • Manage event entry, age checks, and identification where required
  • Process payments and refunds
  • Communicate essential festival information and updates
  • Provide customer service and respond to enquiries
  • Improve our website, apps, and onsite systems
  • Manage applications for artists, traders, staff, and volunteers
  • Collect feedback and improve future festivals
  • Tailor communications to help you get the most from your festival experience
  • Support staff, volunteer, and artist welfare
  • Provide accessibility support where required
  • Support traffic, travel, and crowd management planning

 

5.2 Competitions and Prize Draws

Where you enter a competition or prize draw, we process your data to administer the competition, contact winners, fulfil prizes, and support our legitimate interests in promoting and improving our events.

5.3 Direct Marketing

You may receive communications about CeltFest or related cultural events via email, phone, post, or app notifications. You may opt out at any time by contacting:
info@afonmelfestival.com

5.4 Third‑Party Promotions

We will only share your data with third parties for their own marketing purposes where you have explicitly opted in. You may withdraw consent at any time.

5.5 Legal, Safety, and Vital Interests

We may process personal data to:

  • Comply with health and safety obligations
  • Protect the wellbeing of attendees, artists, staff, and volunteers
  • Prevent and detect crime through CCTV monitoring
  • Comply with licensing, tax, and regulatory requirements

5.6 Automated Decision‑Making
We do not use your personal data to make automated decisions or for profiling that produces legal effects or similarly significant effects on you.

 

  1. Legal Grounds for Processing

We process personal data under the following lawful bases:

  • Consent
  • Contract
  • Legal obligation
  • Public task (where applicable)
  • Legitimate Interests. Where we rely on legitimate interests as our lawful basis, these interests include operating and improving the festival, ensuring the safety and security of attendees and staff, communicating essential event information, and promoting our cultural events. We carefully balance these interests against your rights and freedoms and only rely on this basis where it does not override your interests or expectations.

 

  1. Who We Share Your Data With

We may share personal data with:

  • Festival partners and subcontractors
  • Ticketing and payment providers
  • IT, digital, and cloud service providers
  • Marketing partners (with consent)
  • Regulators, emergency services, and authorities where required by law

All third parties are required to process your data securely and in accordance with data protection law.

 

  1. How We Protect Your Personal Data

We use appropriate technical and organisational safeguards including:

  • Restricted access controls
  • Encryption and secure storage
  • Antivirus and security monitoring
  • Regular system testing and audits

Where data is transferred outside the UK or EEA, appropriate safeguards are in place. Where personal data is transferred outside the UK or the European Economic Area, we ensure appropriate safeguards are in place. These may include adequacy regulations, the UK International Data Transfer Agreement (IDTA), or other legally approved transfer mechanisms.

 

  1. How Long We Keep Your Data

Personal data is stored securely on approved cloud platforms and specialist event management systems.

We retain data only for as long as necessary for the purposes collected. When no longer required, data is securely deleted, including from backups and third‑party systems, in line with retention policies.

 

  1. Your Rights

You are not required to pay any charge to exercise your rights. We have one month to respond to valid requests.

You have the right to:

  • Withdraw consent. Withdrawing your consent will not affect the lawfulness of any processing carried out before your consent was withdrawn.
  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure in certain circumstances
  • Restrict processing
  • Object to processing based on legitimate or public interests
  • Data portability
  • Lodge a complaint with the supervisory authority

If you are not satisfied with our response to a data protection request, you have the right to lodge a complaint with the supervisory authority.

 

UK Supervisory Authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
https://www.ico.org.uk

10.1 Provision of Personal Data. Some personal data is required in order for us to provide festival services, such as processing ticket purchases, managing event entry, complying with health and safety obligations, or providing accessibility support.

Where personal data is required to enter into a contract with us or to comply with legal obligations, failure to provide this information may mean we are unable to provide certain services or allow participation in the event.

 

  1. How to Contact Us

For privacy requests, complaints, or questions, contact:
celtfest@afonmel.com

 

  1. Updates to This Privacy Notice

We may update this Privacy Notice to reflect changes in legal requirements or our services. The latest version will always be available on our website. Where changes are significant, we will highlight them clearly.

 

  1. Cookies Policy

This section explains how CeltFest (organised by Afon Mel) uses cookies and similar technologies when you visit our websites, mobile applications, ticketing services or onsite digital systems (together, the “Platform”). This Cookies Policy forms part of this Privacy Notice and should be read alongside the other sections explaining how we process personal data.

13.1 What Are Cookies?

Cookies are small text files that are placed on your device (such as a computer, smartphone, or tablet) when you use a website or digital service. Cookies help digital platforms function correctly, remember user preferences, and improve performance and security.

Cookies may be:

  • Session cookies, which expire when you close your browser; or
  • Persistent cookies, which remain on your device until they expire or are deleted.

 

 

13.2 How We Use Cookies

We use cookies and similar technologies to:

  • Ensure our Platform operates securely and effectively
  • Enable ticket purchases, account login, and onsite digital services
  • Remember user preferences, including accessibility settings
  • Understand how our Platform is used so we can improve functionality and user experience
  • Support marketing communications where you have provided consent

These purposes align with the service, operational, and marketing uses described elsewhere in this Privacy Notice.

13.3 Types of Cookies We Use

13.3.1 Strictly Necessary Cookies

These cookies are essential for the operation of our Platform. They enable core functionality such as secure access, ticketing, payment processing and fraud prevention. These cookies cannot be disabled through our systems, as the Platform would not function properly without them.

Lawful basis: Contract and/or Legitimate Interests.

13.3.2 Performance and Analytics Cookies

These cookies help us understand how visitors use our Platform, such as which pages are visited most often or whether errors occur. Information collected is aggregated and used to improve the performance and design of our digital services.

Lawful basis: Consent.

13.3.3 Functionality Cookies

Functionality cookies allow our Platform to remember choices you make, such as preferences or settings and provide enhanced and more personalised features.

Lawful basis: Consent or Legitimate Interests, depending on the cookie.

13.3.4 Marketing and Advertising Cookies

These cookies may be used to provide information about CeltFest or related cultural events, measure the effectiveness of communications, and limit how often you see certain messages. We only use marketing cookies where you have explicitly opted in.

Lawful basis: Consent.

 

 

 

13.4 Third‑Party Cookies

Some cookies used on our Platform are placed by trusted third‑party service providers, such as ticketing, payment, analytics or embedded media providers. These third parties may process information in accordance with their own privacy policies. We require all third‑party providers to process data securely and in compliance with applicable data protection laws.

13.5 Managing Your Cookie Preferences

When you first access our Platform, you will be presented with a cookie notice allowing you to accept, reject or manage non‑essential cookies. You can also control or delete cookies at any time through your browser or device settings.

Please note that disabling certain cookies may affect the availability or functionality of some features of the Platform.

13.6 Cookies and Personal Data

Some cookies may collect information that constitutes personal data, such as IP addresses or online identifiers. Where this occurs, such data is processed in accordance with this Privacy Notice and applicable data protection law.

13.7 Changes to Cookies

We may update this Cookies Policy from time to time to reflect changes in law, technology or our use of cookies. Any updates will be included in the latest version of this Privacy Notice.

13.8 Contact

If you have any questions about our use of cookies, please contact us at:
celtfest@afonmel.com