Last updated Apr 2026
***
This website is operated by Findhorn Bay Arts and whose registered address is 98 High Street, Forres, IV36 1NX.
The data controller responsible for your personal information for the purposes of the applicable European Union data protection law is:
Address:
Findhorn Bay Arts
98 High Street
Forres
IV36 1NX
Email: info@findhornbayarts.com
Telephone: 01309 673 137
Introduction
This policy sets out how we collect, process and hold your personal data if you visit our event ticket shop at findhornbayfestival.com or otherwise provide personal data to us. We confirm that we will keep your information secure and that we will comply fully with all applicable UK Data Protection legislation and regulations. Please read the following carefully to understand what happens to personal data that you choose to provide to us, or that we collect from you when you visit this site.
By visiting findhornbayfestival.com (our website) you are accepting and consenting to the practices described in this policy.
Here at Findhorn Bay Arts we take your privacy very seriously and we are committed to holding your personal information in the safest regard.
Scope of Policy
This Privacy Policy covers our treatment of information that we gather when you are accessing or using our websites or services or when you contact us in any manner. We gather various types of information, including information that identifies you as an individual (“Personal Information”) as explained in more detail below.
This policy sets out how we collect, process and hold your personal data if you visit our event ticket shop or otherwise provide personal data to us. We are Findhorn Bay Arts of 98 High Street, Forres, IV36 1NX. We are the data controller of your personal data.
This policy affects your legal rights and obligations so please read it carefully. If you have any questions, please contact us at info@findhornbayarts.com or call us on 01309 673 137.
Personal data we collect
We collect, process, store and use personal data when you book a ticket and buy any of our associated products and services to an event including your name, address and email address together with payment information. We may also collect personal data that you give to us about other people if you register them to attend an event. You agree that you have notified any other person whose personal data that you provide to us of this privacy notice and, where necessary, obtained their consent so that we can lawfully process their personal data in accordance with this policy.
All personal data that you provide to us must be true, complete and accurate. If you provide us with inaccurate or false data, and we suspect or identify fraud, we will record this.
You do not need to provide us with any personal data to view our event ticket shop. However, we may still collect the information set under the Data we automatically collect section of this policy, and marketing communications in accordance with the Marketing Communications section of this policy.
When you contact us by email or post, we may keep a record of the correspondence and we may also record any telephone call we have with you.
Data we automatically collect
When you visit our event ticket shop, we, or third parties on our behalf, automatically collect and store information about your device and your activities. This information could include (a) your computer or other device’s unique ID number; (b) technical information about your device such as type of device, web browser or operating system; (c) your preferences and settings such as time zone and language; and (d) statistical data about your browsing actions and patterns. We collect this information using cookies in accordance with the Cookie section of this policy and we use the information we collect on an anonymous basis to improve our event ticket shop, our events and the products and services we provide, and for analytical and research purposes.
Marketing Communications
If you opt in to receive marketing communications from us you consent to the processing of your data to send you such communications, which may include newsletters, blog posts, surveys and information about new events. We retain a record of your consent.
You can choose to no longer receive marketing communications by contacting us at info@findhornbayarts.com or clicking unsubscribe from a marketing email. If you do unsubscribe to marketing communications, it may take up to 5 business days for your new preferences to take effect. We shall therefore retain your personal data in our records for marketing purposes until you notify us that you no longer wish to receive marketing emails from us.
We use a third-party provider, MailChimp, to deliver our electronic newsletter and to store your details. We gather statistics of email opening and clicks using industry standard technologies to help us monitor and improve our communications. For more information about your details being shared with, stored and used via MailChimp, please see MailChimp’s Privacy Policy.
Lawful processing of your personal data
We will use your personal data in order to comply with our contractual obligation to supply to you your tickets to an event and any associated products and services, including to contact you with any information relating to the event or your purchases, to deliver the event and your purchases to you in accordance with any requests you make and that we agree to, and to deal with any questions, comments or complaints you have in relation to the event or your purchases.
We may also use your personal data for our legitimate interests, including dealing with any customer services you require, enforcing the terms of any other agreement between us, for regulatory and legal purposes (for example anti-money laundering), for audit purposes and to contact you about changes to this policy.
Who do we share your data with?
We may share your personal data with any service providers, sub-contractors and agents that we may appoint to perform functions on our behalf and in accordance with our instructions, including payment providers, event ticketing providers, email communication providers, IT service providers, accountants, auditors and lawyers.
Under certain circumstances we may have to disclose your personal data under applicable laws and/or regulations, for example, as part of anti-money laundering processes or protect a third party’s rights, property, or safety.
We may also share your personal data in connection with, or during negotiations of, any merger, sale of assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
Where we hold and process your personal data
Some or all of your personal data may be stored or transferred outside of the UK and the European Union (the EU) for any reason, including for example, if our email server is located in a country outside the UK or EU or if any of our service providers or their servers are based outside of the UK or EU. We shall only transfer your personal data to organisations that have provided adequate safeguards in respect of your personal data.
Cookies
A cookie is a small text file containing a unique identification number that is transferred (through your browser) from a website to the hard drive of your computer. The cookie identifies your browser but will not let a website know your name and/or address. These files are then used by websites to identify when users revisit that website.
Our event ticket shop uses cookies so that we can recognise you when you return and personalise your settings and preferences. Most browsers are initially set up to accept cookies. You can change your browser settings either to notify you when you have received a cookie, or to refuse to accept cookies. Please note that our event ticket shop may not operate efficiently if you refuse to accept cookies.
Security
We shall process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. All information you provide to us is stored on our secure servers. Any payment transactions are encrypted using SSL technology.
Where we have given, or you have chosen a password, you are responsible for keeping this password confidential.
However, you acknowledge that no system can be completely secure. Therefore, although we take these steps to secure your personal data, we do not promise that your personal data will always remain completely secure.
Your rights
You have the right to obtain from us a copy of the personal data that we hold for you, and to require us to correct errors in the personal data if it is inaccurate or incomplete. You also have the right at any time to require that we delete your personal data. To exercise these rights, or any other rights you may have under applicable laws, please contact us at info@findhornbayarts.com.
Please note, we reserve the right to charge an administrative fee if your request is manifestly unfounded or excessive.
If you have any complaints in relation to this policy or otherwise in relation to our processing of your personal data, you should contact the UK supervisory authority: the Information Commissioner, see www.ico.org.uk.
Our event ticket shop may contain links to other sites of interest. Once you have used these links to leave our event ticket shop, you should note that we do not have any control over that other site. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this policy. You should exercise caution and look at the privacy policy applicable to the site in question.
Data Retention
We only keep your personal data for as long as necessary for the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements.
- Ticket purchases and event participation: If you have booked a ticket or purchased products or services from us, we will retain your personal data for as long as necessary to manage your booking, provide customer support, and comply with legal and financial obligations (such as accounting requirements).
- Enquiries and correspondence: If you contact us with a question or comment, we will retain your personal data for up to 6 months after your last interaction with us, so that we can respond to any follow-up queries and ensure continuity of communication.
- Marketing communications: If you have opted in to receive marketing updates, we will retain your details until you unsubscribe or withdraw your consent.
- Legal obligations: In some cases, we may need to retain data for longer where required by law (for example, for tax, audit, or safeguarding purposes).
When personal data is no longer needed, we will securely delete or anonymise it.
Access to your Personal Information
You are entitled to contact Findhorn Bay Arts to request:;
- a copy of your personal information;
- for amendments to be made to your personal information;
- for your personal information to be deleted from our systems.
You can email your request to our named data protection controller Paige Harvey at marketing@findhornbayarts.com.
General
If any provision of this policy is held by a court of competent jurisdiction to be invalid or unenforceable, then such provision shall be construed, as nearly as possible, to reflect the intentions of the parties and all other provisions shall remain in full force and effect.
This policy shall be governed by and construed in accordance with the law of Scotland, and you agree to submit to the exclusive jurisdiction of the Scottish Courts.
Changes to this Policy
We are constantly trying to improve our website and services, so we may change the terms of this policy from time to time.
You can see when this Privacy Policy was last updated by checking the date at the top of this page. You are responsible for regularly reviewing this policy so that you are aware of any changes to it. If you continue to use our event ticket shop after the time we state the changes will take effect, you will have accepted the changes.
Questions & Contact
If you have any questions or concerns regarding our cookie or privacy policies, please send a detailed message to marketing@findhornbayarts.com
Our main address for the purposes of this website is Findhorn Bay Arts, 98 High Street, Forres, IV36 1NX. Findhorn Bay Arts is a company limited by guarantee with Company No. SC413997.