Your data. Plainly explained.

Privacy policy

Privacy policy

Last updated: 29 July 2026

This notice explains how Rebellion Fringe uses personal information when you visit rebellionfringe.co.uk, create an account, submit a listing, join the mailing list or enable alerts.

1. Who is responsible for your data

Rebellion Fringe is the controller of personal information used to operate this site. The contact for privacy requests is info@rebellionfringe.co.uk.

2. Information we collect

Depending on how you use the site, we may collect:

  • Account information: name, email address, encrypted password, account role, organisation name, account status and security settings.
  • Contributor information: venue claims, the organisations you manage, submissions, moderation history and correspondence.
  • Public listing material: venue, artist and gig information, images, logos, posters, links and other content you choose to publish. Avoid including private personal information in public fields.
  • Line-up preferences: favourite gigs, artists and performances, chosen reminder times and default listing view.
  • Mailing-list information: email address, subscription choices, verification and unsubscribe status.
  • Push information: your browser's push subscription endpoint and cryptographic keys, permission status, delivery attempts and the alert connected to a saved set or gig.
  • Technical and security information: IP address, browser and device information, request logs, session identifiers and information needed to prevent abuse and diagnose errors.
  • Analytics information, if you consent: pages viewed, navigation and feature interactions, referring page, approximate location derived from an IP address, device/browser characteristics and Google Analytics identifiers. We do not send your account name or email address to Analytics.

We do not ask the site to collect your precise device location. If you choose a directions link, you leave the site for Google Maps. Map tiles are supplied by OpenStreetMap and its service providers, which receive ordinary connection information such as your IP address.

3. Why we use it

We use personal information to:

  • create and secure accounts;
  • provide saved line-ups, preferences and requested reminders;
  • review venue claims and moderate contributor submissions;
  • publish and maintain the festival guide;
  • send newsletters or daily updates you asked to receive;
  • answer enquiries, investigate abuse and protect the service;
  • meet legal obligations and establish or defend legal claims; and
  • understand and fix operational problems using limited server logs; and
  • understand how visitors use listings and site features, and improve the service, where you have consented to Google Analytics.

4. Our lawful bases

Under UK data protection law, we rely on:

  • Contract: to provide an account and the features you request.
  • Consent: for optional marketing email, browser push notifications and Google Analytics. You can withdraw consent at any time.
  • Legitimate interests: to operate, moderate, secure and improve an independent listings service, provided those interests are not overridden by your rights.
  • Legal obligation: where we must retain or disclose information to comply with law.

5. Who receives information

We use service providers only where needed to run the site:

  • Laravel Cloud for application hosting, databases and file storage. Its object storage uses Cloudflare infrastructure.
  • Our email delivery provider to deliver account, security and opted-in mailing-list messages.
  • Browser push services operated by browser and device providers when you enable notifications.
  • OpenStreetMap tile services when you open the map view.
  • Google Analytics, only after you accept Analytics cookies, to measure visits and use of the site. The Analytics property uses measurement ID G-15ZC6NTCHG.

Directions and ticket links take you to independent third parties, including Google Maps and ticket sellers. They collect information under their own privacy notices. We may also disclose information where required by law, to protect users or the service, or as part of a properly managed transfer of the site.

Some providers may process data outside the UK. Where this happens, we use the safeguards required by UK data protection law, such as adequacy regulations or approved contractual protections.

We do not sell personal information.

6. How long we keep information

We keep account information while your account is active. When you delete an account, associated private account data is deleted or anonymised unless it is reasonably needed for security, disputes or legal obligations. Published factual listings may remain after an account is removed, but should no longer identify the former account holder.

Mailing-list details are kept until you unsubscribe. We may retain a minimal suppression record so we do not accidentally resubscribe you. Push subscriptions are removed when you disable them, delete your account or the browser tells us an endpoint is no longer valid.

Google Analytics cookies can remain for up to two years, subject to browser limits, unless you withdraw consent or clear them sooner. Google Analytics user-level and event-level data is retained according to the property setting, which for a standard Analytics property is no longer than 14 months. Aggregated standard reports may remain available for longer.

Operational logs, rejected claims and backups are kept for limited periods appropriate to security, moderation and recovery. We review retention and remove information when it is no longer needed.

7. Your choices and rights

You can update or delete your account from the profile page, change reminder settings in My line-up, unsubscribe using links in marketing emails and disable push permission in your browser. You can reject or withdraw Analytics consent at any time using Cookie choices in the site footer.

You may also ask us to:

  • provide a copy of your personal information;
  • correct inaccurate information;
  • delete information;
  • restrict or object to processing; or
  • provide certain information in a portable format.

You may withdraw consent at any time. Withdrawal does not make earlier processing unlawful. Some rights have legal limits.

Email requests to info@rebellionfringe.co.uk. We may need to confirm your identity. You may complain to the Information Commissioner's Office if you are unhappy with our response.

8. Security

We use access controls, encrypted connections, password hashing, database backups and managed hosting controls. No online service can guarantee absolute security, so please use a unique password and tell us promptly if you suspect account misuse.

9. Children

The guide is available to a general audience but is not designed to knowingly collect personal information from children under 13. If you believe a child has provided information inappropriately, contact us so we can investigate and remove it.

10. Changes to this notice

We will update this notice when the service, providers or law changes. The latest revision date appears at the top. Material changes may also be highlighted on the site or by email where appropriate.