Tickets On Sale Now!

10 DAYS OF MUSIC, DANCE, LITERATURE, ART, WALKS, TALKS, PERFORMANCE & FAIRS • TICKETS ON SALE NOW!

Privacy Notice

Dulwich Festival Privacy Notice

Dulwich Festival is a registered charity (Charity number: 1048164). We run the Dulwich Festival, an annual arts and cultural festival in the Dulwich area each May, including an Artists’ Open House programme.

In running and operating the Dulwich Festival and this website, we may collect and process certain data and information relating to you. Your privacy is important to us, and we will not share your information with any third party for their marketing purposes.

This Privacy Notice tells you what to expect us to do with your personal information in accordance with the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA 2018) and the Privacy and Electronic Communications (EC Directive) Regulations 2003) (PECR). We will maintain this Privacy Notice from time to time on this site.

What information we collect and use, and why

We collect or use information, which may include the following, to provide services relating to the Festival, for marketing purposes, when you visit this website, when you volunteer for the Festival, and/or to comply with legal requirements:

  • Identity and contact data including name, title, date of birth, address, email address and telephone number
  • Transaction data including purchase and order history
  • Marketing preferences
  • Recorded images from Festival events, such as photos of videos

We use a third-party ticket booking website for you to order and purchase tickets for Festival events. We do not hold your card information when you order and purchase tickets or apply to host an Artists’ Open House; these are collected by a third-party payment processing website, who specialise in secure online payment transactions.

Lawful bases and your data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

  • Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we obtain personal information from and with whom we share personal information. There are some exemptions which means you may not receive all the information you ask for.
  • Your right to rectification – You have the right to ask us to correct or delete
    personal information you think is inaccurate or incomplete.
  • Your right to erasure – You have the right to ask us to delete your personal
    information.
  • Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.
  • Your right to object to processing – You have the right to object to the processing of your personal data.
  • Your right to data portability – You have the right to ask that we transfer the
    personal information you gave us to another organisation, or to you.
  • Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request, we must normally respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using our contact details below.

Our lawful bases for the collection and use of your data

Any personal data that you give to us may be retained by us to provide a requested service (such as processing your order for a Festival event or application to be an Artists’ Open House host or artist), if you work with us in a paid or voluntary capacity, to keep you updated on our current or future events and activities, or for our legitimate interests as an arts festival organiser.

In general, our legal basis for processing your personal data is that it is in our legitimate interests to do so for the purposes of running Festival events, although we would refrain from doing so if our legitimate interests were overridden by your interests or fundamental rights and freedoms. We have an interest in operating the Festival in the most customer-focused and professional way, and our processing of your personal data is done in accordance with this. We may also use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation where we rely on this legal basis.

We rely on your consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to our email newsletter.

Where we get personal information from

  • Directly from you
  • Family members or carers
  • Publicly available sources
  • Suppliers and service providers
  • Regulatory authorities

How long we keep personal information

We review our retention periods for personal information on a regular basis. We will hold your personal information on our systems only for as long as is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

In some circumstances, you can ask us to delete your data.

Who we share personal information with

We utilise the services of third-party organisations to process your personal data, including third-party ticket and payment processing websites for the purposes of ordering and purchasing tickets for Festival events. As the data controller, we determine the purposes and means of the processing of your personal data. Where your data is processed by any third party on behalf of us, that third party is a data processor under the UK GDPR. We confirm that we take steps in order to ensure that this data is processed lawfully under the law in accordance with each agreement that we have in place with each processor.

We may provide your personal data (such as names and contact details) to Festival venue hosts and other third parties that we work with in providing participatory programmes and competitions as part of the Festival.

We will not sell or rent your information to third parties. We will not share your information with third parties for their marketing purposes.

How we store your personal information

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Third party links

This website may include links to third-party websites. Visiting those third-party websites may allow third parties to collect or share data about you. We do not control those third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of any such website.

Our contact details
You can contact us via our email at info@dulwichfestival.co.uk

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details above. If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
 
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
 
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
 
This Privacy Notice was last updated on 31 March 2025.