App Privacy Policy

1. Introduction

This privacy policy explains how information is handled when you use the Broadstairs Folk Week mobile app for iOS or Android.

Broadstairs Folk Week is a registered charity (Charity No. 1104684) and company (Company No. 4485954). In this policy, “we”, “us” and “our” refer to Broadstairs Folk Week.

2. What the app does

The app provides festival programme information, including events, artists, dates, venues, categories and links to relevant ticket or festival webpages. You do not need to create an account or sign in to use the app.

The app does not process ticket payments. When you follow a ticket or website link, the external website you visit is responsible for its own privacy practices.

3. Information we collect

Information you provide

The app itself does not ask you to provide your name, postal address, telephone number or payment details. If you contact us by email or telephone for support, we may receive your contact details and the information you choose to include in your enquiry.

Information collected automatically

We use Google Firebase Analytics and Firebase Crashlytics. These services may automatically collect limited information about use of the app and its technical operation.

We do not use the app to collect contacts, photographs, health information, payment-card details or precise location. We do not sell personal information, and the app does not display third-party advertising.

4. How we use information

We use information collected through the app to:

• provide and maintain the app;
• understand which app functions are useful;
• identify and fix crashes, defects and compatibility problems;
• protect the app and associated services from misuse; and
• respond to support requests.

We do not use app analytics or diagnostic information to send direct marketing messages to you.

5. Our basis for processing

Where UK data-protection law applies, we process limited usage and diagnostic information because it is in our legitimate interests to operate, understand, secure and improve the app. We balance those interests against users’ privacy and limit collection to information relevant to those purposes.

We process information contained in support enquiries so that we can respond to the request and provide assistance.

6. Service providers and sharing

We use Google LLC’s Firebase services as a data processor or service provider:

• Firebase Analytics for app usage and engagement measurement;
• Firebase Crashlytics for crash and diagnostic reporting; and
• Firebase Sessions and related Firebase components that support those services.

Google may process information on infrastructure located outside the United Kingdom. Google states that Firebase data is protected using contractual, organisational and technical safeguards, including encryption in transit.

Further information is available from:

• Privacy and Security in Firebase
• Google Privacy Policy
• Firebase Data Processing and Security Terms

We may also disclose information where required by law, or where reasonably necessary to protect the rights, safety and security of users, the festival or the public.

7. Retention and deletion

• Firebase Crashlytics generally retains crash stack traces and associated installation identifiers for 90 days before beginning deletion from live and backup systems.
• Google Analytics user-level event data is retained according to the Firebase project’s configured retention setting, for no longer than 14 months. Aggregated statistical reports may remain after user-level data expires.
• Support correspondence is normally retained for no longer than 24 months after the enquiry is resolved, unless it is needed for longer for legal, safeguarding or operational reasons.

We periodically review the information we control and delete or anonymise it when it is no longer reasonably required.

8. Your choices and rights

You may contact us to ask about personal information we hold about you, request access or correction, request deletion or restriction, or object to processing. These rights may be subject to legal limitations.

Analytics and crash information is normally associated with an app installation identifier rather than your name. This means we may not always be able to identify information relating to a particular person without additional technical details.

Deleting the app stops future information being sent from that installation. You may also contact us to object to future analytics processing or request deletion of identifiable information under our control.

You also have the right to raise a concern with the UK Information Commissioner’s Office: ico.org.uk/make-a-complaint.

9. Children

The app provides general festival information and does not require users to provide their age or create an account. We do not knowingly use the app to collect children’s names or contact details. A parent or guardian who has a privacy concern may contact us using the details below.

10. Security

We take reasonable technical and organisational measures to protect information against accidental loss, unauthorised access, alteration or disclosure. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

11. External links

The app contains links to festival, venue and ticketing websites. This policy does not govern those external services. Please review the privacy notice of each external website before submitting personal information or purchasing tickets.

12. Changes to this policy

We may update this policy when the app, our service providers or legal requirements change. The latest version will be published on this page and identified by its “Last updated” date.

13. Contact us