Privacy Policy

LodeStar Leisure Limited (registered company number 05580575, referred to here as ”we”, “us”, “our”, or “the Festival”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our website (lodestarfestival.com) and related services.
We are registered as a Data Controller with the Information Commissioner’s Office (ICO) and fully comply with the Data Protection Act 2018 and the UK GDPR.

1. Our Data Protection Core Principles
We guarantee that your personal information will always be:
Used fairly, lawfully, and transparently.
Collected only for specific, clear purposes.
Limited only to what is necessary for those purposes.
Kept accurate and up to date.
Kept only for as long as it is actually needed.
Processed securely using strong safety measures to prevent loss or unauthorised access.

2. Your Legal Rights
Under the Data Protection Act 2018, you have the right to:
Be informed about how your data is being used.
Access copies of the personal data we hold about you.
Update or fix any incorrect data.
Request that your data be deleted or erased.
Stop or restrict us from processing your data.
Move your data to another service (data portability).
Object to direct marketing or automated decision-making and profiling.

3. Information We Collect
We collect personal data when you interact with us via:
Our official website, subdomains, and ticket booking platforms.
Our official social media channels.
Email newsletters (such as Mailchimp), contact forms, and artist applications.
Phone calls, text messages, post, or in-person interactions.
Forms filled out by festival crew, artists, charities, contractors, and volunteers.

4. How and Why We Use Your Data
We process your data under the following legal bases:
To fulfill a contract: To manage your ticket registrations, festival entry, camping bookings, or job applications.
To comply with the law: To handle taxes, safety regulations, and crime prevention.
For our legitimate interests: To answer your inquiries, block disruptive website activities, check visitor locations via IP addresses, and conduct research to improve the festival experience.
Note: If we need to collect highly sensitive data (like medical information for accessibility needs), we will always ask for your explicit consent first.

5. Sharing Your Data
We will never sell your personal data. We only share your details with trusted third-party service providers (like payment processors or ticket systems) who help run the festival. They are legally required to keep your data safe and cannot use it for their own purposes.

6. Children's Privacy
In line with UK GDPR rules, children aged 13 or over can legally give their own consent to use our online services. If you are under the age of 13, you must get permission from a parent or legal guardian before sending any personal information to us.

7. Contact Us & Complaints
If you want to use any of your data rights, please email us directly at info@lodestarfestival.com or write to us at: LodeStar Leisure Limited Harvey House, Lode, CB25 9HB

If you are unhappy with how we handle your data, you have the right to lodge a formal complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

LodeStar Leisure Limited uses cookies on our website to improve your browsing experience and analyze our traffic. By using our website, you agree to our use of cookies as outlined below.

1. What Are Cookies?
Cookies are small text files placed on your computer or mobile device when you visit a website. They help the website remember your actions and preferences over time.
2. How We Use Cookies
We use the following categories of cookies:
Necessary Cookies: These are essential for the website to work properly, such as holding items in your ticket shopping basket or logging into secure areas. They do not require your prior consent.
Performance & Analytics Cookies: These help us understand how visitors interact with our website by collecting anonymous information (such as Google Analytics). We only use these if you give us permission via our cookie banner.
3. Managing Your Cookie Choices
You can choose to accept or decline non-essential cookies at any time using our website's cookie consent banner. You can also block or delete cookies by changing your web browser settings. Please note that disabling essential cookies may cause parts of our website to stop working correctly.
4. Third-Party Links and Cookies
Our website contains links to external websites run by third parties (such as ticket platforms or social media networks). These third parties have their own privacy and cookie policies, which we urge you to read. We do not accept any responsibility or liability for the cookie practices of these external websites, and your use of them is entirely at your own risk.

Trade Marks

The Festival’s official logo is a registered trademark owned by LodeStar Leisure Limited. All rights reserved.

Changes to this Privacy Policy

Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The date of the most recent revision will always appear at the bottom of this page.
If we make any major changes to how we handle or use your personal data, we will not automatically apply them. We will provide a prominent notice on our website or contact you directly by email to get your explicit consent before those changes take effect. You can also request the deletion of your account or data at any time.

Data Security and Breach Notification
We are committed to keeping your personal information safe. We use strict technical and operational security measures to protect your personal data from loss, misuse, alteration, or destruction.
While we take every precaution, no website can be perfectly secure. If you have any concerns that your data has been compromised, please contact us immediately at info@lodestarfestival.com.
In the highly unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) promptly and within 72 hours, as required by the Data Protection Act 2018 and UK GDPR.

Updated 26/05/2026