1. Background
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These regulations provide individuals with rights over their personal data and place responsibilities on organisations handling such data.
2. Introduction
Lichfield Festival of Music takes your privacy seriously and is committed to protecting your personal information. This policy explains how we collect, use, store, and protect your information.
3. How we collect your personal information
We collect information directly from your application forms and through other communications related to the Festival, such as telephone calls and emails. We only hold the personal information you have provided.
4. What personal information we collect
We may collect the following information:
- Your name
- Your date of birth (if under 16)
- Your contact details (e.g. address, email, and/or phone number)
All information collected is relevant and limited to what is necessary for organising and administering the Festival.
5. How we use your personal information
We use your information to maintain the Run my Festival application, which supports scheduling, entry forms and payments and includes a mailing list and may contact you in relation to participation in the Festival. We rely on your consent (Article 6(1)(a) of UK GDPR) as the legal basis for processing your data.
Your information is not used for any other purpose and will never be shared with third parties.
6. How we keep your data safe
Your information is stored securely and only accessed by the Festival Trustees. Electronic data is password-protected, and paper forms (if used) are stored securely.
7. Keeping your information up to date
Please notify us if your contact details change. You may also request removal from the mailing list at any time by contacting David Barton, Secretary of the Lichfield Festival of Music.
8. Children’s data
Application forms for children under 16 must be signed by a parent or legal guardian. The application form includes this requirement.
9. How long we keep your information
We retain personal data for a maximum of five years, or until you request its removal, whichever is sooner.
10. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how your data is handled
11. Responsibility and contact
The nominated Data Protection Officer is Rev Ken Howcroft, Chair of the LFM Committee. He is responsible for ensuring this policy is followed and that we meet our obligations under UK GDPR.
12. Policy review
This policy was last reviewed and updated in March 2025. It will be reviewed annually or earlier if required by changes in regulation or practice.
Last updated: March 2025.
