Privacy policy

Last updated: Wednesday, 7 October 2026

This Privacy Policy explains how Aurora Music Corporation Ltd, operating the Strawberry Fields event brand, collects, uses, stores and protects your personal data when you visit our official website, purchase tickets or accommodation, attend the festival or contact us.

It applies to the Strawberry Fields website and event services operated by us. Separate providers, including Ontick, may also process your information under their own privacy policies.

1. WHO WE ARE

Event: Strawberry Fields
Festival dates: 6–8 August 2027
Venue: Cattows Farm, Normanton Lane, Heather, Coalville, Leicestershire, LE67 2TD
Data controller: Aurora Music Corporation Ltd

Aurora Music Corporation Ltd is responsible for deciding how and why personal data is used for the activities described in this policy. We comply with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.

25Eight Events Ltd manages certain communications and data protection enquiries on our behalf. You can contact us using the details in Section 11.

The festival website is hosted on Cloudflare and was built by UNKNWNmedia.com. The organiser remains responsible for the event-related processing described in this policy. Website construction alone does not mean the developer receives attendee or booking data.

The campsite departure deadline is Monday, 9 August 2027 at 11:00. Our event-related processing also covers camping, glamping and live-in vehicle arrangements associated with the festival.

2. PERSONAL DATA WE COLLECT

We only collect information relevant to the service or enquiry concerned. Depending on your interaction with us, this may include the following.

TICKETING AND ACCOMMODATION

Tickets and accommodation packages are sold through Ontick only. We may receive information necessary to administer your booking, including:

• Your name and contact details, such as email address, phone number and postal address.
• Booking references, ticket types, quantities and attendance or ticket-scan records.
• Payment status, refunds and transaction references.
• Age or date-of-birth information where needed for ticket eligibility or age verification.
• Camping, glamping, live-in vehicle and other booking selections.

Advance ticket and accommodation payments are handled through Ontick and its payment providers. Their privacy information explains how they handle payment details. Information shared with us is used to administer bookings, admission and customer support.

ON-SITE CASH AND CARD PURCHASES

Strawberry Fields accepts cash and card only for on-site purchases. For purchases from us, we may hold receipt and transaction details, such as the amount, time, items purchased, payment status and refund records. A cash purchase does not normally require contact details, although you may choose to provide them for a receipt or enquiry.

Card payments involve the relevant card-payment provider. We may receive transaction references and limited payment information needed for reconciliation, refunds or disputes. Purchases from independent traders are handled by those traders and their providers under their own privacy information. Do not send us full card details by email or messaging service.

ENQUIRIES AND COMMUNICATIONS

We may collect your name, contact details, booking reference and the information you provide when you contact us by email, through a contact form or through an official social-media account.

If we introduce a WhatsApp contact option and you choose to use it, we may receive your phone number, profile information visible to us and message content. WhatsApp will also process information under its own privacy policy. Please do not send payment-card details or unnecessary medical information through messaging services.

MARKETING PREFERENCES

If you opt in to marketing, we record your name, email address or other relevant contact details, communication preferences and consent history.

Buying a ticket does not automatically subscribe you to marketing. You may withdraw marketing consent at any time.

ACCESSIBILITY AND PA/CARER REQUESTS

If you request accessibility support or apply for a Personal Assistant/Carer ticket, we may need information about your requirements and evidence of eligibility. This may reveal health or disability information, which is special category personal data.

We request only the information needed to assess the application or arrange support. We explain the purpose, lawful basis and applicable special category condition when collecting it. Where we rely on your explicit consent, we request that consent separately and explain how to withdraw it. Access is restricted to those who need the information.

Please ask us how to submit eligibility evidence before sending sensitive documents. You may redact information that is not required for the assessment.

CHILDREN'S INFORMATION

Where necessary, we process limited information about children to administer child tickets, age restrictions and support arrangements. A parent, guardian or booking adult may provide this information. We do not require a child's details simply to browse the website.

TECHNICAL AND USAGE INFORMATION

Our website and service providers may process IP addresses, browser and device information, access logs and security information. Where enabled, analytics may collect information about pages visited and interactions with the site. Section 4 explains our approach to cookies and similar technologies.

EVENT IMAGES AND INCIDENT RECORDS

We may process CCTV footage, official event photographs and video, together with information needed to deal with security incidents, complaints or claims. See Section 8.

3. HOW WE COLLECT YOUR DATA

We collect information:

• Directly from you when you make an enquiry, request support or subscribe to marketing.
• From Ontick when you purchase tickets, accommodation or related products.
• From transactions with us and the relevant payment providers when you make an on-site purchase, request a refund or raise a payment enquiry.
• From a person making a booking on your behalf.
• From our website and service providers as described in this policy and our Cookie Policy.
• From authorised event staff, security providers, photographers and other contractors carrying out relevant event services.

If you book for other people, please share this policy with them and provide only the information needed for their booking.

4. WHY WE USE YOUR DATA AND OUR LAWFUL BASES

We use personal data for the following purposes:

Purpose	Lawful basis
Administer purchases, including on-site cash and card transactions, accommodation and services you book; provide admission and necessary booking updates	Contract: Article 6(1)(b)
Manage bookings made by another person on your behalf and respond to general enquiries	Legitimate interests: Article 6(1)(f), in delivering the event and assisting attendees
Send optional promotional emails or other consent-based marketing	Consent: Article 6(1)(a)
Meet accounting, tax and other applicable legal duties	Legal obligation: Article 6(1)(c)
Protect the website, prevent misuse, manage event safety, investigate incidents and handle complaints or legal claims	Legitimate interests: Article 6(1)(f), in protecting people, services and property and resolving disputes
Use appropriate official event photography and video	Legitimate interests or separately obtained consent, as explained in Section 8

Where we rely on legitimate interests, we assess whether the processing is necessary and balance our interests against your rights and reasonable expectations, including the particular interests of children.

Special category data requires an additional condition under Article 9 of the UK GDPR. We identify and explain the relevant condition when requesting accessibility or PA/Carer evidence; the ordinary lawful bases above are not sufficient on their own.

Booking confirmations, safety notices and essential event updates are service communications. You may still receive these if you unsubscribe from optional marketing.

You do not have to provide optional marketing information. If you do not provide information necessary for a booking or a support request, we may be unable to complete that booking or assess the request; we will explain what is needed.

COOKIES AND ANALYTICS

We use technical information needed to operate and secure the website in our legitimate interests. Where cookies or similar technologies require consent, we obtain it before using them. Legitimate interests does not override a requirement for cookie consent.

Our Cookie Policy explains the technologies actually used, their purposes, providers and durations, and how to manage your choices. If a legally permitted exception to consent is used, the policy will explain it and any applicable right to opt out. Rejecting optional tracking does not itself prevent you from browsing event information or following booking links.

5. MARKETING CHOICES

We send optional marketing only where you have opted in to the relevant communications. You can unsubscribe using the link in our messages or contact us using Section 11.

Withdrawing consent does not affect the lawfulness of processing before withdrawal. We may retain a minimal record of your opt-out so we do not contact you again against your wishes.

We do not sell your personal data or treat acceptance of this Privacy Policy as marketing consent.

6. SHARING YOUR DATA AND INTERNATIONAL TRANSFERS

We share information only where necessary for the relevant purpose. Recipients may include:

• Ontick, for ticketing, accommodation bookings and event access administration.
• 25Eight Events Ltd, for communications and administrative support on our behalf.
• Cloudflare, as the website hosting and content delivery provider, where information such as requests and technical logs is processed to deliver or secure the site.
• UNKNWNmedia.com, the website builder, only if authorised support work requires access to personal data; any such access must be limited to what is needed and covered by appropriate arrangements. Building the site does not itself provide general access to customer data.
• On-site card-payment providers, where required to process payments to us, reconcile transactions or handle refunds and disputes.
• Other IT and email service providers, to operate and support our services.
• Email marketing providers, to send communications in line with your preferences.
• Analytics providers, where used in accordance with the choices and arrangements described in our Cookie Policy.
• Accommodation, accessibility and event service providers, where they need information to fulfil your booking or support request.
• Security and CCTV providers, including Century Fire & Security Ltd for the CCTV service described in Section 8.
• Professional advisers, insurers, regulators, police or other authorities, where there is a lawful basis for disclosure.

Providers processing personal data on our behalf are subject to appropriate contractual requirements. Where a provider acts as an independent data controller, it is responsible for its own processing and privacy information. Roles depend on the activity concerned; not every provider acts solely as our processor.

You should review the privacy information presented by Ontick when booking, and by other platforms you choose to use.

INTERNATIONAL TRANSFERS

Some suppliers may process information outside the UK. Where we make a restricted international transfer, we use an appropriate lawful transfer mechanism. This may include UK adequacy regulations, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses together with the UK Addendum, as applicable, and any required assessment and supplementary safeguards.

Contact us if you would like information about the safeguards relevant to your data or a copy where available, subject to appropriate redactions.

7. HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as needed for the purpose for which it was collected, taking account of legal requirements and genuine ongoing disputes or investigations.

Type of information	Retention approach
Marketing contact details	Until you unsubscribe or withdraw consent, with periodic reviews to remove information no longer needed. Minimal consent and opt-out records may be retained to evidence your choices and prevent unwanted contact.
Necessary ticketing and financial records	Up to seven years after the relevant transaction or financial period, where justified by accounting requirements or claims management. This does not mean every item of booking data is kept for seven years.
Routine customer enquiries	Normally up to 12 months after the enquiry is resolved. Records needed for an ongoing complaint or claim may be held longer.
Routine technical and security logs	Normally 30–90 days, unless a specific security incident or other justified requirement makes longer retention necessary. Cookie-specific durations are explained in the Cookie Policy.
Accessibility and PA/Carer evidence	Only for as long as necessary to assess eligibility and resolve any review or dispute. Wherever possible, retain the eligibility outcome instead of full supporting documents; retain support instructions only while needed to deliver the arrangements.
CCTV	A short routine overwrite period based on the security purpose and time reasonably needed to identify incidents. The applicable period is provided in the event CCTV notice. Relevant footage may be preserved longer for a specific incident, request, investigation or claim.
Official photographs and video	While relevant and necessary for the stated event-recording or promotional purpose, subject to periodic review and any applicable consent withdrawal or objection.

When information is no longer required, we securely delete it or anonymise it. Providers acting as independent controllers apply their own retention policies.

8. CCTV, PHOTOGRAPHY AND VIDEO

CCTV

CCTV will be used at Strawberry Fields to help protect attendees, staff and property, prevent and investigate crime, and manage safety incidents.

The CCTV service is provided and managed by Century Fire & Security Ltd. The controller and relevant contact information will be identified in event CCTV notices, together with information about the monitoring arrangements.

Our lawful basis for event-security CCTV is legitimate interests under Article 6(1)(f). We use signage to notify people of monitoring, restrict access to authorised personnel and disclose footage only where justified, for example to investigate an incident or assist a lawful police request.

OFFICIAL PHOTOGRAPHY AND VIDEOGRAPHY

Official photographers and videographers may record performances, crowds and activity in public event areas. Identifiable images may be used for event coverage, our website, social media and promotional materials.

For proportionate general event coverage, we may rely on legitimate interests after assessing necessity, reasonable expectations and potential impact. Where consent is the appropriate basis, such as for a specifically arranged identifiable promotional feature, we will request it separately. We take particular care with images of children and seek appropriate parent or guardian involvement where required.

Buying a ticket or attending the festival does not amount to blanket consent to every use of your image, and does not remove your data protection rights.

You may raise a concern or object to relevant processing by contacting us before the event or speaking to staff on the day. We will consider the circumstances, explain the outcome and make reasonable efforts to accommodate requests. If consent is the basis for a particular use, you may withdraw it. We cannot guarantee removal of copies already independently shared or published by others, but will explain what action we can take.

Other attendees may take their own photographs or videos. Their independent use of those images is not controlled by us.

9. YOUR DATA PROTECTION RIGHTS

Depending on the circumstances, you have rights to:

• Access your personal data.
• Correct inaccurate or incomplete information.
• Request erasure of your data.
• Restrict certain processing.
• Object to processing based on legitimate interests.
• Receive eligible information in a portable format.
• Withdraw consent where processing relies on consent.
• Complain to the Information Commissioner's Office (ICO).

You have an absolute right to object to your personal data being used for direct marketing. Other rights may be subject to conditions or lawful exemptions.

Contact us using Section 11 to make a request. We may ask for proportionate information to verify your identity or locate the relevant records. We will respond within the time limits required by data protection law and explain any applicable extension or exemption.

10. DATA SECURITY

We use appropriate technical and organisational measures to protect personal data, including access restrictions, secure transmission where appropriate, staff and supplier controls, and limiting the information we collect and share.

Security measures are reviewed in light of the information involved and the risks to individuals. No online service can guarantee absolute security. Please avoid sending unnecessary sensitive information and contact us if you suspect your information has been compromised.

11. CONTACT DETAILS

Data protection enquiries and rights requests:
dataprotection@25eightevents.com

General enquiries:
info@25eightevents.com

These contact channels are managed by 25Eight Events Ltd on behalf of Aurora Music Corporation Ltd.

Main event and ticket bookings:
Strawberry Fields on Ontick

Glamping bookings:
Strawberry Fields Glamping on Ontick

Supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

You may complain directly to the ICO. We would also welcome the opportunity to investigate and address your concerns.

12. CHANGES TO THIS POLICY

We may update this policy to reflect changes to our services, suppliers or legal obligations. The current version will be available on our website with the updated date above. Where appropriate, we will bring significant changes to your attention.