M4LTA Festival
www.m4lta.com
Last updated: 19 June 2026
1. Introduction
M4LTA Festival (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at www.m4lta.com, purchase tickets, create an account, or otherwise interact with us.
Please read this policy carefully. By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.
2. Who We Are
M4LTA Festival is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Email: info@m4lta.com
Website: www.m4lta.com
3. Information We Collect
3.1 Information You Provide Directly
We collect personal information that you voluntarily provide to us, including:
- Contact details: name, email address, phone number
- Account information: username, password
- Ticket and booking details: ticket type, quantity, billing address
- Payment information: credit/debit card details (processed securely via our payment provider — we do not store full card numbers)
- Communications: messages you send us via contact forms or email
- Newsletter preferences: whether you have opted in to receive marketing communications
3.2 Information Collected Automatically
When you visit our website, we may automatically collect certain technical information, including:
- IP address and approximate location (country/city level)
- Browser type, version, and operating system
- Pages visited, time spent on pages, and links clicked
- Referring website or URL
- Cookie identifiers and similar tracking technologies (see Section 6)
4. How We Use Your Information
We use the information we collect for the following purposes:
- To process ticket purchases, bookings, and payments
- To create and manage your user account
- To send booking confirmations, e-tickets, and important event updates
- To respond to your enquiries and provide customer support
- To send you marketing emails and newsletters, where you have opted in
- To improve our website, services, and user experience through analytics
- To comply with legal obligations and prevent fraud
- To enforce our terms and conditions
5. Legal Basis for Processing (UK & EU Users)
Under the UK General Data Protection Regulation (UK GDPR) and the EU GDPR, we process your personal data on the following legal grounds:
- Contract: processing necessary to fulfil your ticket purchase or account registration
- Legitimate interests: website analytics, fraud prevention, and improving our services
- Consent: sending marketing communications and placing non-essential cookies (you may withdraw consent at any time)
- Legal obligation: retaining financial records as required by law
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and gather analytics. Cookies are small text files placed on your device. We use:
- Essential cookies: required for the website to function (e.g. shopping cart, login sessions)
- Analytics cookies: to understand how visitors use our website (e.g. Google Analytics)
- Marketing cookies: to deliver relevant advertising and measure campaign effectiveness
You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings. Please note that disabling essential cookies may affect website functionality.
7. Sharing Your Information
We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:
- Payment processors: to securely process transactions (e.g. Stripe, PayPal)
- Email service providers: to send booking confirmations and newsletters
- Analytics providers: such as Google Analytics, to analyse website usage
- IT and hosting providers: who support our website and systems
- Law enforcement or regulatory authorities: where required by law or to protect our legal rights
All third-party providers are required to handle your data in accordance with applicable data protection law and our instructions.
8. International Data Transfers
Some of our third-party service providers may be based outside the UK or European Economic Area (EEA). Where we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities.
9. Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy or as required by law. Specifically:
- Account data: retained for as long as your account is active, plus a reasonable period thereafter
- Transaction records: retained for at least 7 years for tax and accounting purposes
- Marketing preferences: retained until you withdraw consent or request deletion
- Website analytics: typically retained in aggregated or anonymised form
10. Your Rights
Depending on your location, you may have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your data in certain circumstances
- Right to restrict processing: to ask us to limit how we use your data
- Right to data portability: to receive your data in a structured, machine-readable format
- Right to object: to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time
To exercise any of these rights, please contact us at info@m4lta.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK at www.ico.org.uk, or your local supervisory authority.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
You are responsible for keeping your account credentials confidential. Please notify us immediately at info@m4lta.com if you suspect any unauthorised use of your account.
12. Children’s Privacy
Our website and services are not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us at info@m4lta.com and we will delete it promptly.
13. Third-Party Links
Our website may contain links to third-party websites or social media platforms. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page with a revised “Last updated” date. Where changes are significant, we may notify you by email or a prominent notice on our website.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
M4LTA Festival
Email: info@m4lta.com
Website: www.m4lta.com
