At Ey Up Maiden, we are committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable laws.
1. Who We Are
Ey Up Maiden is a UK-based Iron Maiden tribute band. For the purposes of data protection law, we are the "data controller" of your personal information.
2. What Information We Collect
- Contact Information: Name, email address, phone number (if you contact us by email, through our booking form or on Facebook Messenger)
- Booking Details: Event type, venue, event date, budget and requirements (if you send us a booking enquiry)
- Order Details: Name, email address, delivery address, phone number, the items and sizes you order, and the amount paid (if you buy merchandise from our shop). Card payments are handled by Stripe, so we never see or store your full card number.
- Website Usage Data: IP address, browser type, device information, pages visited (collected via cookies and analytics tools)
3. How We Use Your Information
- To respond to your enquiries and booking requests
- To process, post and, if needed, contact you about your shop orders, including returns and refunds. We use your phone number only for questions about delivering your order, and we will not use your details to send you marketing.
- To protect our booking form from spam and automated abuse
- To improve our website and services
- To comply with legal obligations
4. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Your consent (e.g., for non-essential cookies)
- Performance of a contract (e.g., booking a gig or fulfilling a shop order)
- Compliance with legal obligations (e.g., keeping sales records for tax purposes)
- Our legitimate interests (e.g., replying to enquiries, keeping our booking form free of spam, improving our services)
5. How We Share Your Information
We do not sell or rent your personal data. We may share your information with:
- Service providers (e.g., email and website analytics providers)
- Stripe, our payment provider, which processes shop payments and collects your order and delivery details on our behalf. Stripe also uses some of this information for its own purposes, such as fraud prevention and meeting its legal obligations, as described in the Stripe Privacy Policy.
- Resend, which delivers booking form enquiries to our email inbox (the details you enter in the form), as described in the Resend Privacy Policy.
- Cloudflare, whose Turnstile service checks that booking form submissions come from a person rather than a bot. To do this it processes technical information about your browser and device, and your IP address. See the Cloudflare Privacy Policy.
- Meta, if you message us on Facebook Messenger. Those messages are handled under the Meta Privacy Policy.
- Royal Mail, to deliver your order (your name and delivery address)
- Law enforcement or regulatory authorities if required by law
6. International Data Transfers
Your data may be transferred and stored outside the UK or European Economic Area (EEA), for example by Stripe, Resend, Cloudflare and Meta, which process some data in the United States. We ensure appropriate safeguards are in place to protect your information.
7. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy or as required by law.
Booking enquiries are kept in our email inbox for as long as we need them to deal with your enquiry and any booking that follows. Submissions our spam filters block are not emailed to us or stored.
Shop order records are held in our Stripe account. We keep them for as long as UK tax rules require us to keep sales records (normally around six years). Once your order is complete, we only use them for tax and accounting, or to deal with a query about your order. Stripe may keep its own copy of payment records for longer, as set out in the Stripe Privacy Policy.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent at any time (where applicable)
- Request data portability
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise your rights, please contact us at booking@eyupmaiden.com.
9. Cookies
We use cookies and similar technologies to:
- Enable website functionality
- Remember your preferences
- Analyze website usage
- Provide relevant content
For more details, see our Cookie Policy.
10. Data Security
We take appropriate technical and organisational measures to protect your data, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Data minimisation and protection
11. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their privacy policies.
12. Children's Privacy
Our website is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on our website
- Updating the "Last updated" date above
14. Contact Us
If you have any questions or concerns about this Privacy Policy or your data, please contact us at booking@eyupmaiden.com.