Our website address is: https://heighingtonchristmasmarket.co.uk.
All information collected by Heighington Christmas Market shall be used only in relation to the Market.
We do not keep contact information from any enquiries; we never share any contact details with other parties without your express permission.
Details of stallholders shall only be kept for a maximum of 2 years from the point of booking, and communications will be limited to purposes of planning the Market only, except for notification of other similar events held in Heighington that may be of interest. After 2 years, your details shall be deleted – please contact us with any issues.
Contact details for non-stall holders (such as those that have taken part or assisted in the market in other ways) will be held on file until they are no longer required or until you ask to have them removed – these details will only be used for communications about the Market and will never be shared unless consent has been given.
Heighington Christmas Market can be contacted on HeighingtonChristmasMarket@gmail.com for queries in regard to this policy
The processing of personal data is governed by the Data Protection Act of 2018 (GDPR). This puts certain obligations on the committee in terms of managing personal data which is provided as part of the event.
Personal data relates to a living individual who can be identified from that data. Identification can be made solely by that information, or in conjunction with other information in the data controller’s possession or likely to come into such possession.
Our policy is reviewed on an annual basis to ensure it is lawful, transparent and fair in its approach.
Heighington Christmas Market (HCM) committee is the data controller in this instance. This means that it decides how your personal data is managed and for what purposes.
Collecting Data:
When collecting data, we must ensure that:
It is used fairly, lawfully and in a transparent manner.
It is collected for specific and legitimate purposes.
It is adequate, relevant, and collection of data is limited to what is necessary.
It is accurate and kept up to date.
It is kept for no longer than necessary.
It is handled according to the data protection rights of the individual.
It is stored in a way that protects the data against unlawful processing.
Collecting Personal Data:
How we get the personal information:
The personal information we process is provided to us directly by you when you interact with the committee e. g. through applications to attend the market as a trader, caterer, entertainer or volunteer.
The type of personal information we collect might include:
Your name and contact details including email address and telephone number.
Your communication preferences.
Your bank or payment details –we do not store your payment card or bank details on a long-term basis. These are destroyed as soon as they are no longer needed (for example, after the processing of a refund).
We use your personal data for the following purposes:
To enable the committee to run the annual event.
To administer event records.
To manage our volunteers.
To maintain our records and accounts.
To respond to an enquiry or request you have made to us.
We store your personal information:
Your information is securely stored at all times and is only available to committee members. Your information will be treated as strictly confidential and is only shared with members of the committee to carry out the running of the event.
We do not sell or share your personal data with other organisations or third parties
We only retain your personal information for up to two years after the calendar year to which they relate.
Your rights and your personal data:
Unless subject to an exemption under GDPR, you have the following rights with respect to your personal data:
• The right to request a copy of your personal data which the committee holds about you.
• The right to request that the committee corrects any personal data if it is found to be inaccurate or out of date.
• The right to request your personal data is erased where it is no longer necessary for the committee to retain such data.
• The right to request that the data controller e. g. HCM provides the data subject with his/her personal data.
How to complain:
If you have any concerns about our use of your personal data, in the first instance, please contact the committee at HeighingtonChristmasMarket@gmail.com
You can also complain to the ICO if you are unhappy with how we have used your data.
Their address is:
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel No 0303 1123 1113
ICO website- https://www.ico.org.uk
Reviewing this Policy
The holder of the Operations Role is the document owner. The document owner is responsible for reviewing and where necessary amending this document as required but at least annually.
Last updated@ 16th April 2025