PRIVACY POLICY
1. Introduction
DNBA Entertainment Ltd (“we”, “us”, “our”), trading as DnB Allstars, is committed to protecting the privacy and personal data of everyone who interacts with our brand. This includes visitors to our websites, attendees at our events, subscribers to our marketing communications, and anyone who engages with us through social media or third-party platforms.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).
We are the data controller for the personal data described in this policy. Our registered address is 5-9 Headstone Road, Harrow, England, HA1 1PD. For any data protection enquiries, please contact privacy@dnballstars.com.
This policy applies to all personal data processed through our websites (including dnballstars.com, dnballstars.eu, and any regional or event-specific domains), our ticketing platforms, our SMS and WhatsApp messaging services, our email newsletters, our event registration and entry systems, and any other channels through which we collect personal data.
By providing your personal data to us, you acknowledge that we will process it in accordance with this policy. We do not rely on your continued use of our website as a form of consent. Where consent is required, we will always obtain it through a clear, affirmative action from you.
2. Personal Data We Collect
2.1 Information You Provide Directly
When you sign up for our mailing list, SMS updates, or WhatsApp notifications, we collect your name, email address, phone number, and your communication preferences.
When you purchase tickets to our events, we collect your name, email address, billing address, and payment information. Payment details are processed securely by our payment providers and are not stored by us directly.
When you contact us with enquiries, enter competitions, apply for artist bookings, guest list requests, or press accreditation, we collect whatever information you provide in your correspondence.
2.2 Information Collected Automatically
When you visit our websites, we automatically collect certain technical data through cookies and similar technologies. This includes your IP address, browser type and version, operating system, referring website, pages visited and time spent on each page, device type, and approximate geographic location based on your IP address.
2.3 Information From Third Parties
We may receive personal data about you from ticketing platforms when you purchase tickets to our events, from social media platforms when you interact with our content or advertising, and from event venues that share attendee information with us for event management purposes.
3. How We Use Your Personal Data
We process your personal data for the following purposes:
| Purpose | Lawful Basis |
|---|---|
| Event ticketing and management | Performance of a contract |
| SMS, WhatsApp, and email marketing | Your consent (PECR Regulation 22) |
| Website analytics to improve user experience | Legitimate interests |
| Targeted and lookalike advertising audiences on social media | Your consent |
| Responding to your enquiries | Legitimate interests |
| Tax, accounting, and regulatory compliance | Legal obligation |
| Event safety and fraud prevention | Legitimate interests |
Where we rely on legitimate interests, we have carried out a balancing test to ensure our interests do not override your fundamental rights and freedoms. You can request details of this assessment by contacting privacy@dnballstars.com.
4. Consent for Marketing Communications
Under PECR Regulation 22 and UK GDPR, we obtain your explicit, freely given, specific, informed, and unambiguous consent before sending you marketing communications via SMS, WhatsApp, email, or any other electronic channel.
We collect consent through dedicated sign-up pages where you actively opt in by entering your details and clicking a clear subscribe button. These pages state what you are signing up for, which communication channels will be used, and how frequently you can expect to hear from us. We never use pre-ticked boxes. We never treat your use of our website or purchase of a ticket as implied consent for marketing.
We maintain records of all marketing consents, including the date and time consent was given, the method used, the specific wording presented to you, and the channels you consented to.
4.1 Withdrawing Consent
You have the right to withdraw your consent at any time, and it is as easy as giving it.
- You can unsubscribe from SMS messages by replying STOP to any message.
- You can unsubscribe from emails by clicking the unsubscribe link in any email.
- You can opt out of WhatsApp messages by replying STOP or blocking our number.
- You can also contact us at privacy@dnballstars.com to be removed from all marketing lists.
We will action all withdrawal requests within 48 hours. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
5. Cookies and Tracking Technologies
Our websites use cookies and similar tracking technologies:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly necessary | Site functionality and security | No (PECR exempt) |
| Analytics | Understanding how visitors use our sites | Yes |
| Marketing / Advertising | Conversion tracking and targeted advertising | Yes |
| Functional | Remembering your preferences | Yes |
| Cart tracking | Tracking items in your shopping cart for cart reminder messages via SMS or email | Yes |
When you first visit our website, we present a cookie consent banner that allows you to accept or reject non-essential cookies. You can change your cookie preferences at any time by clicking the cookie settings link in the footer of our website, or by managing cookies through your browser settings.
6. Who We Share Your Data With
We share your personal data with third-party service providers who process data on our behalf. These include our email, SMS, and WhatsApp marketing platform, social media advertising platforms, our website hosting provider, ticketing platforms, payment processors, and analytics providers. Each of these providers operates under a Data Processing Agreement (DPA) that meets the requirements of UK GDPR Article 28.
We may also share your personal data with law enforcement agencies, regulatory bodies, or courts where legally required, and with professional advisers bound by duties of confidentiality. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction and we will notify you of any such change.
We will never sell your personal data to third parties for their own marketing purposes. This includes your text messaging opt-in data and consent, which will not be shared with any third parties.
7. Advertising and Audience Targeting
With your consent, we use your personal data to create targeted advertising audiences on social media platforms. This involves uploading hashed (encrypted) versions of email addresses or phone numbers so that we can show you relevant advertisements about our events and releases. These platforms may also use this data to create lookalike audiences of people with similar interests.
You can opt out of being included in these audiences at any time by contacting privacy@dnballstars.com or by adjusting your ad preferences directly on the relevant platform.
8. International Data Transfers
Some of our service providers are based outside the United Kingdom. When we transfer your personal data internationally, we ensure appropriate safeguards are in place as required by UK GDPR Chapter 5. These safeguards include transfers to countries with an adequacy decision from the UK Government, and where no adequacy decision exists, we rely on Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner or other approved transfer mechanisms.
You can request a copy of the relevant safeguards by contacting privacy@dnballstars.com.
9. Data Retention
We keep your personal data only for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Marketing subscriber data | 12 months from last engagement |
| Ticket purchase records | 6 years (tax and accounting) |
| Consent records | 6 years (legal compliance) |
| Website analytics data | Up to 24 months |
| Customer enquiries | 24 months from resolution |
| Event entry and security data | 12 months from event date |
When data reaches the end of its retention period, it is securely deleted or anonymised. Anonymised data that cannot identify you may be retained indefinitely for statistical purposes.
10. Your Rights Under UK GDPR
Under UK GDPR, you have the following rights:
| Right | Article | Description |
|---|---|---|
| Access | Article 15 | Request a copy of the personal data we hold about you |
| Rectification | Article 16 | Have inaccurate data corrected |
| Erasure | Article 17 | Have your data deleted in certain circumstances |
| Restriction | Article 18 | Restrict how we process your data |
| Portability | Article 20 | Receive your data in a portable format |
| Object | Article 21 | Object to processing based on legitimate interests |
You have an absolute right to object to direct marketing at any time. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, contact privacy@dnballstars.com. We will respond within one month. If your request is complex, we may extend this by a further two months but will let you know within the initial period. We may ask you to verify your identity before fulfilling your request.
11. Children’s Privacy
Our marketing communications and online sign-up pages are not directed at children under 16. We do not knowingly collect personal data from children under 16 for marketing purposes. Some of our events may admit individuals under 18 where accompanied by an adult, but ticket purchases are made by adults and the personal data collected relates to the adult purchaser. If we become aware that we have collected data from a child under 16 without appropriate parental consent, we will delete that data as quickly as possible.
12. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, access controls, regular security reviews, ensuring our processors maintain appropriate security standards through DPAs, and secure deletion of data when no longer required.
13. Complaints
If you are unhappy with how we have handled your personal data, please contact us at privacy@dnballstars.com so that we can try to resolve the issue.
If you remain dissatisfied, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). You can contact the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, by telephone on 0303 123 1113, or online at ico.org.uk/make-a-complaint.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on our website with a revised date. For significant changes that affect how we process your data, we will make reasonable efforts to notify you directly.
15. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, please contact us at privacy@dnballstars.com or write to DNBA Entertainment Ltd, 5-9 Headstone Road, Harrow, England, HA1 1PD. We aim to respond to all enquiries within 5 working days.