Skip to main content

// SYS.DIR: DATA_POLICY

PRIVACY

[ YOUR DATA, PLAINLY ]

This is what we collect, why, who touches it, how long we keep it, and what you can make us do about it. No filler. If something here is unclear, email info@khaotic.uk and we will answer it.

01Who we are

Khaotic Events Ltd is the data controller. Registered in Scotland, company number SC788184.

Registered office: [ PENDING REGISTERED OFFICE ]

Contact for anything in this notice, including any request about your own data: info@khaotic.uk

ICO registration: [ PENDING ICO NUMBER ]

02What we hold, and why

Everything we hold, the legal basis for holding it, and how long it stays.

  • Mobile number, and email if you give one, for the SMS list

    Lawful basisYour consent, and PECR reg. 22

    Kept forUntil you opt out

  • The record of that consent: when, from which form, and the exact wording you agreed to

    Lawful basisLegal obligation to be able to evidence consent

    Kept for2 years after you opt out

  • Merch orders: name, delivery address, email, what you bought

    Lawful basisPerformance of our contract with you

    Kept for6 years, for tax

  • Rep and campaign link clicks: country, browser, referring page, timestamp, rep code

    Lawful basisOur legitimate interest in knowing which reps sell tickets

    Kept for12 months

  • IP address, when a form is submitted, purely to rate-limit abuse

    Lawful basisOur legitimate interest in keeping the forms usable

    Kept for1 hour

  • Photographs and video from our events, which may show you

    Lawful basisOur legitimate interest in documenting and promoting our events

    Kept forUntil you ask us to remove an image

  • Ticket buyer details passed to us by Skiddle

    Lawful basisOur legitimate interest in running the event you bought a ticket for

    Kept for12 months after the event

// We never ask for anything we do not need. There is no account to create, no profile built about you, and no advertising network involved.

03The SMS list

If you joined the list, Khaotic Events Ltd sends you text messages about ticket drops, presales and first access to our own events and merch. Expect a few a month, more in the week before a show. We do not send anything on behalf of other promoters, and we never sell, rent or share the list.

Getting off it. Every message we send has an opt-out link at the bottom that is unique to you. Open it once and you are off, immediately, with no confirmation step. You can also email info@khaotic.uk and we will do it for you.

Who actually sends it. The messages are delivered by Twilio on our instruction. Twilio is based in the United States, so see section 05.

The list is for people aged 18 or over, because our events are. We ask you to confirm that when you sign up.

04Who else touches it

We use a small number of companies to run the site and the list. They process data on our instructions only, under contract, and none of them may use it for their own purposes.

  • Cloudflare
    Runs the signup endpoint and stores the list. Also sits in front of our short links.
  • Twilio
    Delivers the text messages. United States.
  • Shopify
    Runs the merch shop and its checkout. Canada and United States. Your card details go to Shopify and never reach us.
  • Vercel Inc.
    Hosts this website.
  • Skiddle
    Sells our event tickets. When you buy a ticket you are contracting with Skiddle, under their terms and their privacy policy. They pass us buyer details so we can run the event.

// There is no analytics product, no advertising pixel and no session recorder on this site. We have not installed any, and we do not plan to.

05Data leaving the UK

Twilio and Shopify process data outside the UK, mainly in the United States. Where that happens we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, which is the mechanism UK law provides for exactly this, and which forms part of our contract with each of them.

You can ask us for details of the safeguards that apply to any particular transfer.

06What we store in your browser

No advertising or analytics cookies, which is why this site has no cookie banner. There are four small items of local storage, and this is all of them:

  • khaotic_cart_id // Your merch basket, so it survives a page reload.
  • khaotic_list_subscribed // Set once you join the list, so the signup popup never bothers you again.
  • khaotic_list_dismissed_at // The time you last closed that popup, so it stays shut for a day.
  • khaotic-booted // Clears when you close the tab. Stops the intro animation replaying on every page.

Clearing your browser storage removes all four. Nothing breaks, and the popup will simply treat you as a new visitor.

Shopify sets its own cookies on its checkout, which is a separate site under its own privacy policy.

07Photography at our events

We photograph and film our events, and the gallery publishes some of it. Crowd shots mean you may be recognisable. We do this on the basis of our legitimate interest in documenting and promoting the events, and we do not use face recognition or tag anyone.

If you are in a photo and want it gone, email info@khaotic.uk with enough detail to find it. We will take it down. You do not need to give a reason.

08What you can make us do

Under UK data protection law you have the following rights. All of them are free, and we will answer within one month.

  • AccessGet a copy of everything we hold about you.
  • RectificationHave anything wrong corrected.
  • ErasureHave it deleted, where we have no overriding reason to keep it.
  • RestrictionHave us stop using it while a dispute is sorted out.
  • ObjectionObject to our legitimate-interest processing, including the link tracking and the photography.
  • PortabilityGet the data you gave us in a machine-readable form.
  • Withdraw consentLeave the SMS list at any time. Withdrawing does not affect messages already sent.

Ask by emailing info@khaotic.uk. We may ask you to confirm the mobile number or email you signed up with, so we do not hand your data to someone else.

09If we get it wrong

Tell us first and we will try to fix it. You also have the right to complain directly to the Information Commissioner's Office, the UK data protection regulator, at any point. You do not have to come to us first.

ico.org.uk/make-a-complaint // helpline 0303 123 1113

10Changes to this notice

This revision is 2026-10-01. If we change anything that affects what we do with your data, we will update this page and its revision date. If the change is significant and we hold your contact details, we will tell you rather than leave you to notice.