Privacy Policy

1. Introduction

Heaven Festivals, operated by Heaven Eco Hub Ltd, is committed to protecting your personal data and respecting your privacy. This policy explains what information we collect, how we use it, and your rights in relation to it.

By using the Heaven Festivals website and purchasing tickets or engaging with our services, you acknowledge that you have read and understood this Privacy Policy. We process your data lawfully, fairly and transparently in accordance with applicable UK and EU data protection legislation, including the UK GDPR.

Heaven Eco Hub Ltd is the data controller for the purposes of this policy. We take our obligations seriously and have implemented appropriate technical and organisational measures to safeguard your information.

2. Information We Collect

We collect the following categories of personal data when you interact with our platform:

• • Identity data — full name and date of birth where age verification is required
• • Contact data — email address and, where provided, phone number
• • Payment data — card transactions are processed securely by Stripe; we do not store card numbers or CVV details on our systems
• • Account data — username, password (hashed), $HEAVEN token wallet address if connected
• • Device and browser data — IP address, browser type, operating system, pages visited, time on site
• • Communications — emails or messages you send to our support or enquiry teams

We collect only the minimum data necessary for the purposes described in this policy. We do not collect sensitive personal data such as health or biometric information unless explicitly required and with your express consent.

3. How We Use Your Information

Your personal data is used for the following purposes:

• • Ticket fulfilment — processing your purchase, issuing e-tickets, and managing entry to events
• • Communications — sending booking confirmations, event updates, and essential service notifications
• • Marketing — sending newsletters and promotional content where you have opted in; you may unsubscribe at any time
• • Service improvement — analysing usage patterns to improve our website, app, and event experiences
• • $HEAVEN token account management — linking your wallet address to your account to enable token-based benefits and access
• • Legal compliance — meeting our obligations under applicable law, including financial record-keeping

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• • Payment processors — Stripe, to securely handle card transactions
• • Event venue operators — limited contact and booking data shared solely to facilitate event access and safety
• • Legal authorities — where required by law, court order, or to protect the rights and safety of others

All third-party service providers are bound by data processing agreements and are required to handle your data in accordance with applicable data protection law.

5. Cookies

We use cookies to enhance your browsing experience and improve our services. The types of cookies we use include:

• • Essential cookies — necessary for the website to function correctly; these cannot be disabled
• • Analytics cookies — we use Google Analytics with IP anonymisation to understand how visitors use our site
• • Preference cookies — remember your language, region, and display settings across sessions

Cookie consent is managed via our cookie banner on your first visit. You may update your preferences at any time. For full details, please see our Cookie Policy.

6. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• • Right of access — request a copy of the data we hold about you
• • Right to rectification — ask us to correct inaccurate or incomplete data
• • Right to erasure — request deletion of your data where there is no overriding legal basis to retain it
• • Right to data portability — receive your data in a structured, machine-readable format
• • Right to object — object to processing based on legitimate interests or for direct marketing
• • Right to restrict processing — ask us to limit how we use your data in certain circumstances

To exercise any of these rights, please contact us at data@heavenecohub.com. We will respond within 30 days.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• • Financial and transactional data — retained for 7 years in accordance with HMRC requirements
• • Marketing preferences and communications history — retained for 2 years from last interaction
• • Account data — retained while your account is active, then deleted within 90 days of closure request