Krome Events Logo

Privacy Policy

Last Updated: 04 February 2026

1. Introduction

Krome Events ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website krome.events (the "Website") or purchase tickets or services from us.

This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Website or providing us with your personal information, you consent to the collection and use of information in accordance with this Privacy Policy.

2. Data Controller

Krome Events is the data controller for the personal information we collect. Our contact details are:

3. Information We Collect

3.1 Information You Provide to Us

We may collect the following personal information when you:

  • Purchase tickets: Name, email address, phone number, payment information
  • Subscribe to our newsletter: Name, email address
  • Contact us: Name, email address, phone number, and any information you provide in your message
  • Purchase membership: Name, email address, payment information

3.2 Information We Collect Automatically

When you visit our Website, we may automatically collect certain information, including:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on pages
  • Referring website addresses
  • Cookies and similar tracking technologies

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To process and fulfil your ticket purchases (Legal basis: Contract)
  • To process membership purchases and provide membership benefits (Legal basis: Contract)
  • To send you event updates and important information about your tickets (Legal basis: Contract)
  • To send you marketing communications (with your consent) (Legal basis: Consent)
  • To respond to your enquiries and provide customer support (Legal basis: Legitimate interest)
  • To improve our Website and services (Legal basis: Legitimate interest)
  • To comply with legal obligations (Legal basis: Legal obligation)
  • To prevent fraud and ensure security (Legal basis: Legitimate interest)

5. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

  • Contract: To fulfil our contractual obligations to you (e.g., processing ticket purchases)
  • Consent: Where you have given clear consent for us to process your data (e.g., marketing communications)
  • Legitimate Interest: For our legitimate business interests (e.g., improving our services, preventing fraud)
  • Legal Obligation: To comply with legal requirements (e.g., tax records, health and safety)

6. How We Share Your Information

We may share your personal information with:

  • Payment processors: To process your payments (e.g., Stripe)
  • Event venues: To facilitate event entry and management
  • Service providers: Who assist us in operating our Website and conducting our business (e.g., email service providers, hosting providers)
  • Legal authorities: When required by law or to protect our rights

We do not sell your personal information to third parties.

All third parties with whom we share your data are required to protect your information and use it only for the purposes we specify.

7. Data Retention

We will retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Ticket purchase data: Retained for 7 years for accounting and tax purposes
  • Marketing consent: Retained until you withdraw consent or unsubscribe
  • Contact enquiries: Retained for 2 years after last contact
  • Website analytics: Retained for 26 months (Google Analytics default)

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you
  • Right to Rectification: You can request correction of inaccurate or incomplete data
  • Right to Erasure: You can request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: You can request that we limit how we use your data
  • Right to Data Portability: You can request a copy of your data in a machine-readable format
  • Right to Object: You can object to processing based on legitimate interests
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data correctly. Visit ico.org.uk for more information.

9. Cookies

Our Website uses cookies to enhance your experience. Cookies are small text files stored on your device when you visit our Website.

We use cookies for:

  • Essential website functionality
  • Analytics to understand how visitors use our Website
  • Marketing purposes (with your consent)

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Website.

10. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

We use secure payment processors (e.g., Stripe) for all payment transactions. We do not store your full payment card details on our servers.

11. International Data Transfers

Some of our service providers may be located outside the UK/EEA. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the ICO
  • Adequacy decisions by the UK government

12. Children's Privacy

Our Website and events are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: