Privacy Policy

Last updated: June 2026

Who We Are

Borders Music Festival is a Scottish Charitable Incorporated Organisation registered with the Office of the Scottish Charity Regulator (OSCR) under charity number SC049870. We are the data controller for the personal information we process.

Contact: enquiries@bordersmusicfestival.com
Website: bordersmusicfestival.com
Address: Melrose, Scottish Borders

What Information We Collect

Newsletter and mailing list sign-ups

When you sign up to receive news and updates from us, we collect your first name, last name and email address. This information is used solely to send you festival news, programme announcements and updates.

Contact form submissions

When you contact us via our website, we collect the information you provide — typically your name, email address and message — in order to respond to your enquiry.

Event registration and ticket purchases

When you register for a festival event or purchase tickets, we collect your name, email address and any other information required to process your booking. This may include payment information, which is processed securely by our payment provider and is not stored by us.

Patron and Friend sign-ups

If you become a Patron or Friend of the festival, we collect your name, contact details and payment information necessary to process your membership and provide associated benefits.

Website usage data

We use Google Analytics to collect anonymised information about how visitors use our website, including pages visited, time spent on the site and general location data. This helps us improve our website and understand our audience. This data does not identify you personally.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent — for newsletter sign-ups and marketing communications. You can withdraw consent at any time.
• Contract — to process ticket purchases, event registrations and Patron/Friend memberships.
• Legitimate interests — to respond to enquiries, improve our website and administer the charity.
• Legal obligation — where we are required to process data to comply with the law.

How We Use Your Information

• To send you festival news, programme announcements and updates (with your consent)
• To process event registrations and ticket purchases
• To respond to enquiries and requests
• To administer Patron and Friend memberships
• To improve our website and communications
• To comply with our legal and regulatory obligations as a Scottish charity

How We Share Your Information

We do not sell, trade or rent your personal information to third parties. We may share your information with:

• Mailchimp (Intuit Inc.) — to manage our mailing list and send newsletters
• WPForms — to process form submissions on our website
• Google Analytics — for anonymised website analytics
• Cloudflare — for website security and performance
• Payment processors — to securely process ticket and membership payments
• OSCR — as required by charity law

All third-party processors are required to process your data securely and in accordance with UK data protection law.

How Long We Keep Your Information

• Mailing list data — until you unsubscribe or request deletion
• Contact form submissions — up to 12 months, or until the enquiry is resolved
• Booking and payment records — 7 years, as required by HMRC and charity accounting regulations
• Patron/Friend records — for the duration of membership plus 3 years

Your Rights

Under UK GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restrict processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at enquiries@bordersmusicfestival.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Cookies

Our website uses cookies to ensure it functions correctly and to help us understand how it is used. We use the following types of cookies:

• Essential cookies — necessary for the website to function. These cannot be disabled.
• Analytics cookies — Google Analytics cookies that collect anonymised usage data. These can be disabled in your browser settings.
• Third-party cookies — Mailchimp and Cloudflare may set cookies in accordance with their own privacy policies.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

Data Security

We take the security of your personal data seriously. Our website is hosted on a secure UK-based server with SSL encryption. We use Cloudflare for additional security and DDoS protection. Access to personal data is restricted to authorised personnel only.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay.

International Transfers

Some of our third-party processors (including Mailchimp and Google Analytics) may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email where we hold your contact details, and will always post the latest version on this page with an updated date.