Privacy Policy · NME Music

UK GDPR compliant Last Updated: 20 July 2026

1. Who We Are

NME Music is a UK-based event hosting and management company. We organise our own events and provide event management services to our clients. We are committed to protecting your privacy and handling your personal data transparently and securely in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, NME Music is the Data Controller for the personal data we collect and process for our own business purposes.

2. Scope of This Policy

This Privacy Policy applies to personal data we collect:

• When you use our website.
• When you register for, attend, or participate in events we host or manage.
• When you use our event management services as a client.
• When you contact us by email, phone, or post.
• When you subscribe to our mailing list or marketing communications.

This Policy does not apply when we process personal data on behalf of our clients as a Data Processor. In those circumstances, our client is the Data Controller, and their privacy policy will apply.

3. The Personal Data We Collect

Depending on your relationship with us, we may collect the following types of personal data:

A. Event Attendees & Guests

• Contact Data: Full name, email address, postal address, and telephone number.
• Booking & Attendance Data: Ticket purchase information, event preferences, attendance records, and dietary or access requirements (which may constitute special category data).
• Payment Data: Billing address and payment card details (processed securely by our third-party payment processors; we do not store full payment card details).
• Profile Data: Information you choose to provide, such as preferences, feedback, and survey responses.

B. Clients & Business Contacts

• Contact Data: Name, job title, business email address, business phone number, and company address.
• Contract & Transaction Data: Details about contracts, services provided, invoices, and payment history.
• Communication Data: Records of correspondence and interactions with us.

C. Website Visitors

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
• Usage Data: Information about your visit, including pages viewed, clickstream data, and length of sessions.

D. Job Applicants

• Recruitment Data: Information included in your CV, such as name, contact details, employment history, qualifications, and references.

4. How We Collect Your Data

We collect personal data through the following means:

• Direct Interactions: When you register for an event, enquire about our services, contact us directly, or enter into a contract with us.
• Automated Technologies: When you visit our website, we may automatically collect Technical and Usage Data via cookies and similar technologies (please see our separate Cookie Policy for more details).
• Third Parties: We may receive data from ticketing platforms, or from partners we work with to co-host events.

5. How We Use Your Data and the Legal Basis

We will only use your personal data when the law allows us to. The legal bases we rely on are:

• Contractual Necessity: To perform a contract with you (e.g., providing event management services, processing event registrations) or to take steps at your request before entering into a contract (UK GDPR Art. 6(1)(b)).
• Legitimate Interests: For our legitimate business interests, such as managing our business relationships, improving our services, and direct marketing (provided these interests are not overridden by your rights) (UK GDPR Art. 6(1)(f)).
• Legal Obligation: To comply with a legal obligation, such as tax, accounting, or regulatory requirements (UK GDPR Art. 6(1)(c)).
• Consent: Where you have given us clear consent to process your data for a specific purpose, such as sending you marketing communications (UK GDPR Art. 6(1)(a)). You may withdraw your consent at any time.

6. Purposes of Processing

We use your personal data for the following purposes:

Purpose	Data Categories	Legal Basis
Deliver and administer our event hosting and management services to clients.	Contact, Contract, Transaction, Communication	Contractual Necessity / Legitimate Interests
Register attendees for events, facilitate attendance, and manage logistics.	Contact, Booking & Attendance, Payment, Profile	Contractual Necessity / Legitimate Interests / Consent (for special category data)
Manage our commercial relationship with you (e.g., billing, client support).	Contact, Contract, Transaction, Communication	Contractual Necessity / Legal Obligation
Send you marketing communications about our services and events, where you have provided consent or where we rely on legitimate interests.	Contact, Marketing & Communications	Consent / Legitimate Interests
Improve our website, services, and user experience through analytics.	Technical, Usage	Legitimate Interests
Comply with applicable laws and regulations (e.g., tax, health and safety, insurance).	Contact, Transaction, Special Category (if applicable)	Legal Obligation / Legitimate Interests
Detect, prevent, and investigate fraud and security incidents.	Contact, Technical	Legitimate Interests / Legal Obligation

7. Sharing and Disclosure of Personal Data

We do not sell your personal data to third parties. We may share your data in the following circumstances:

• Service Providers & Processors: We engage trusted third-party suppliers who process data on our behalf, such as ticketing platforms, IT systems providers, payment processors, email marketing platforms, and analytics providers. These suppliers are bound by data processing agreements and may only process your data on our instructions.
• Business Partners: Where necessary to deliver our services, we may share data with co-organisers, venues, or other event partners. We will ensure appropriate contractual protections are in place.
• Legal & Regulatory Authorities: We may disclose data where required by law, court order, or regulation, or where necessary to protect our legal rights or the rights of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction.

8. International Transfers of Personal Data

Your personal data may be transferred to, and processed in, countries outside the United Kingdom (UK). Some of our third-party service providers operate outside the UK.

Where we transfer personal data internationally, we ensure that appropriate safeguards are in place in accordance with the UK GDPR, such as:

• Transfers to countries which the UK Secretary of State has determined to offer an adequate level of data protection.
• Use of UK International Data Transfer Agreements (IDTAs) or UK Addenda to the EU Standard Contractual Clauses.

You may request further information about the specific safeguards in place for any international transfer by contacting us at info@nmemusic.co.uk.

9. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting obligations.

Our general retention periods are:

• Client & Contract Records: Up to 7 years from the end of the commercial relationship (to comply with statutory limitation periods and tax obligations).
• Prospect & Marketing Contact Records: Until you unsubscribe or withdraw consent, or up to 3 years from the last interaction.
• Event Attendee Data: Up to 3 years after the event for administrative and feedback purposes.
• Website Analytics Data: Up to 26 months from collection (standard analytics tool retention).
• Correspondence & Enquiry Records: Up to 3 years from the last contact.

10. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of Access (Subject Access Request): You have the right to request a copy of the personal data we hold about you, together with information about how and why we process it.
• Right to Rectification: You have the right to request correction of inaccurate personal data or completion of incomplete data.
• Right to Erasure (‘Right to be Forgotten’): You may request deletion of your personal data where there is no compelling reason for its continued processing (this right is not absolute and may be limited by legal obligations).
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a complaint is being investigated.
• Right to Data Portability: You may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, and to object to the use of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where we rely on consent as the legal basis for processing, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at info@nmemusic.co.uk. We will not charge a fee for handling a rights request and will respond within one calendar month. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or your rights request.

11. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use, the purposes for which we use them, and how to manage your cookie preferences, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website and will apply from the date of publication. Any significant changes will be communicated to you via email or a notice on our website.