Introduction
Rebel International is committed to protecting your personal information and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and manage your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy was last reviewed December 2024 and will be reviewed annually. Any significant changes will be communicated to users via email.

Information We Collect
We collect the following categories of personal data. The purpose for collecting each category is explained at the point of collection. We only collect personal data that is necessary for the purposes specified below and adhere to the principle of data minimization. We evaluate data necessity by assessing whether each data point is essential for fulfilling our stated purposes, considering alternatives, and minimizing collection to only what is strictly required.
•    Identity Data: This includes your name, email address, and postal address. Purpose: This information is necessary to process your ticket bookings and to communicate with you regarding your account and events.
•    Contact Data: This includes your phone number. Purpose: This is collected for customer service purposes only, should you require assistance.
•    Transaction Data: This includes information related to your ticket purchases through DICE, including payment details (processed securely by DICE). Purpose: This data is essential for processing your ticket purchase and providing you with access to your tickets.
•    Technical Data: This includes your IP address, device type, browser type, and other information automatically collected when you interact with our website. This data is collected through cookies and similar technologies see our Cookie Policy below. We also collect information about how you use our website, such as pages visited and features used. Purpose: This data helps us to improve our website performance and user experience.
•    Marketing and Communications Data: This includes your preferences regarding marketing communications. Purpose: We use this data to send you marketing communications and updates about Rebel International events, only if you have given your explicit consent. Explicit consent is recorded and maintained via a clearly marked opt-in checkbox on relevant forms, creating an auditable trail of consent. You can withdraw your consent at any time by clicking the unsubscribe link in our emails, adjusting your cookie preferences in your browser settings, or contacting us directly. Withdrawal of consent will be as easy as providing it.
 

How We Use Your Information
We use your personal data for the following purposes:
•    Processing Ticket Bookings: To fulfill your ticket purchase through our partner, DICE. This includes processing payments, providing access to tickets, and managing your booking. Legal Basis: Contractual necessity.
•    Marketing Communications: To send you marketing communications and updates about Rebel International events via Mailchimp, only if you have given your explicit consent. Legal Basis: Consent.
•    Improving Services: To analyze aggregated data (de-identified where possible) to improve our services and customer experience. Legal Basis: Legitimate interests.
•    Responding to Inquiries: To respond to your inquiries and requests for support. Legal Basis: Legitimate interests.
Legal Basis for Processing Personal Data
We only process your personal data where we have a lawful basis to do so. These bases include:
•    Consent: Where you have explicitly consented to the processing of your data for a specific purpose (e.g., marketing communications). Consent is freely given, specific, informed, and unambiguous.
•    Contractual Necessity: Where processing is necessary to fulfill a contract with you (e.g., ticket purchases).
•    Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., improving services, responding to inquiries), provided such interests do not override your fundamental rights and freedoms.

Data Sharing and Disclosure
We do not sell your personal information to third parties. We may share your information with trusted partners, such as DICE (for processing ticket purchases, including payment details) and Mailchimp (for sending marketing emails, if you have consented). These partners are bound by strict contractual agreements (including data processing agreements compliant with the GDPR) ensuring the protection of your data. These agreements require them to process your data only on our instructions and implement appropriate technical and organizational measures to protect your data, including adherence to the GDPR and any relevant data protection laws. Specific details of these agreements are available upon request.

If your data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission. SCCs are legally binding contracts that ensure the data recipient provides an equivalent level of data protection to that within the EEA. You can request further information about these safeguards by contacting us at rebel@rebelinternational.co.uk.

For more information, please refer to their respective privacy policies:

​

• DICE Privacy Policy

• Mailchimp Privacy Policy

We may also disclose your information if required by law or in response to a valid legal request.

Data Security
We implement robust security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
•    Encryption of sensitive data both in transit (using SSL/TLS) and at rest (using AES-256).
•    Regular security assessments and penetration testing.
•    Access controls using role-based access control.
•    A documented incident response plan.

Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws or regulations. Specific retention periods are as follows:
•    Transaction Data: 7 years. Rationale: This aligns with legal and financial record-keeping requirements. After 7 years, data will be securely deleted.
•    Marketing Data: Until you withdraw your consent. Upon withdrawal of consent, the data will be deleted.
•    Technical Data: 13 months. Rationale: This allows us to analyze website usage trends over a reasonable period to improve functionality and user experience. After 13 months, the data will be aggregated and anonymized or deleted.

Your Rights
You have the following rights concerning your personal data: To exercise any of these rights, please contact us at rebel@rebelinternational.co.uk. We will respond to your request within one month.
•    The right of access: You can request a copy of your personal data we hold.
•    The right to rectification: You can request correction of inaccurate or incomplete personal data.
•    The right to erasure ("right to be forgotten"): You can request deletion of your personal data under certain conditions. We will respond to your request within one month, unless there are compelling legitimate grounds for us to retain the data.
•    The right to restrict processing: You can request limitations on how we process your personal data.
•    The right to data portability: You can request your data in a structured, commonly used format.
•    The right to object: You can object to the processing of your personal data, including profiling for marketing purposes.
•    Rights related to automated decision making and profiling: You have the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently use automated decision-making processes that produce legal effects or significantly affect individuals.
•    Right to complain to a supervisory authority: If you believe your rights have been violated, you have the right to lodge a complaint with a supervisory authority. You can find information on your local supervisory authority through the European Data Protection Board's website, or you can contact the Information Commissioner’s Office (ICO) in the UK: https://ico.org.uk/. 

Children’s Data
Our website is not intended for children, and we do not knowingly collect data relating to children or persons under 18. We employ measures to prevent the collection of data from children, including clear disclaimers on our events stating they are not intended for children under 18.

Cookies and Tracking Technologies
We use cookies and similar technologies on our website to enhance user experience. Cookies help us analyze site usage and improve our services. We obtain your consent before using non-essential cookies. You can manage your cookie preferences through your browser settings and withdraw consent at any time by adjusting these settings. For more information, please see our Cookie Policy below. 

Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of those sites.

Data Breach Notification
In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware of the breach if there is a risk to your rights and freedoms, in accordance with applicable laws and regulations. This notification will detail the nature of the breach, including the type of data involved and the potential consequences for affected individuals.

Changes to This Policy
Rebel International may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of significant changes by posting the new policy prominently on our website and, where appropriate, by email. We encourage you to review the policy regularly.

Contact Us
If you have any questions about this Privacy Policy, your personal data, or our data handling practices, please contact us at:
rebel@rebelinternational.co.uk