Privacy

Last updated: 28 September 2026

This privacy policy explains how Craft Beer Nottingham Ltd, the company that owns and runs the Nottingham Craft Beer Festival ("we", "us", "our"), collects and uses information when you use our website at nottinghamcraftbeer.co.uk (the "Website") and the Nottingham Craft Beer Festival mobile app for Android and iOS (the "App").

The data controller is Craft Beer Nottingham Ltd (company number 11803936), registered office: 1 Fisher Lane, Bingham, Nottingham, United Kingdom, NG13 8BQ. If you have any questions about this policy or your data, email us at festival@nottinghamcraftbeer.co.uk.

The short version

You do not need an account to use the Website or the App, and we never ask for one.
The App can use your location to show you where you are on the festival map. Your location stays on your phone and is never sent to us.
The App sends us anonymous usage statistics, such as which stalls are viewed most, so we can improve the festival. These are not linked to your name, email address, phone number or device identifiers.
If you contact us or sign up to our newsletter, we use your details only for that purpose.
We do not sell your data, and we do not use it for advertising.

Information we collect on the Website

Contact form

When you send us a message through the contact form, we collect your first name, surname, email address, phone number (optional) and your message. We use this only to reply to you. The message is delivered to our inbox by email through Postmark.

If you sign up to our newsletter, we collect your email address (and your name, if you provide it). We store it with our email provider, Twilio SendGrid, and use it only to send you festival news. Every email has an unsubscribe link, and you can unsubscribe at any time.

Spam protection

The contact and newsletter forms use Cloudflare Turnstile to block automated spam. To check that a submission comes from a real person, Turnstile processes technical information about your browser and your IP address.

Cookies and analytics

When you first visit the Website, we ask whether you accept analytics cookies. We load Google Analytics only if you click Accept. Google Analytics tells us how visitors use the Website, for example which pages are popular and roughly where visitors are. If you decline, we do not load Google Analytics or set its cookies. Your choice is stored in your browser's local storage. To change it, clear your browser's site data for our Website and you will be asked again.

Content from other services

Some pages load content from other services, which will receive your IP address when they do:

Google Fonts, for our fonts
OpenStreetMap and CARTO, for map tiles
unpkg and jsDelivr, for website code libraries
YouTube (privacy-enhanced mode) and Vimeo, where videos are embedded on a page

Server logs

Like most websites, our web server keeps standard technical logs, which may include IP addresses. We use them to keep the Website secure and working properly.

Information the App collects

No account needed

The App does not have user accounts. We do not ask for your name, email address or phone number in the App.

Location (optional)

If you allow it, the App uses your device's precise location, and its compass, while the App is open. It uses them to show your position on the festival map relative to the stalls. Your location is processed only on your device. It is never sent to us or anyone else, and we never store it. You can refuse or withdraw location permission at any time in your device settings, and you can still use the rest of the App.

Favourites

Beers, food and stalls you mark as favourites are saved only on your device.

Notifications (optional)

If you allow notifications, the App sets up reminders on your device for festival events. These are local notifications created by the App on your phone. We do not use push notification services and do not collect any device token. You can turn notifications off at any time in your device settings.

Anonymous usage statistics

To understand which parts of the festival and the App are most popular, the App sends us anonymous usage events, including:

which stalls and beers are viewed
favourites added or removed
filters used and search terms entered in the App
links tapped

Each event includes the time, the App version, the platform (Android or iOS) and a random identifier. The App generates this identifier and stores it on your device, so we can tell events from the same installation apart. It is not linked to your identity, advertising ID, device ID, location or IP address, and we do not use it to identify you. Please do not type personal information into the App's search box. Deleting the App deletes this identifier. We keep these statistics for 24 months and then delete them.

Map and festival content

The App downloads festival information, images and map tiles from our servers and from CARTO. Like any internet request, these servers can see your IP address. We do not use it to identify you.

No third-party tracking in the App

The App does not contain advertising, third-party analytics or tracking SDKs, and it does not share data with data brokers.

Our lawful basis for using your data

Consent: Google Analytics cookies on the Website, newsletter emails, and location and notification permissions in the App. You can withdraw consent at any time.
Legitimate interests: replying to your enquiries, anonymous App usage statistics, spam protection and keeping our services secure.

How long we keep data

Contact form messages: as long as needed to deal with your enquiry, and no longer than 2 years.
Newsletter subscriptions: until you unsubscribe.
Anonymous App usage statistics: 24 months.
Google Analytics data: set to 14 months in Google Analytics.
Server logs: 30 days.

Who we share data with

We share data only with the service providers named in this policy, who process it on our behalf to provide their services:

Postmark (email delivery)
Twilio SendGrid (newsletter)
Cloudflare (spam protection)
Google (Analytics, if you consent, and fonts)
our website hosting provider

Some of these providers are based outside the UK, including in the United States. Where this happens, the transfer is protected by appropriate safeguards, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework. We may also disclose information if the law requires it.

Your rights

Under UK data protection law you have the right to:

access the personal data we hold about you
have it corrected
have it deleted
object to or restrict how we use it
receive a copy of it (data portability)
withdraw your consent at any time

To use any of these rights, email festival@nottinghamcraftbeer.co.uk.

Deleting your data

The App has no accounts, so there is no account to delete. To remove App data from your device, uninstall the App. This deletes your favourites, reminders and the random identifier described above. To have your contact form messages or newsletter subscription deleted, email us at festival@nottinghamcraftbeer.co.uk and we will delete them within 30 days. The anonymous usage statistics cannot be linked back to you, so we cannot pick out your individual records.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first, so please contact us.

Children

The festival is for adults aged 18 and over. The Website and App are not aimed at children, and we do not knowingly collect personal data from anyone under 18.

Security

All data sent between your device and our Website or App is encrypted using HTTPS. We take reasonable technical and organisational steps to protect the information we hold.

Changes to this policy

We may update this policy from time to time. When we do, we will publish the new version on this page and change the "Last updated" date at the top.