Privacy Policy
Last updated: 9/12/2025
This Privacy Policy explains how AutoAlex Events Ltd ("we", "us", "our") collects, uses and protects your personal data when you visit shedfest.co.uk ("the Site") or interact with us in relation to ShedFest ("the Event").
We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
1. Who we are
-
Event name: ShedFest
-
Website: shedfest.co.uk
-
Data controller: AutoAlex Events Limited
-
Registered address: Lawford House, Albert Place, London, England, N3 1QA
-
Company number: 16175688
-
Contact email for privacy queries: [email protected]
If you have any questions about this Privacy Policy or how we handle your data, you can contact us at [email protected]
2. What data we collect
The personal data we collect about you depends on how you interact with us. It may include:
2.1 Data you provide directly
When you:
-
Purchase tickets for ShedFest
-
Apply to display a car, take part in track/sprint activity, or take part in Shed Talks
-
Apply to trade / exhibit at the Event
-
Sign up to our mailing list
-
Contact us by email, form or social media
we may collect:
-
Name
-
Email address
-
Postal address and country
-
Phone number
-
Ticket / order details (ticket type, quantity, transaction reference)
-
Vehicle details (make, model, registration, spec, photos) where you apply for show car / track activity
-
Business details if you are a trader or sponsor (company name, role, website, social handles)
-
Any information you choose to include in free-text fields (for example, about your car build, accessibility needs or other requests)
2.2 Data collected automatically
When you use our website, we may automatically collect:
-
IP address
-
Device type, browser type and version
-
Operating system
-
Approximate location (based on IP)
-
Pages visited, time on page, clicks and other usage data
This is typically collected using cookies and similar technologies. See section 7 for more on cookies.
2.3 Data from third parties
We may receive some data about you from third parties, for example:
-
Ticketing and registration platforms when you buy a ticket or register for the Event
-
Payment providers when you make a payment
-
Email marketing tools when you subscribe to our mailing list
-
Analytics and advertising platforms if you interact with our content or ads
-
Social media platforms when you engage with our accounts or campaigns
The data we receive from these parties will depend on their own privacy policies and the settings you have chosen with them.
3. How we use your data and lawful bases
We will only use your personal data when we have a lawful reason to do so. Typically this will be one of: contract, legitimate interests, legal obligation or consent.
3.1 To manage ticket sales and entry to the Event
-
Process your ticket purchase
-
Send booking confirmations and event information
-
Verify your ticket at entry
Lawful basis: Performance of a contract.
3.2 To manage show car, track and Shed Talk applications
-
Review and manage applications
-
Contact you about your application and event logistics
-
Create display plans and running orders
Lawful basis: Performance of a contract and/or legitimate interests (to organise and run the Event effectively).
3.3 To manage traders, sponsors and partners
-
Assess and confirm bookings or sponsorships
-
Communicate about logistics, contracts and payments
-
Promote your attendance (where agreed)
Lawful basis: Performance of a contract and legitimate interests.
3.4 To run and improve our website and marketing
-
Monitor website performance and user behaviour
-
Run analytics to understand traffic and improve content
-
Run advertising and retargeting campaigns (for example on Meta)
Lawful basis: Legitimate interests and/or consent where required for non-essential cookies or marketing.
3.5 To send you marketing communications
-
Email you with news about ShedFest and related events
-
Share information about tickets, applications, merch and offers
We will only send you direct electronic marketing:
-
Where you have given us your explicit consent, or
-
Where you are an existing customer and we are allowed to do so under privacy laws (soft opt-in), and you have not opted out.
You can opt out of marketing at any time by clicking "unsubscribe" in our emails or contacting us at [email protected].
Lawful basis: Consent or legitimate interests, depending on the circumstances.
3.6 For safety, security and legal compliance
-
To comply with our legal obligations (for example, health and safety, accounting and tax)
-
To help ensure the Event is run safely
-
To respond to and defend against legal claims
Lawful basis: Legal obligation and legitimate interests.
4. How we share your data
We do not sell your personal data. We may share your data with:
-
Ticketing and registration providers that process your bookings and tickets
-
Payment processors that handle your payments
-
Email and communication service providers that send our emails and notifications
-
Website hosting, IT support and security providers that help us operate our website and systems
-
Analytics and advertising partners that help us understand how people use our site and improve our marketing
-
Event suppliers and contractors who need limited information to help us run the Event safely and effectively, for example access control, production and safety teams
-
Professional advisers such as accountants, lawyers and insurers where necessary
-
Authorities or regulators where we are required to do so by law
All such third parties are required to handle your data securely and only in accordance with our instructions and applicable law.
5. International transfers
Some of our service providers may be based outside the UK or may store data on servers outside the UK.
Where this is the case, and where the destination country does not have an adequacy decision from the UK government, we will ensure appropriate safeguards are in place, such as using the UK International Data Transfer Agreement or similar mechanisms approved by the UK Information Commissioner’s Office.
You can contact us at [email protected] for more information about international transfers and the safeguards used.
6. How long we keep your data
We only keep your personal data for as long as it is reasonably necessary for the purposes described in this policy and to meet any legal, accounting or reporting requirements.
As a rough guide:
-
Ticketing and transaction records: typically 6 years to satisfy tax and accounting rules
-
Application data (show car, track, Shed Talks, traders): for the duration of the event cycle plus 3 years for reference and disputes
-
Mailing list data: until you unsubscribe or your email repeatedly bounces
-
Website analytics data: typically retained for 26 months/years, depending on the tool.
When data is no longer needed, we will delete or anonymise it.
7. Cookies and tracking technologies
We use cookies and similar technologies on our website to:
-
Make the site work (essential cookies)
-
Remember your preferences
-
Analyse site usage and performance
-
Support marketing and advertising campaigns
You can find more details in our [Cookie Policy / Cookie Notice], including the types of cookies we use and how long they stay on your device.
You can control cookies through:
-
Our on-site cookie banner / preferences tool, and
-
Your browser settings (which may allow you to block or delete cookies)
Blocking some cookies may affect how well the site functions for you.
8. Your rights
Under UK data protection law, you have a number of rights over your personal data. These include:
-
Right of access
You can ask for a copy of the personal data we hold about you. -
Right to rectification
You can ask us to correct inaccurate or incomplete data. -
Right to erasure ("right to be forgotten")
You can ask us to delete your personal data in certain circumstances. -
Right to restrict processing
You can ask us to restrict how we use your data in certain circumstances. -
Right to data portability
You can ask us to provide your data in a structured, commonly used, machine-readable format and to transfer it to another controller in certain circumstances. -
Right to object
You can object to us processing your data where we rely on legitimate interests, including for direct marketing. -
Right to withdraw consent
Where we rely on your consent (for example for marketing or non-essential cookies), you can withdraw it at any time. This will not affect the lawfulness of processing before you withdrew consent.
To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before responding.
9. Complaints
If you have any concerns about how we handle your personal data, please contact us first at [email protected] and we will do our best to resolve the issue.
You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
10. Third-party links
Our website may contain links to third-party websites, plugins or services, including ticketing platforms and social media sites. These third parties have their own privacy policies and we are not responsible for them. We encourage you to read their policies before providing any personal data.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example to reflect changes in our practices or the law. Any updates will be posted on this page with a new "Last updated" date.
If the changes are significant, we may also notify you by email (where appropriate) or via a notice on the website.
