Privacy Policy

The Cancer Research UK Masquerade Ball is a fundraising event organised by volunteers supporting Cancer Research UK (registered charity nos. 1089464(England & Wales) and SC041666 (Scotland)).

For questions about how we handle your data, please contact: info@cruk-masquerade.org.uk

When you purchase tickets or create an account, we collect:

• Identity data: first name, last name
• Contact data: email address, phone number (optional)
• Dietary & health data: dietary requirements and drink preferences for catering
• Payment data: payment method, order reference (we do not store card numbers)
• Technical data: IP address, session identifiers (for fraud prevention)
• Communications data: your correspondence with us

We use your personal data for the following purposes:

• To process your booking — fulfilling your ticket purchase contract
• To send order confirmations and event reminders — legitimate interest / contract performance
• To process dietary requirements — only with your explicit consent, for catering purposes
• To confirm attendance and check-in at the event — contract performance
• To prevent fraud — legitimate interest
• To comply with our Gift Aid obligations — legal obligation

Dietary requirements are considered special category health data under UK GDPR. We collect this information only with your explicit consent to ensure the caterers can accommodate your needs.

This data is shared only with our catering partners and will be deleted within 30 days of the event.

We may share your personal data with:

• SumUp — payment processing provider (card payments only)
• Our caterers — dietary requirements only
• Cancer Research UK — Gift Aid declarations for tax recovery

We do not sell your data to third parties. We do not use your data for marketing unless you have opted in.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (via your account dashboard)
• Erase your data (subject to legal retention requirements)
• Object to processing based on legitimate interest
• Withdraw consent for special category data (dietary) at any time
• Portability — request a copy of your data in a machine-readable format

To exercise any of these rights, contact us at info@cruk-masquerade.org.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use only essential cookies required for the secure operation of this website — for example, to maintain your login session and prevent cross-site request forgery (CSRF). We do not use advertising or analytics tracking cookies.

Passwords are hashed using bcrypt. All data is transmitted over HTTPS. Access to personal data is restricted to authorised event organisers only. We review our security practices regularly.

We may update this policy from time to time. Material changes will be communicated by email to registered account holders.