Privacy policy

1. Who is responsible for your information?

Yarnstock Festival runs this website and the annual Yarnstock event. For privacy questions or requests, email info@yarnstock.co.uk or use the contact form.

2. Information we collect

The information depends on what you choose to do. It may include:

• your name, email address, telephone number and account details;
• camping, glamping, stallholder or class-host booking and application details;
• accessibility needs, vehicle information, preferences and messages you send;
• invoice and payment status, Stripe references and transaction confirmations—but not full card details;
• technical information such as IP address, browser information and security logs.

3. Why we use it

We use personal information to provide accounts, process and manage bookings or applications, take and reconcile payments, send service messages and receipts, answer enquiries, prevent misuse, keep financial and event records, and meet legal obligations. Newsletter or promotional messages are sent only when you choose to receive them, and you can opt out.

4. Services that help run the site

We share only what is necessary with service providers acting for us, such as website hosting, authenticated email delivery and Stripe for payment processing. Those providers handle information under their own security and privacy obligations. We may also disclose information when required by law or to protect people, the event or the website.

5. Cookies and analytics

Essential cookies keep sign-in sessions, remembered-device choices, security forms and booking journeys working. They cannot be switched off through the site.

Optional Google Analytics loads only after you select “Allow analytics” in the cookie notice. Choose “Essential only” to use the site without optional analytics. You can clear the ys_cookie_choice cookie in your browser to choose again.

6. How long we keep information

We keep information only for as long as it is needed for the event, customer service, security, accounting, tax, dispute handling and legal obligations. Different records have different retention periods. Old information is deleted, anonymised or securely archived when it is no longer required.

7. Your choices and rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, delete or restrict your information, object to certain use, receive a portable copy, or withdraw consent. Contact us to make a request. You may also complain to the UK Information Commissioner’s Office.

8. Security and changes

We use access controls, encrypted connections, private one-time links, secure password hashing and payment-provider controls to protect information. No online service can promise absolute security. We may update this policy when the event, website or providers change; the review date above shows the current version.