Privacy Policy

This Privacy Policy explains how MJ Day Party ("we", "us", "our") handles your personal data when you use this website and sign up for updates. We collect only what you choose to give us, and we are transparent about the limited third-party services we use. This policy applies under UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who is responsible for your data

The data controller is Craig Brown (MJ Day Party), Bristol & Bath Science Park, Dirac Crescent, Emersons Green, Bristol, BS16 7FR, United Kingdom. For any privacy question or to exercise your rights, contact us at [PRIVACY CONTACT EMAIL].

2. The data we collect

We do not use analytics, advertising pixels or marketing cookies on this website. We do not build profiles of visitors and we do not store your IP address in our signup system or database.

Information you give us when you sign up:

• Your first name (optional)
• Your email address (required)
• Your mobile number (optional – only if you want SMS updates)
• Your selected city or cities (optional)
• Your marketing consent (required checkbox before signup)

We record the date you gave consent so we can demonstrate it if asked. We do not ask for, and do not intentionally collect, sensitive personal data.

3. How and why we use your data (legal bases)

• To send you marketing emails about MJ Day Party – on the basis of your consent (UK GDPR Art. 6(1)(a)). You must tick the consent box to sign up. You can withdraw consent at any time.
• To send you marketing SMS – only if you provide a mobile number and consent (UK GDPR Art. 6(1)(a)). You can withdraw consent at any time.
• To show venue maps – when you view a map on the site, Mapbox loads in your browser to display it (UK GDPR Art. 6(1)(f) – our legitimate interest in showing accurate venue locations). We do not receive your IP address from Mapbox.

4. The tools and partners we use

We share only the data needed for each service with the following processors, under appropriate data processing terms:

• Klaviyo (Klaviyo, Inc., USA) – stores your contact details, city preferences and consent so we can send the email, SMS and WhatsApp updates you opted into. Unsubscribe using the link in any message we send, or contact us to opt out of SMS/WhatsApp.
• Mapbox (Mapbox, Inc., USA) – provides map tiles when you view a venue map. Your browser connects directly to Mapbox; Mapbox may process technical data (which can include IP address) under its own privacy policy. We do not receive or store that data.
• Our hosting provider – hosts the website. Like most hosts, it may temporarily record standard connection logs (which can include IP address) for security and reliability. We do not use those logs for marketing, profiling or analytics, and we do not add log data to your signup record.

We never sell your personal data.

5. Cookies and similar technologies

This site does not use analytics cookies, advertising cookies or social-media tracking pixels. We do not show a cookie banner because we do not set non-essential cookies for tracking or measurement.

Your browser may store strictly necessary technical data (for example to load map tiles from Mapbox). You can control cookies in your browser settings.

6. International data transfers

Your signup data is processed by Klaviyo in the United States. Mapbox is based in the United States and may process technical data when you view a map. Where personal data is transferred outside the UK, appropriate safeguards apply (such as the UK International Data Transfer Agreement or Standard Contractual Clauses).

7. How long we keep your data

We keep your signup details for as long as we need to send you the updates you consented to, and for up to 24 months after your last interaction with us (for example your last email open or reply), unless you ask us to delete your data sooner or withdraw consent. When you unsubscribe or ask us to delete your data, we remove you from our active mailing lists and ask Klaviyo to delete or anonymise your record within a reasonable period, subject to any legal obligation to retain minimal records of consent.

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to our processing;
• data portability (where applicable);
• withdraw consent at any time (this does not affect processing that was lawful before withdrawal).

To exercise any of these rights, email [PRIVACY CONTACT EMAIL]. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS) when you submit the signup form.

10. Age restriction

MJ Day Party events are 18+. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, please contact us and we will delete the data.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version. Material changes will be posted on this page.

12. Contact

Questions about this policy or your data? Contact Craig Brown (MJ Day Party), Bristol & Bath Science Park, Dirac Crescent, Emersons Green, Bristol, BS16 7FR, United Kingdom, or email [PRIVACY CONTACT EMAIL].