Privacy Policy

This Privacy Policy explains how Michael Jackson Day Party ("we", "us", "our") handles your personal data when you use this website and sign up for updates. We collect only what you choose to give us, and we are transparent about the limited third-party services we use. This policy applies under UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who is responsible for your data

The data controller for Michael Jackson Day Party is TwoFour Events Ltd, Bristol & Bath Science Park, Dirac Crescent, Emersons Green, Bristol, BS16 7FR, United Kingdom. For any privacy question or to exercise your rights, contact us at info@twofour-events.co.uk.

2. The data we collect

We do not use analytics, advertising pixels or marketing cookies on this website. We do not build profiles of visitors and we do not store your IP address in our signup system or database.

Information you give us when you sign up:

• Your first name (optional)
• Your email address (required)
• Your mobile number (optional – only if you want SMS updates)
• Your selected city or cities (optional)
• Your marketing consent (required checkbox before signup)

We record the date you gave consent so we can demonstrate it if asked. We do not ask for, and do not intentionally collect, sensitive personal data.

3. How and why we use your data (legal bases)

• To send you marketing emails about Michael Jackson Day Party – on the basis of your consent (UK GDPR Art. 6(1)(a)). You must tick the consent box to sign up. You can withdraw consent at any time.
• To send you marketing SMS – only if you provide a mobile number and consent (UK GDPR Art. 6(1)(a)). You can withdraw consent at any time.
• To show venue maps – when you view a map on the site, MapTiler loads in your browser to display it (UK GDPR Art. 6(1)(f) – our legitimate interest in showing accurate venue locations). We do not receive your IP address from MapTiler.

4. The tools and partners we use

We share only the data needed for each service with the following processors, under appropriate data processing terms:

• Klaviyo (Klaviyo, Inc., USA) – stores your contact details, city preferences and consent so we can send the email, SMS and WhatsApp updates you opted into. Unsubscribe using the link in any message we send, or contact us to opt out of SMS/WhatsApp.
• MapTiler (MapTiler AG, Switzerland) – provides map tiles when you view a venue map. Your browser connects directly to MapTiler; MapTiler may process technical data (which can include IP address) under its own privacy policy. We do not receive or store that data.
• Our hosting provider – hosts the website. Like most hosts, it may temporarily record standard connection logs (which can include IP address) for security and reliability. We do not use those logs for marketing, profiling or analytics, and we do not add log data to your signup record.

We never sell your personal data.

5. Cookies and similar technologies

We use a cookie banner so you can choose whether we load optional third-party content. We do not use analytics cookies, advertising cookies or social-media tracking pixels.

Strictly necessary cookies (no consent required):

• Your cookie preference choice (stored for up to 12 months)
• Short-lived quiz session cookies while you complete the MJ quiz
• MapTiler map tiles when you view venue maps (essential for showing locations)

YouTube (only with your consent): embedded video when you choose to play Billie Jean on the homepage. See our Cookie Policy to manage preferences.

6. International data transfers

Your signup data is processed by Klaviyo in the United States. MapTiler is based in Switzerland and may process technical data when you view a map. Where personal data is transferred outside the UK, appropriate safeguards apply (such as the UK International Data Transfer Agreement or Standard Contractual Clauses).

7. How long we keep your data

We keep your signup details for as long as we need to send you the updates you consented to, and for up to 24 months after your last interaction with us (for example your last email open or reply), unless you ask us to delete your data sooner or withdraw consent. When you unsubscribe or ask us to delete your data, we remove you from our active mailing lists and ask Klaviyo to delete or anonymise your record within a reasonable period, subject to any legal obligation to retain minimal records of consent.

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to our processing;
• data portability (where applicable);
• withdraw consent at any time (this does not affect processing that was lawful before withdrawal).

To exercise any of these rights, email info@twofour-events.co.uk. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS) when you submit the signup form.

10. Age restriction

Michael Jackson Day Party events are 18+. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, please contact us and we will delete the data.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version. Material changes will be posted on this page.

12. Contact

Questions about this policy or your data? Contact TwoFour Events Ltd, Bristol & Bath Science Park, Dirac Crescent, Emersons Green, Bristol, BS16 7FR, United Kingdom, or email info@twofour-events.co.uk.