Who we are
Kerala Cultural Association Ipswich (“we”, “us”) is the organiser of community events promoted on this website. For privacy questions or requests about your data, contact kcaipswich@gmail.com.
What we collect
When you make a booking we ask for:
- Full name
- Email address
- Mobile phone number
- Ticket selections and amounts
- Family member ages (only if you choose a family package — used to check package eligibility)
- Whether a prime discount was requested, and the mobile number used for eligibility
We also store booking status, payment checkout references, confirmation and failed-payment email timestamps, and (if applicable) door check-in time recorded by organisers.
We do not collect or store card numbers, CVV, or expiry dates on our servers. Card payments are entered on SumUp’s hosted checkout pages.
Why we use your data
We process your data to:
- Create and manage your booking
- Process payment via SumUp and confirm paid bookings
- Send transactional emails (confirmation, payment not completed)
- Verify entry at the event (including booking QR / reference)
- Apply eligible prime discounts
- Prevent abuse (e.g. Google reCAPTCHA when configured)
Our lawful bases under UK GDPR are contract (to fulfil your ticket booking) and, where needed, legitimate interests (event security, fraud prevention, and operational records). We ask for your consent on the booking form so you understand what we store and can agree before we create a booking.
Payment processing
Paid bookings redirect you to SumUp Hosted Checkout. SumUp processes your card payment under its own terms and privacy notice. We receive payment status and checkout identifiers so we can confirm your booking; we do not receive your full card details.
Where your data is stored
Booking and attendee personal data (name, email, mobile, ticket details, and related booking records) are stored on servers located in India. Because this is outside the United Kingdom / European Economic Area, transferring your data there is an international transfer under UK GDPR.
By accepting the privacy policy and continuing with a booking, you acknowledge and consent to this transfer and storage in India for the purposes described in this policy. We take reasonable steps to keep the hosting environment secure (access controls, HTTPS, and limited organiser access).
Other processors
- Email (SMTP) — to send booking-related messages
- Google reCAPTCHA — when enabled, to reduce automated abuse (Google may set cookies / process device data per its privacy policy)
- Hosting / database (India) — to store booking records securely
How long we keep data
We keep booking and attendee records for as long as reasonably needed to run the event, handle entry queries, accounting, and dispute resolution (typically up to 12 months after the event, unless a longer period is required by law). You may contact us to request deletion earlier where applicable.
Your rights
Under UK data protection law you may have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to erase data in certain circumstances
- Object to or restrict certain processing
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise these rights, email kcaipswich@gmail.com.
Children
Family packages may include children’s ages for ticket classification only. Bookings should be made by a parent or guardian where the booking involves children.
Changes
We may update this policy from time to time. The “Last updated” date above will change when we do. Material changes will be reflected on this page before you book.