GDPR Compliance
Last updated: 6 September 2025
At Conscious Community we are committed to protecting your personal data and respecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR.
This statement explains our GDPR compliance practices and your rights as a data subject.
1. Our role as a Data Controller
When you use our Website https://consciouscommunity.org.uk/en to create an account, book tickets, or organise events, we act as the Data Controller for your personal data. This means we decide how and why your data is collected and processed.
When we share attendee details with event organisers, those organisers become independent Data Controllers of the data provided to them for running their events.
2. Lawful bases for processing
We process personal data only where we have a valid lawful basis under GDPR:
Contract – to provide our services, including ticket booking, account management, and event access.
Legal obligation – to comply with financial, tax, and regulatory requirements.
Consent – for optional services such as marketing emails or non-essential cookies.
Legitimate interests – to improve our services, prevent fraud, and ensure platform security (only where your rights are not overridden).
3. Your GDPR rights
Under GDPR, you have the following rights:
Right of access – request a copy of the data we hold about you.
Right to rectification – correct inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”) – request deletion of your personal data, except where we must retain it for legal or contractual reasons.
Right to restrict processing – request that we limit how your data is used.
Right to data portability – request transfer of your personal data to another provider in a machine-readable format.
Right to object – object to processing based on legitimate interests or direct marketing.
Rights related to automated decision-making – we do not use automated decision-making that significantly affects users.
You can exercise your rights by contacting us at consciouscommunityuk@gmail.com.
4. Data retention
We only keep your personal data for as long as necessary:
Account details: as long as your account is active.
Ticket bookings: typically 6 years (to meet financial and legal obligations).
Marketing data: until you withdraw consent.
Logs and analytics: usually up to 12 months.
5. International transfers
If we transfer your data outside the UK or EEA, we ensure it is protected through recognised safeguards such as:
Adequacy decisions by the UK/EU Commission.
Standard Contractual Clauses (SCCs).
6. Data security
We use appropriate technical and organisational measures to protect your data, including encryption, secure servers, and access controls.
7. Complaints
If you are unhappy with how we process your data, you have the right to complain to the regulator:
In the UK: Information Commissioner’s Office (ICO) – www.ico.org.uk
In the EU: your local Data Protection Authority.
We encourage you to contact us first so we can resolve any issues.
8. Contact us
If you have questions about GDPR compliance or wish to exercise your rights, please contact us:
? Email: consciouscommunityuk@gmail.com
? Address: London, England