Home / Privacy Policy

Glastonbury Festival Privacy Policy

Glastonbury Festivals Limited and the event organisers, Glastonbury Festival Events Limited, produce the largest green-field music and performing arts festival in the world in addition to a number of other smaller music and performing arts events (the “Festival”). 

We understand that lengthy legal documents are no fun. However, we ask that you read this Privacy Policy carefully as it contains important information including who we are, how and why we collect, store, use and share personal information through your use of this Website or in relation to the production of the Festival, your rights in relation to your personal information, and how to contact us or the supervisory authority in the event you have a complaint. 

We have designed this policy to be as user-friendly as possible. Click on the drop-down headings below to access more information on any topic.  

What does this Privacy Policy cover? 

This Privacy Policy covers any personal information we might collect from you or which we have obtained about you from a third party: (1) where you have registered an interest in attending the Festival, (2) where you purchase a ticket, or are offered a complementary ticket, to attend the Festival, (3) where you provide services to us as a Supplier, crew member, volunteer, or performer, (4) when you interact with our social media channels, (5) when you download and use the mobile App, (6) where you have applied to the Glastonbury Arts Commission, (7) where you have signed up to receive our newsletter, or (8) when you visit our website at www.glastonburyfestivals.co.uk  (“Website”).

Who collects information about you?  

Glastonbury Festivals Limited is the data controller for the Festival’s registration database – this is the database in which your details are stored when you register an interest in attending the Festival. For all other data processing activities, the data controller is Glastonbury Festival Events Limited. 

When we refer to “we” “our” or “us” in this Privacy Policy we are referring to Glastonbury Festivals Limited (company number 02737866) together with Glastonbury Festival Events Limited (company number 04348175). For details of how to get in touch, please see the “Contact Us” Section of this Privacy Policy. 

Useful Terms 

In this Privacy Policy: 

“Ticketholder” means any individual who purchases a ticket, or is provided with a complimentary ticket, to attend the Festival. Ticketholders also includes prospective ticketholders who register an interest in attending the Festival via our registration page operated by See Tickets at www.glastonburyregistration.co.uk. 

“Website Visitors” means individuals who visit our Website and who may decide to provide us with personal information to request further information or to receive marketing communications from us.  

“Personal information” or “personal data” means any information about an individual from which that personal can be directly or indirectly identified. It does not include data where the identity has been removed (i.e., anonymous data).  

What personal information do we collect?  

We may collect, use, store and transfer different kinds of personal information about you which we have grouped together as follows:  

  • Identity Data such as your first name, last name, image, registration number, identification documents (such as your driving licence, passport or birth certificate), national insurance number, proof of address documents (such as a utility bill, council tax bill or polling card), job title and company.
  • Contact Data such as your email address, business address, home address, telephone number, emergency contact information, and professional and/or social network contact details.
  • Financial Data which may include (i) credit card and/ or billing information so that we can take payment from you and verify your address details, (ii) Unique Taxpayer Reference number, tax codes or other information required by HMRC, and, (iii) your bank details so that we can pay for the services you provide to us (if this is part of the contractual arrangements between us).
  • Transaction Data such as information about payments and details of purchases you have made.
  • Technical Data such as your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this Website or the mobile app. 
  • Usage Data which may include information about how you use our Website, the mobile app, or social media channels. 
  • Performer Data such as your stage name, name of act, name and contact details of your agent and/or manager, information pertinent to the assessment of artists and performers (such as information on fan-base, sales and attendance figures, past performances, and up-coming events). 
  • Profile Data such as social media handles, social media posts and messages, and articles. 
  • Marketing and Communications Data including your preferences in receiving marketing or other communications from us. 
  • Criminal Convictions Data includes information about criminal convictions proceedings or investigations, court orders, or court proceedings. 
  • Health Data includes information about your health or disability. 

How will we use your personal information? 

Ticketholders 

As part of our ongoing efforts against ticket touting, If you would like to purchase a ticket to the Festival you will first need to register your details on our registration site operated by our service provider, See Tickets. In order to initiate the registration process, we will collect your Contact Data. This step is required to validate your email address for security purposes. We will then process your Contact Data to email you a unique link to enter the registration process. To process your registration, we will collect your Identity Data and Contact Data and add this information to our registration database. If, during the registration process, you tick the box to sign up to receive our newsletter, we will use your Contact Data to add you to our newsletter database and send you newsletters. 

If you are already registered, we will process your Identity Data and Contact Details when you retrieve or edit your registration details on our registration site. When we receive a request via our registration site, we will process your Contact Details to send you a unique link via email which will allow you to view, edit or delete your registration details.

Once registered, we will use your Contact Data in order to send you service-related emails which will include notifying you when tickets for the Festival go on sale.In the event that your registration is rejected, for example because the photo submitted does not meet the stated requirements, we will process your Contact Data in order to notify you of this fact. Rejected registration data will be kept for a period of 30 days and will then be deleted.

If you are purchasing tickets with a view to attending the Festival as a Ticketholder, we will need to collect a certain amount of personal data, including your Identity Data, Contact Data, Technical Data and Financial Data, in order to verify your ticket eligibility and the information provided in your registration, facilitate, process and fulfil your ticket order, produce, and dispatch your Festival ticket, facilitate entry to and exit from the Festival, and to ensure the safety and security of everyone attending the Festival. In addition, we may collect your Health Data to facilitate accessibility arrangements or the provision of medical assistance. 

We may also use your personal information for the following purposes: 

To administer and manage our relationship with you, such as responding to communications. 

To send transactional and service messages in relation to your ticket 

To provide customer service and support. 

For other business purposes, such as market research and analysis, business development and planning, determining the effectiveness of, and improving, the Festival. 

To send you information which we think you may find interesting (such as details about future events), in accordance with your marketing preferences. 

To comply with legal or regulatory requirements. 

To help us establish, exercise, or defend legal claims. 

Suppliers, Crew, Volunteers, and Performers 

Whether you are volunteering as a steward, or headlining the Pyramid Stage, you or your representatives will be required to supply a certain amount of personal data, which may include your Identity Data, Contact Data, Financial Data and Performer Data, in order for the Festival to comply with our legal obligations (such as verifying your right to work in the UK, and providing payroll information to HMRC), to fulfil your contract, supply your accreditation and pass, facilitate your entry to and exit from the Festival, administer the relationship with you, or contact you in case of an emergency. The personal information provided as part of the Glastonbury Festival artist and crew advancing processes will be stored and processed by the respective area of the Festival you are working or performing at, and by the Festival’s central functions for passes and finance administration.  

In addition to the basic information provided to fulfil our contractual obligations, we will also use some of the personal data provided by artists, including Identity Data and Performer Data, to compile our line up listings. This will include the performer’s name and social media handles (if they have a public profile). The line-up listings are shared with third party companies, such as our media partners (BBC, EE, and The Guardian, as well as the companies who process data on their behalf) to publish line-up information across their platforms; as well as being publicly available on the line-up page of the Festival website. We believe this is in the legitimate interest of both the Festival and the artists performing at the Festival, as artists derive a benefit from being featured across these platforms, however any artist who wishes to have their information removed from or amended on these listings, has the right to request deletion or rectification, as described in the section ‘Your rights’ below. 

Depending on the nature and responsibilities of your role we may be required to process your Criminal Convictions Data to carry out a disclosure and barring service (DBS) check (for example if your role involves you working closely with children). 

We will also use your personal information for the following purposes: 

To store (and update where necessary) your contact details on our database, so that we can contact you in relation to our agreements and the services you provide. 

To administer and manage our relationship with you and to obtain services from you. 

For other business purposes, such as market research and analysis, business development and planning, determining the effectiveness of, and improving, the Festival. 

To comply with other legal or regulatory requirements. 

To help us establish, exercise, or defend legal claims. 

Press

If you would like to attend the Festival as a member of the press, you will need to complete a Press Accreditation Application Form which will be sent to you in the build-up to the Festival. To process your application, we collect your Identity Data, Contact Data and Profile Data. If your application is successful, we will process your Identity Data and Contact Data in order to produce, and dispatch your Festival pass, facilitate your entry to and exit from the Festival, and to ensure the safety and security of everyone attending the Festival. In addition, we may collect your Health Data to facilitate accessibility arrangements or the provision of medical assistance. 

We may also use your personal information for the following purposes: 

To administer and manage our relationship with you, such as responding to communications. 

To send transactional and service messages in relation to your ticket 

To provide support services. 

For other business purposes, such as market research and analysis, business development and planning, determining the effectiveness of, and improving, the Festival. 

To send you information which we think you may find interesting (such as details about future events), in accordance with your marketing preferences. 

To comply with legal or regulatory requirements. 

To help us establish, exercise, or defend legal claims. 

Glastonbury App 

If you download and use the Glastonbury App, developed and delivered by Vodafone (hereafter “the App”), Vodafone or its third-party service providers may collect information through the App to improve functionality. When you consent to the App’s use of location services, or otherwise depending on the settings on your mobile device, Vodafone or third-party service providers may collect the location information provided by your device, including data provided by your GPS (hereafter “Location Data”), to facilitate location-based push notification messaging via the App.  Location Data may be collected when you are using the App and, in the background, if your device settings permit. Vodafone or it’s third-party service providers may share limited information (e.g., which acts have been favourited) collected through the App with us in order to aid in the safe delivery of this year’s event and to assist planning of future events. For more information about how Vodafone will process personal data collected through the App, please see their privacy notice at www.vodafone.co.uk/privacy.

Social Media Users 

We use social media channels (including Facebook, Twitter, and Instagram, the “Social Media Companies”) to publish information on the Festival. If you follow or otherwise engage with our social media channels, we will collect Usage Data to analyse how users interact with those channels. If you use social media to send us messages or posts, we may use your Profile Data to communicate with you. When you interact with our channels, the Social Media Companies will also process your personal data for the purposes set out above as Joint Controllers. For more information we would encourage you to review the privacy notices published by the Social Media Companies.   

Website Visitors 

When you visit our Website, we automatically collect Technical Data and Usage Data about you through our and our technology partners’ use of cookies and similar technologies (for more information about this, please see our Cookie Policy) to deliver relevant website content to you, to measure and understand the effectiveness of the content we serve you, to improve our Website content marketing and user experience, and to administer and protect the Website. If you use our contact form or any other web form on the Website to get in touch with us, we will collect your Identity Data and Contact Data together with the contents of your message.  

If you sign up to receive our newsletter, we will collect your Contact Data to add you to our newsletter database and send you newsletters.  

If you use the CV uploader on our jobs page to express an interest in working for us, you should refer to our dedicated Recruitment Privacy Policy. 

If you are applying to the Glastonbury Arts Commission (GAC):

If you are applying to the GAC, you will be required to supply a certain amount of personal data as part of the application process.  We will use your Identity and Contact Data to communicate with you about your application. We will use information submitted as part of your application, including your Identity Data, Contact Data and Performer Data to process, review and consider your application, to conduct or procure third parties to conduct, background checks to assess whether we think you are a suitable candidate and to decide whether to invite you to the next stage of the application / selection process. We will use information about you that is publicly available, which we obtain from third parties, and/or obtain from background searches and checks we conduct ourselves and /or procure from third party suppliers or authorities to assess whether we think you are a suitable candidate and to decide whether to invite you to the next stage of the application / selection process. We will use audio and/or visual recordings whether recorded by the Festival, submitted by you as part of your application, or made available by you publicly (on YouTube or any other platform) to assess whether we think you are a suitable candidate and to decide whether to invite you to the next stage of the application / selection process. We may require proof of your right to live and work in the UK. We process this information to verify you have a legal entitlement to live and work in the UK without restriction.

If you are selected for one of the available commissions, you should also refer to the sections relevant to Suppliers, Crew, Volunteers and Performers.

All Festival Attendees

CCTV: The Festival site has security cameras which may record your image as you move around the site. We use these to ensure the safety and security of everyone attending the Festival.

Media: The Festival attracts global media interest. Although we limit access to the Festival and restrict the number of production crews on site to preserve the enjoyment of festival attendees, you should be aware that whenever you are on the Festival site you may be filmed, photographed and recorded by media outlets. In particular, our broadcast partner, the BBC, broadcasts live on multimedia throughout the Festival and their content is also available via its on-demand service. Media entities must comply with our broadcasting policies but the Festival does not control or own any audio or visual material recorded.

Footage archived in the public interest: As a globally renowned music and performing arts festival we recognise the enduring public interest in audio and visual recordings of the Festival. In order to preserve this material, our broadcast partner, BBC Television, shares with us footage that it has recorded at the Festival. This footage is stored and preserved in the Festival archive. Access to footage stored in the archive is at the Festival’s discretion and is subject to the agreement of a standard commercial licence with the Festival.

What is our legal basis for processing your personal information? 

If you are a Ticketholder: 

Where we process your personal information to process and maintain your registration, to notify you when tickets for the Festival go on sale, in connection with the sale or provision of a Festival ticket to you, and to facilitate your entry to and exit from the Festival this processing is necessary to perform the contract we have entered into with you. 

Where we process your information to administer and manage our relationship with you, or for other business purposes, we consider this is necessary for our legitimate interests and that your interests and fundamental rights do not override those interests. 

Where we process your personal information to send you the festival newsletter, we do so on the basis of your consent in accordance with your marketing preferences. We will rely on legal obligation if we are legally required to hold your personal information to comply with legal or regulatory requirements, such as disclosure to regulators. 

In the event that we process your Health Data, we will do so on the basis of your explicit consent or, in the event that you are not physically or legally capable of giving such consent, to protect your vital interests. 

If you are a supplier, crew member, volunteer, or performer: 

Where we process your personal information in connection with obtaining services from you (or from a third party through which you provide services), this processing is necessary to perform the contract we have entered into with you or the third party providing services to us (as applicable). 

Where we process your information to supply your accreditation and pass, facilitate your entry to and exit from the Festival, administer and manage our relationship with you, or for other business purposes, we consider this is necessary for our legitimate interests and that your interests and fundamental rights do not override those interests.  

We will rely on a legal obligation if we are legally required to hold or otherwise use your personal information to comply with legal or regulatory requirements, such as verifying your right to work in the UK, providing employee details to HMRC, disclosure to regulators or the performance of DBS checks.  

 If you are a member of the press:

Where we process your personal information in connection with the processing of your application for press accreditation, to provide a Festival pass to you, and to facilitate your entry to and exit from the Festival, this processing is necessary to perform the contract we have entered into with you. 

Where we process your information to administer and manage our relationship with you, to send you information about the Festival, or for other business purposes, we consider this is necessary for our legitimate interests and that your interests and fundamental rights do not override those interests. 

We will rely on legal obligation if we are legally required to hold your personal information to comply with legal or regulatory requirements, such as disclosure to regulators. 

In the event that we process your Health Data, we will do so on the basis of your explicit consent or, in the event that you are not physically or legally capable of giving such consent, to protect your vital interests. 

If you are a social media user: 

Where we process your information to analyse engagement with our social media channels and to communicate with you, we consider this is necessary for our legitimate interests and that your interests and fundamental rights do not override those interests. 

If you use the Glastonbury app: 

Where we process your personal data collected via the App and shared with us by Vodafone or its third-party service providers, we do so on the basis of our legitimate interests. 

If you are a Website Visitor: 

Where we process your personal information for the purposes described, we consider this is necessary for our legitimate interests and that your interests and fundamental rights do not override those interests. 

Where we process your personal information to send you the festival newsletter, we do so on the basis of your consent in accordance with your marketing preferences. 

Where we use cookies to collect personal information for the purposes of data analytics, we do so on the basis of your consent. 

If you are applying to the Glastonbury Arts Commission:

Where we process your Identity and Contact Data to communicate with you about your application and to process, review and consider your application, this processing is necessary to perform the contract we have entered into with you.

Where we process (1) information to conduct or procure third parties to conduct, background checks, (2) information about you that is publicly available, which we obtain from third parties, and/or obtain from background searches and checks we conduct ourselves and /or procure from third party suppliers or authorities, (3) audio and/or visual recordings whether recorded by the Festival, submitted by you as part of your application, or made available by you publicly (on YouTube or any other platform), to assess whether we think you are a suitable candidate and to decide whether to invite you to the next stage of the application / selection process we consider this is necessary for our legitimate interests and that your interests and fundamental rights do not override those interests.

We will rely on legal obligation to process your identity data to verify you have a legal entitlement to live and work in the UK without restriction.

If you are selected for one of the available commissions, you should also refer to the sections relevant to Suppliers, Crew, Volunteers and Performers.

All Festival Attendees

Where we process your information (1) through our use of security cameras on the Festival site, and (2) in footage maintained in the Festival archive, we consider this is necessary for our legitimate interests and that your interests and fundamental rights do not override those interests.

How do we collect personal information about you? 

We may collect information from the following sources: 

Directly from you: This is the information you or an individual acting on your behalf has provided directly to us for the purposes set out in this Policy.  

Third-party sources: This will include information about you that is shared with us by our third-party partners (including the mobile App provider, Vodafone) or is available through publicly available sources, such as professional networking sites (including LinkedIn) and general market research. 

Information we collect automatically: When you visit our Website or interact with our social media channels, we collect certain Technical and Usage Data automatically from your device.

Who do we share your personal information with? 

We may share and disclose your personal information with the following categories of third parties for the purposes described in this Privacy Policy: 

Service providers. We use a number of Suppliers who perform functions on our behalf or to provide certain services to us. For example, we use See Tickets to administer and maintain our registration database and to sell tickets to the Festival. See Tickets have access to your registered personal information for the sole purpose of maintaining your registration details and processing ticket bookings and ticket related enquiries. See Tickets will not use this information to contact you about anything other than the Festival (however, as a ticketing services company, you may still receive communication from them if you have made other third-party purchases with them independently). 

See Tickets also administers and maintains the Festival’s newsletter mailing list. Whilst the Festival newsletter data is stored and processed by See Tickets, it is entirely separate to See Tickets’ own mailing list, and neither they nor any other third parties will be given access to use your data for any other purposes. 

If you book accommodation or purchase a water bottle via See Tickets, your booking information will be shared with the accommodation provider or WaterAid respectively, for the sole purpose of processing your booking. Neither our accommodation providers nor WaterAid will use this information to contact you about anything other than your booking (however you may still receive communication from them if you have made other bookings with them or opted-in to their mailing lists independently). 

Our service providers are required to keep your personal information confidential and are not allowed to use it for any other purpose than to carry out the services they are performing for us. 

Professional advisors. We may disclose personal information to our professional advisers, such as lawyers, auditors, accountants, and insurers, if necessary, as part of the professional services they are performing.

Arts Council England. If you have applied to the Glastonbury Arts Commission, we may share deidentified applicant data with the Arts Council England (which provides funding to the Glastonbury Arts Commission) which they will use for monitoring purposes only.

Compliance with laws. We may occasionally release your personal or financial information to public bodies, departments or institutions to assist law enforcement, to comply with laws or regulations, or to protect the rights, property or safety of the Festival, users of the site or others, including your vital interests or those of another person.

Security and international data transfers  

Security 

We have implemented generally accepted standards of technology and operational security to prevent personal information from being accidentally lost or used or accessed in an unauthorised or unlawful way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. 

We also have procedures in place to deal with any suspected data security breach. We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk. 

International data transfers  

Where personal information is shared and disclosed as set out above, these parties may be established outside the United Kingdom. For example, some of the service providers we use to support our services are based in the United States, and this involves a transfer of your personal information to the USA. Whenever we transfer your personal information outside the United Kingdom, we ensure that a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented. This may include, where appropriate, relying on an adequacy decision or signing up to an International Data Transfer Agreement or Standard Contractual Clauses. To find out more information regarding the specific mechanism used by us when transferring your personal information outside the United Kingdom, please contact the Festival’s Data Protection Officer via the Festival Contact Form or write to the Data Protection Office, Glastonbury Festival, Worthy Farm, Pilton, Somerset, BA4 4BY. 

Our use of cookies and similar technologies 

We may use cookies and other information gathering technologies to learn more about how you interact with our Website. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Website may become inaccessible or not function properly. Please see our Cookie Policy for more information about the cookies we use. 

Third party links and services  

This Website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.   

How long do we keep your personal information for?  

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for purposes of satisfying any legal, accounting, or reporting requirements.  

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information, and whether we can achieve those purposes through other means, and the applicable legal requirements. 

For example, personal data relating to suppliers, crew members, volunteers, and performers will be retained for a maximum of 5 Festival cycles before being securely deleted.

Marketing 

You may receive marketing communications from us if you have signed up to receive our newsletter and you have not opted out of receiving that information.  You can ask us to stop sending you marketing messages at any time by following the opt-out links in any marketing message sent to you or by contacting the Festival’s Data Protection Officer via the Festival Contact Form or writing to the Data Protection Office, Glastonbury Festival, Worthy Farm, Pilton, Somerset, BA4 4BY. 

Please note that opting out of marketing communications does not opt you out of receiving important service-related communications. 

Your rights  

Subject to any exemptions provided by law, you may have the right to: 

  • Request access to your personal information (commonly known as a “data subject access request”) and to certain other supplementary information that this Privacy Policy is already designed to address.
  • Request correction of the personal information we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
  • Receive the personal information concerning you which you have provided to us in a structured, commonly used, and machine-readable format and have the right to transmit those data to a third party in certain situations;
  • Object to processing of your personal information at any time for direct marketing purposes. 
  • Object to decisions being taken by automated means which produce legal effects concerning you or significantly affect you;
  • Object in certain other situations to our continued processing of your personal information;
  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
  • Withdraw your consent to our processing of your personal information, where we have collected and processed it with your consent. 

For more information, please refer to the appropriate data protection legislation or consult the Information Commissioner’s Office for guidance. If you would like to exercise any of these rights, please contact the Festival’s Data Protection Officer via the Festival Contact Form or write to the Data Protection Office, Glastonbury Festival, Worthy Farm, Pilton, Somerset, BA4 4BY and let us have enough information to identify you. We may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. 

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. 

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. 

How to contact us  

If you are within the UK, please address requests and questions about this or any other question about this Privacy Policy to the Festival’s Data Protection Officer via the Festival Contact Form or write to the Data Protection Office, Glastonbury Festival, Worthy Farm, Pilton, Somerset, BA4 4BY. 

How to Complain 

We hope that we can resolve any query or concern that you raise about our use of your personal information.  

You also have the right to make a complaint to your supervisory authority. In the UK, this is the Information Commissioner’s Office (www.ico.org.uk).  

Changes to this Privacy Policy  

This version was last updated on 11th Oct 2024. To ensure that you are always aware of how we use your personal information we will update this Privacy Policy from time to time to reflect any changes to our use of your personal information and as required to comply with changes in applicable law or regulatory requirements. However, we encourage you to review this Privacy Policy periodically to be informed of how we use your personal information.  

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.