Privacy Policy

Alexandra Park and Palace Charitable Trust (“Alexandra Palace”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.

This Privacy Notice explains how we collect, use, store and share your personal data when you sign up for Alexandra Palace Fireworks 2026, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Alexandra Park and Palace Charitable Trust is the data controller responsible for your personal data.

• Registered charity number: 281991
• Address: Alexandra Palace, Alexandra Palace Way, London N22 7AY
• Email: [email protected]

If you have any questions about this Privacy Notice or how we use your data, please contact us using the details above.

What this sign-up page collects

When you register on this page for Alexandra Palace Fireworks 2026, we collect:

• Your first name and surname
• Your email address
• Your mobile number
• Which night or nights you are interested in
• Your confirmation that you are 18 or over
• Your marketing preferences

We also record technical information sent by your browser, such as your IP address and the page that referred you, and, if you arrived through a referral link, the referral code that brought you here.

Why we use it, and our legal reasons

• To give you access to the ticket presale before it opens to the public, and to contact you about the campaign and the event – because we have a genuine reason to run and promote Alexandra Palace events (Legitimate interests under Article 6 UK GDPR)
• To administer the prize draw, including verifying entries and contacting winners – because we have a genuine reason to run competitions and prize draws fairly and to be able to show that we did (Legitimate interests under Article 6 UK GDPR)
• To confirm your mobile number by text message and your email address by a confirmation link – because we have a genuine reason to make sure registrations and entries are genuine (Legitimate interests under Article 6 UK GDPR)
• Marketing by email and SMS – we obtained consent from you (where required under PECR). You can withdraw that consent at any time.
• To improve our events, our website and how we reach our audiences – because we have a genuine reason to run and improve Alexandra Palace in a responsible way (Legitimate interests under Article 6 UK GDPR)

The prize draw and referrals

If you enter the prize draw, we record your entry, the night or nights you selected, and, where the campaign includes a referral mechanic, a unique referral code for you together with a count of the people who registered using it. We use this only to work out how many entries you hold, to draw winners fairly, and to contact them.

We never ask you for a friend’s contact details and we never message anyone on your behalf. A referral is only counted when a person chooses to follow your link and register themselves, giving their own consent.

Winners are contacted using the details provided at sign-up. Records that show the draw was run fairly are kept until the draw is complete, prizes are claimed, and any query about the result has been resolved.

Lead forms and campaigns

Sometimes we run advertising campaigns, competitions or sign-up forms on social media platforms, particularly LinkedIn, TikTok, Meta and Google. If you choose to fill in a form on one of these platforms, we may receive information such as your name, email address, telephone number, postcode, marketing preferences and any other information you provide.

We may use this information to contact you about the campaign, event or competition, provide what you have requested, administer competitions or prize draws, and send marketing messages where you have agreed to receive them.

When you use social media platforms, they also collect and use your personal information for their own purposes. This is controlled by their own privacy policies and procedures. We encourage you to read the privacy policies of the platforms you use.

Our legitimate interests

Where we rely on legitimate interests, these include operating and improving Alexandra Palace, promoting our charitable purposes, ensuring visitor safety, communicating in ways people reasonably expect, and social media engagement. You have the right to object to processing based on legitimate interests.

Your rights

You have rights over how your personal information is used. These rights apply under UK data protection law. You have the right to:

• Ask for a copy of your personal information. You can ask us what personal information we hold about you and receive a copy of it.
• Ask us to correct information. If you think the information we hold about you is wrong or incomplete, you can ask us to fix it.
• Ask us to delete your information. In some situations, you can ask us to delete your personal information.
• Ask us to limit how we use your information. You can ask us to pause or restrict how we use your personal information in certain circumstances.
• Object to how we use your information. You can object to us using your personal information where we rely on our own interests, including for marketing.
• Withdraw your consent. If we are using your information because you have given consent, you can withdraw that consent at any time.
• Ask for your information to be transferred. You can ask us to provide the personal information you gave us in a format that allows you to pass it to another organisation, where this applies.
• Ask us to stop sending you marketing. You can tell us at any time if you no longer want to receive marketing communications from us.

Please note that these rights are not absolute, and we may be entitled to refuse requests where exceptions apply.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information, or to exercise any of your other rights. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

To exercise any of these rights, email [email protected]. Every marketing email we send also carries an unsubscribe link, and you can reply STOP to any text message.

If you feel that your data has not been handled correctly, or you are unhappy with our response to any request you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. You can contact them by calling 0303 123 1113 or online at ico.org.uk/concerns.

Disclosure of your details to third parties

There are certain circumstances under which we may disclose your personal information to third parties:

• To our service providers who process data on our behalf and on our instructions, such as the platform that hosts this sign-up and stores registrations, and the services that deliver our confirmation text messages and emails. We require all third parties to respect the privacy of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process it for specified purposes and in accordance with our instructions.
• Where we are under a duty to disclose your personal information in order to comply with any legal obligation, or where there is a legitimate interest that permits us to share it.
• For some events, we work with external organisers. If we need to share your personal information with a specific event organiser, we will only do this with your clear permission.
• We may share information that has been anonymised, so it cannot be linked back to you, with other organisations. This helps us understand our audiences, ticket sales and income, and improve our services.

We do not sell personal details to third parties for any purpose.

Restricted transfers

We mainly keep and use your personal information within the UK. If we ever need to transfer your personal information outside the UK, we will only do so where appropriate protections are in place. This means we will make sure there are legal safeguards to protect your information to the same standard as UK data protection law. These safeguards may include a decision by the UK government that the country provides an adequate level of data protection, or a legally approved contract that requires the recipient to protect your information properly. We will not transfer your personal information outside the UK unless these protections are in place.

Data security

We have put in place appropriate safeguards, both in terms of our procedures and the technology we use, to keep your personal information as secure as possible. We will ensure that any third parties we use for processing your personal information do the same, and that they will only process your personal information on our instructions. Those third parties are also subject to a duty of confidentiality. This page is served only over an encrypted connection.

Cookies

Like most websites, we receive and store certain details whenever you use this site. We use cookies to help us understand how the site is used, where we can make improvements, and how best to tell our audiences about events they might be interested in. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline them if you prefer. This may prevent you from taking full advantage of the site.

Automated decision-making

Automated decision-making takes place when a system uses personal information to make a decision without human involvement. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless we have a lawful basis for doing so and we have notified you. We do not envisage that any decisions will be taken about you by automated means, however we will notify you if this position changes.

Data retention

We only retain your personal data for as long as necessary, or unless required to do so by law. You can ask us for more information about how long we keep different types of data by contacting [email protected].