VDC CIC · 29 October 2026
Privacy Policy
1. Who is responsible
VDC CIC is responsible for personal information handled for Veterans Day Concerts through vdc.events. For privacy questions or to exercise your rights, contact John Gunn at info@vdc.events.
2. Current registration and suggestion forms
The current forms are a prototype: registration details and artist suggestions are saved only in the browser used to submit them. They are not sent to VDC CIC, added to a central mailing list or used to send emails by these forms. A thank-you message confirms this local save, not a ticket booking or mailing-list subscription.
Anyone with access to that browser may be able to access its saved information. You can remove it by clearing this website’s stored data in your browser; this also removes saved preferences and may sign you out. Avoid submitting confidential information or using a shared device.
Before central collection or email delivery is introduced, we will update this notice and the forms to reflect the actual services, recipients, transfer safeguards and retention arrangements. Local submissions will not automatically be transferred.
3. Information involved
- Registration: first name, last name, email address, an optional supporter category, your email opt-in choice, submission time and notice version.
- Artist suggestions: artist name, any optional reason or comment, submission time and the form used.
- Enquiries: information you choose to send us by email and our responses.
- Admin access: Google account identity and access permissions for authorised administration; no separate user profile is created.
- Website hosting and security services may process technical information such as IP addresses, browser details and request/error records to deliver and protect the site.
Do not include health information, service records or other sensitive personal information in artist suggestions. Suggesting an artist does not subscribe you to emails. The optional supporter category is not a request for proof of service or medical details.
4. Purposes and lawful bases
We do not ask you to consent simply to the storage of information. Where VDC CIC receives personal information, we use an appropriate lawful basis for each purpose:
- Legitimate interests: responding to enquiries, considering suggestions, administering an expression of interest, and keeping the website secure, where those interests do not override your rights. These activities do not authorise marketing emails.
- Consent: optional promotional event updates, fundraising messages and ballot announcements by email, when a mailing service is introduced. The choice is separate and unticked by default. Not opting in does not prevent registration or suggestions.
- Legal obligations: retaining or disclosing information where the law requires it.
Messages strictly necessary to handle an enquiry or registration are distinct from marketing. We will not use a service message to bypass your marketing choice. We do not use these submissions for automated decisions with legal or similarly significant effects.
5. Email choices
You can withdraw email marketing consent at any time by contacting info@vdc.events, or by using the unsubscribe link in any marketing email when email delivery is available. Withdrawal does not affect lawful processing before withdrawal. Your choice is not permission for third parties to market to you.
6. Sharing and international processing
Access to information received by VDC CIC is limited to authorised people and service providers needed for hosting, security, authentication and enquiry handling, subject to suitable protections. Google processes information for Google admin sign-in under its own privacy terms. Hosting and authentication are provided through Lovable Cloud.
We do not sell personal information. We may disclose it when required by law or necessary to protect legal rights. Where a provider processes personal information outside the UK, applicable UK transfer requirements must be met, such as adequacy regulations or approved contractual safeguards. Contact us for details of the arrangements applicable to your information.
7. Retention and security
Local form entries currently remain until you clear this site’s browser storage; there is no automatic expiry in this prototype. VDC CIC cannot retrieve or delete those entries remotely.
Information received directly by VDC CIC is kept only while needed for the enquiry or purpose for which it was received, then deleted or anonymised unless a legal obligation or genuine need to establish or defend a claim requires longer retention. Relevant factors include whether the enquiry is open, whether event planning remains active, legal requirements and your privacy choices.
If a mailing service is introduced, consent records and a minimal suppression record will be retained as needed to demonstrate consent and honour opt-outs. We use proportionate access and security controls, but no internet service can guarantee absolute security.
8. Cookies and browser storage
The forms use browser local storage for the local records described above. Admin sign-in uses authentication storage to maintain a session. This notice does not grant permission for advertising or non-essential tracking; any such tools introduced by VDC CIC will require appropriate notice and choices before use.
9. Your rights and complaints
Depending on the lawful basis and circumstances, you may request access, correction, erasure, restriction or portability of your information, object to processing based on legitimate interests, and withdraw consent. We may need proportionate information to verify your identity. We normally respond within one month; lawful extensions or exceptions may apply.
Contact John Gunn at info@vdc.events. For browser-only entries, clear this site’s stored data yourself; we cannot identify or retrieve those records. You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, whether or not you contact us first.
10. Changes
We will publish changes here with an updated date. Material changes to how personal information is used will be explained before they take effect where required. A policy update does not retrospectively expand marketing consent.