Privacy & Cookies Policy
Quick Panda Productions LTD (“QPP” – registered company number 07553262) and Little Orchard Cider & Music Festival (together referred to as “the Festival”, “we”, “us”, or “our”) are committed to protecting and respecting your personal information.
This Privacy Policy explains how we collect, use, store, and protect your personal data across our website (https://www.cornwallciderfestival.co.uk/), social media channels, contact forms, ticketing systems, and on-site event operations at Healeys Cyder Farm.
1. Data Controller Information
Quick Panda Productions LTD acts as the Data Controller for all personal data collected in relation to the Festival.
• Registered Address: Quick Panda Productions LTD, Heron Tennis Centre, Trenance Lane, Newquay, Cornwall, TR7 2LZ
• Data Protection Contact: data@quickpanda.co.uk
• Event Site: Healeys Cyder Farm, Penhallow, Truro, Cornwall, TR4 9LW
2. Information We Collect & Lawful Bases
We collect and process personal data under the following lawful bases defined by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:
Ticket & Booking Data – Name, email address, phone number, delivery address, age details. Contractual Necessity: To process ticket bookings, issue wristbands, handle accommodation requests, and deliver essential event information.
Marketing Data – Name, email address, communication preferences. Consent: To send news, line-up updates, and partner offers via our Mailchimp newsletter or SMS alerts. You can opt out at any time.
Digital & Analytics Data – IP address, browser type, device identifiers, site usage, location data. Legitimate Interest / Consent: To optimize our website, block disruptive use, measure audience demographics, and serve targeted advertisements.
Surveillance Data – Video footage captured by Closed-Circuit Television (CCTV) cameras. Legitimate Interest / Legal Obligation: Public safety, crime prevention, licensing compliance, and protection of staff and attendees.
Crew, Trader & Artist Data – Contact details, ID, banking information, CVs, and application forms. Contractual Necessity / Legal Obligation: To process applications, manage site access, and complete contractual payments.
3. CCTV & Video Surveillance (Bar & Event Areas)
We operate CCTV surveillance across the festival grounds at Healeys Cyder Farm throughout the event period, with dedicated, active camera coverage situated around all bar areas and point-of-sale zones.
• Purposes: CCTV is maintained to prevent and detect crime, protect festival staff and patrons, verify transactional or age-verification disputes at the bars, manage crowd control, and comply with Cornish licensing conditions.
• Access & Storage: CCTV footage is securely stored on encrypted drives with access restricted strictly to authorized security directors and event management.
• Retention: Video recordings are automatically overwritten after 30 days unless required for ongoing insurance claims, transactional audits, or police investigations.
4. Digital Marketing, Cookies & Tracking Technologies
We use cookies, web beacons, and pixels to deliver a smooth online experience and measure our promotional campaigns across third-party platforms.
A. Google Analytics & Google Ads
We use Google Analytics to analyze website traffic and user journeys in an anonymized format. We also run Google Ads conversion tracking and remarketing cookies to show relevant festival announcements on Google search and partner display networks to users who have previously visited our site.
B. Meta Pixel (Facebook & Instagram Advertising)
We integrate the Meta Pixel and Conversions API on our website. This technology allows us to:
• Measure the effectiveness of our Facebook and Instagram advertisements.
• Deliver retargeting ads to users who have viewed specific pages (e.g., ticket purchase pages).
• Create customized marketing audiences to reach prospective attendees with similar interests.
C. Managing Your Cookie Preferences
You can modify or revoke your cookie preferences at any time via the cookie consent banner on our website or through your web browser settings. To opt out of targeted digital advertising across platforms, you can visit Google Ad Settings and Meta Ad Preferences.
5. Third-Party Data Processors
We do not sell your personal data. We only share information with authorized Data Processors who perform operational tasks on our strict instructions:
• Ticket Tailor: Acts as our primary ticketing processor. Access is strictly limited to maintaining your registration, issuing ticket barcodes, and resolving booking queries.
• Accommodation Partners: If you book glamping, bell tents, or off-site accommodation via Ticket Tailor, relevant booking details are shared with the specific provider solely to fulfill your booking.
• Mailchimp: Manages and delivers our official newsletter emails. Your email data remains isolated within our account and is never accessed or used by Mailchimp for independent marketing.
• Law Enforcement & Authorities: We may release personal or financial data if required by law, court order, licensing authorities, or to protect the safety and vital interests of attendees and staff.
6. Data Security & Retention
We maintain appropriate physical, electronic, and managerial procedures to safeguard your data against loss, unauthorized access, alteration, or disclosure. In the event of a security breach that poses a high risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) without undue delay.
Data is retained only as long as necessary to fulfill the operational purpose for which it was collected, or to comply with legal, statutory, and accounting retention requirements.
7. Your Data Protection Rights
Under UK GDPR, you hold the following statutory rights regarding your personal information:
• Right of Access: Request a copy of the personal data we hold about you (including identifiable CCTV footage).
• Right to Rectification: Request that out-of-date or inaccurate information be corrected.
• Right to Erasure: Request the deletion of your personal records (“right to be forgotten”), where no legal overriding requirement forces retention.
• Right to Object / Restrict: Object to direct marketing or restrict how we process your personal data based on legitimate interests.
• Right to Data Portability: Request that your data be transferred to another service provider in a structured, machine-readable format.
To exercise any of these rights, please submit your request along with two forms of valid identification (e.g., driving licence, passport, utility bill) to:
• Email: data@quickpanda.co.uk
• Post: Data Protection Officer, Quick Panda Productions LTD, Heron Tennis Centre, Trenance Lane, Newquay, TR7 2LZ
Raising a Complaint
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113
• Website: https://ico.org.uk/concerns/
8. Updates to This Policy
We review this policy periodically to reflect operational, legal, and licensing changes. Any changes will be published on this page with an updated revision date.
Last Updated: July 2026