OPENING WEEKEND OFFER · 20% OFF SELECTED TIMES · ENDS SUNDAY 25TH

Privacy policy

ALBION VANTAGE LTD (hereinafter, the “Organiser” or “ALBION VANTAGE”), a company belonging to the Lets Go Company group and established in the United Kingdom, acts as the data controller for personal data relating to the Event and provides this Privacy Policy to inform you clearly and transparently about how we collect and process your personal data via the website available at thenightmarebeforechristmaslighttrail.com/arley (hereinafter the “Website”).

Certain processing operations may be carried out, on behalf of ALBION VANTAGE, by other companies within the Lets Go Company group established in Spain, which will act as data processors when processing data in accordance with ALBION VANTAGE’s instructions.

Consequently, the UK General Data Protection Regulation (hereinafter the “UK GDPR”) and the Data Protection Act 2018 (hereinafter the “DPA 2018”) shall apply in respect of processing operations for which ALBION VANTAGE is the data controller and, in respect of entities established in Spain (including KZEMOS TECHNOLOGIES and the companies of the Lets Go Company group established there), Regulation (EU) 2016/679 (“GDPR”) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”) shall apply in respect of their own processing activities.

We also recommend that you consult our Legal Notice, which sets out the general terms and conditions of use of the Website, as well as our Cookies Policy, where you can find detailed information on the use of cookies and similar technologies on the Website.

Data Controller:

For the management of the Event, access control and user support, the data controller is:

• Company name: ALBION VANTAGE LTD (hereinafter, “ALBION VANTAGE”)
• Registration number (Companies House): 14077799
• Address: 124 City Road, London, England, EC1V 2NX, United Kingdom
• Data Protection Officer contact details: privacidad@letsgocompany.com

For the marketing and sale of tickets through its channels, the following entity will also act as an independent data controller:

• Company name: KZEMOS TECHNOLOGIES, S.L.U. (hereinafter “KZEMOS TECHNOLOGIES”)
• Tax Identification Number: B65590945
• Address: Calle Fernando el Santo 16, 28010, Madrid, Spain
• Data Protection Officer contact: dpo@feverup.com

In addition, with regard to the personal data of Users who have given their specific and separate consent (opt-in), the following entity will act as an independent data controller:

• Company name: TOKYO GROUP LTD (trading as Tokyo Industry) (hereinafter “TOKYO INDUSTRY”)
• Registration number (Companies House): 06462216
• Address: St James Building, 79 Oxford Street, Manchester, M1 6HT, United Kingdom

ALBION VANTAGE acts as an independent data controller for the processing of Users’ personal data for the purposes of managing the Event, controlling access and providing customer support. KZEMOS TECHNOLOGIES acts as an independent data controller in relation to the marketing and sale of tickets through its own channels, in particular via the Onebox ticketing platform, of which KZEMOS TECHNOLOGIES is the owner. TOKYO INDUSTRY, in its capacity as a partner of ALBION VANTAGE in organising the Event, acts as an independent data controller with regard to the personal data it receives from Users who have given their specific and separate consent (opt-in) for such communication.

ALBION VANTAGE will process the data for the purpose of managing access to the show and other activities related to the Event. For its part, KZEMOS TECHNOLOGIES will process the data, as an independent data controller, in relation to the marketing and sale of tickets through the various sales channels. TOKYO INDUSTRY will process, as an independent data controller and subject to obtaining specific and separate consent (opt-in), (i) the data strictly necessary for its participation in the operational management of the Event and (ii) identification and contact details for the purpose of sending its own marketing communications. These two consents are independent of one another and may be granted or withdrawn separately.

Personal data processed:

Depending on the User’s relationship with the Website and the Platform, the following categories of data may be processed:
• Identification and contact details: first name, surname, email address, telephone number and, where applicable, postal address.
• Purchase and admission data: admission number or reference, date, time, ticket price, amount, proof of purchase and any associated incidents.
• Payment data: card or payment method details will be processed by the relevant payment gateway or service provider. ALBION VANTAGE will not retain full card details unless expressly stated otherwise.
• Communication data: enquiries, complaints, claims, requests and communications with the User.

Purposes:

Why do we process your data? Your data will be processed for the following purposes:

PURPOSE	CATEGORIES OF DATA PROCESSED	LEGAL BASIS	DATA CONTROLLER	RETENTION PERIOD
To manage the purchase of tickets, their issuance, the dispatch of receipts and the handling of any issues relating to the purchase.	Identification and contact details; purchase details; payment details , where applicable; receipts and communications relating to the purchase.	Art. 6.1.b) UK GDPR / RGPD: performance of the contract. Art. 6.1.c) UK GDPR / RGPD: compliance with legal obligations, where applicable.	KZEMOS TECHNOLOGIES and/or ALBION VANTAGE, depending on the sales channel and the specific purpose.	During the processing of the purchase, the holding of the Event and the handling of any associated incidents. Subsequently, the data will be retained in a blocked format for the limitation periods applicable to contractual, tax, accounting and legal liabilities. Accounting and supporting documentation will be retained for 6 years.
Manage access to the event, validate tickets and monitor capacity.	Identifying data; entry details; date, time and session; access validation; incidents relating to access, capacity or security.	Art. 6.1(b) UK GDPR: performance of the contract.	ALBION VANTAGE	For the duration of the Event and for the time strictly necessary to manage incidents relating to access, capacity or security. Once this period has ended, the data will be erased or blocked for the period necessary to deal with any potential claims or liabilities.
Handling enquiries, requests, complaints, claims and refunds.	Identification and contact details; purchase details; communications with the User; supporting documentation relating to the enquiry, claim or refund.	Art. 6.1.b) UK GDPR / GDPR: managing the relationship with the User. Art. 6.1.f) UK GDPR / GDPR: legitimate interest in responding to requests and defending legitimate rights and interests. Art. 6.1.c) UK GDPR / GDPR: compliance with legal obligations, where applicable.	ALBION VANTAGE and/or KZEMOS TECHNOLOGIES, as applicable.	For the time necessary to process and resolve the enquiry, request, complaint, claim or refund. Thereafter, the data will be retained in a blocked state for the limitation period applicable to any potential legal, contractual, administrative or consumer liabilities.
To comply with legal, tax, accounting, consumer and security obligations.	Identifying data; purchase and invoicing data ( ); accounting records; information relating to claims, incidents, and tax, accounting, administrative or security obligations.	Art. 6.1.c) UK GDPR / GDPR: compliance with legal obligations.	ALBION VANTAGE and/or KZEMOS TECHNOLOGIES, as applicable.	For the periods required by the applicable regulations. In particular, accounting and commercial documentation shall be retained for 6 years and tax obligations, generally speaking, for 4 years, without prejudice to the possibility that longer periods may apply.
To send marketing communications regarding events, shows, offers and promotional campaigns organised by the Organiser, where the User has given their consent.	Identification and contact details; commercial preferences; consent history; communications sent; unsubscriptions or objections.	Art. 6.1.a) UK GDPR: the User’s specific consent to receive commercial communications from the Organiser. Privacy and Electronic Communications Regulations 2003 (PECR): electronic commercial communications.	The Organiser (ALBION VANTAGE)	Until the User withdraws their consent, requests to unsubscribe or objects to the processing. Following unsubscription, only the minimum data necessary to verify the objection and prevent further marketing communications will be retained.
To send marketing communications regarding KZEMOS TECHNOLOGIES’ own products, services, offers and promotional campaigns, where the User has consented to this.	Identification and contact details; commercial preferences; consent history; communications sent; unsubscriptions or objections.	Art. 6.1.a) GDPR: specific consent from the User to receive marketing communications from KZEMOS TECHNOLOGIES. Art. 21 LSSI-CE: electronic marketing communications.	KZEMOS TECHNOLOGIES	Until the User withdraws their consent, requests to unsubscribe or objects to the processing. Following unsubscription, only the minimum data necessary to verify the objection and prevent further marketing communications will be retained.
To allow access to the data by other companies within the Lets Go Company group where necessary to provide support services for the organisation and operational management of the Event (administrative management, user support, access control, technical support and internal coordination).	Identification and contact details; purchase and admission details; communications and incident details relating to the management of the Event.	Art. 6.1(b) UK GDPR: performance of a contract, where a group company is involved in the provision of the service (e.g. as a co-producer, promoter or operator). Art. 6.1(f) UK GDPR: legitimate interest in intra-group data sharing for internal administrative purposes. When acting on behalf of ALBION VANTAGE, it will do so as a data processor (Article 28 UK GDPR), without this constituting a transfer.	ALBION VANTAGE. Group companies will act as data processors (Article 28 UK GDPR) when processing data on behalf of ALBION VANTAGE. If, in relation to a specific Event, a group company acts as an independent data controller or joint controller, it will be expressly identified in the specific information relating to that Event.	During the organisation and running of the Event and for the time strictly necessary to deal with any incidents. Thereafter, the data will be retained in a blocked format for the duration of the limitation periods for legal, contractual, administrative or consumer liabilities.
To transfer the User’s identifying and contact details to other companies within the Lets Go Company group, which will act as independent data controllers, for the purpose of sending commercial communications regarding their events, offers and promotions, subject to specific and separate consent.	Identifying and contact details; commercial preferences; consent history; recipient companies; unsubscriptions or objections.	Art. 6.1.a) UK GDPR / GDPR: specific, prior and informed consent for the transfer to companies within the Lets Go Company group for commercial purposes. Art. 21 LSSI-CE: electronic commercial communications.	The Organiser (ALBION VANTAGE) as the data transferor and the companies within the Lets Go Company group listed under ‘Recipients’ as independent data controllers responsible for their own commercial communications.	Communication will only take place with the User’s consent, which may be withdrawn at any time without affecting the lawfulness of previous processing. The recipient companies will process the data in accordance with their own privacy policies. Following unsubscription, only the minimum data necessary to verify the objection and prevent further communications will be retained.
To enable TOKYO INDUSTRY to participate in the operational activities for which it is responsible in relation to the Event, including F&B operations, operational planning, staffing and, where applicable, security and incident management.	Identification and contact details; purchase and admission details strictly necessary for F&B operations, planningoperational, staffing and, where applicable, security and management incidentfor the Event.	Art. 6.1.a) UK GDPR / GDPR: specific and separate consent from the User (opt-in) for the disclosure of their data to TOKYO INDUSTRY for the operational purposes indicated.	TOKYO INDUSTRY, as the independent data controller.	Until the User withdraws their consent or until the end of the Event and the period necessary to deal with any associated incidents. Thereafter, TOKYO INDUSTRY will retain the data in a blocked format for the duration of the limitation periods applicable to legal, contractual, administrative or consumer liabilities.
To send commercial communications from TOKYO INDUSTRY regarding events, shows, offers and its own promotional campaigns, where the User has given their consent.	Identification and contact details; commercial preferences; consent history; communications sent; unsubscriptions or objections.	Art. 6.1.a) UK GDPR / GDPR: specific and separate consent from the User (opt-in) to receive commercial communications from TOKYO INDUSTRY. ePrivacy Directive 2003 / Art. 21 LSSI-CE: electronic commercial communications.	TOKYO INDUSTRY, as the independent data controller.	Until the User withdraws their consent, requests to unsubscribe or objects to the processing. Following unsubscription, only the minimum data necessary to verify the objection and prevent further marketing communications will be retained.
To share with TOKYO INDUSTRY aggregated and/or anonymised information relating to the Event (sales figures, number of tickets issued, occupancy rates, time slots, attendance forecasts and similar statistics) for the purposes of coordinating and analysing the Event.	Aggregated and/or anonymised data that does not allow for the direct or indirect identification of the User.	Not applicable. As this is aggregated and/or anonymised information, it falls outside the material scope of the UK GDPR and the GDPR.	ALBION VANTAGE and/or KZEMOS TECHNOLOGIES, depending on the source of the information; TOKYO INDUSTRY as the recipient.	For the duration of the collaboration agreement with TOKYO INDUSTRY and for the internal statistical retention periods. Retention periods for personal data do not apply, as this is not identifiable personal data.

Generally speaking, personal data will be retained for as long as necessary to fulfil the purpose for which it was collected. Once that purpose has been fulfilled, the data may remain blocked for the limitation periods applicable to any legal, contractual, tax, accounting, administrative or consumer liabilities that may arise from the processing. Once these periods have elapsed, the data will be permanently deleted.

Recipients:

Service providers acting on behalf of ALBION VANTAGE or KZEMOS TECHNOLOGIES, such as ticketing platforms, payment gateways, hosting providers, support services, customer service, legal services, audit firms or security providers, may access personal data.

The data may be disclosed to public authorities, courts, law enforcement agencies or competent authorities where there is a legal obligation or a valid request to do so.

Only where the User has given specific, prior, informed and separate consent may their identifying and contact details be disclosed to the following companies within the Lets Go Company group, which will act as independent data controllers responsible for sending their own commercial communications regarding events, shows, offers and promotional campaigns. This consent is distinct and separate from the consent to receive commercial communications from the Organiser or from KZEMOS TECHNOLOGIES, and may be granted or withdrawn separately at any time.

Kolfer Enterprises, S.L. B02956951 Calle Las Mercedes 25, 5th floor, flat 4. 48930 Getxo

Letsgo Theatre & Entertainment
Enterprises, S.L. B95972816 Calle Las Mercedes 25, 5th floor, flat 4. 48930 Getxo
Letsgo Enterprise, s.l. B56907678 Calle Las Mercedes 25, 5th floor, flat 4. 48930 Getxo
Letsgo Oceans, S.L. B56804388 Calle Las Mercedes 25, 5th floor, flat 4. 48930 Getxo

Data transfer to TOKYO INDUSTRY:

As part of the collaboration between ALBION VANTAGE and TOKYO INDUSTRY for the organisation of the Event, and following the obtaining of the User’s specific, informed and separate consent (opt-in) during the checkout process, ALBION VANTAGE will transfer to TOKYO INDUSTRY the personal data strictly necessary for the purposes detailed in the table above.

TOKYO INDUSTRY will act, with regard to such data, as an independent data controller, and not as a joint controller or data processor for ALBION VANTAGE, processing the data exclusively for the purpose or purposes indicated in the table above for which the User has given their consent. for each purpose (participation in Consent and the sending of marketing communications) will be obtained through specific and separate consent, so that the User may grant or withdraw each consent separately at any time, without such withdrawal affecting the lawfulness of any prior processing.the operational activities of the Event falling within TOKYO INDUSTRY’s remit

Furthermore, and without this implying the processing of identifiable personal data, ALBION VANTAGE and/or KZEMOS TECHNOLOGIES may share with TOKYO INDUSTRY aggregated and/or anonymised information relating to the Event, including, but not limited to, sales figures, the number of tickets issued, occupancy rates, time slots and attendance forecasts. Such information does not allow for the direct or indirect identification of the User and falls outside the material scope of the UK GDPR and the GDPR.

The specific text of the consent (opt-in) will be displayed to the User during the purchase process and will be coordinated with those responsible for the checkout, in a manner that is clear, specific, granular and distinct from any other consent.

ALBION VANTAGE and TOKYO INDUSTRY will comply with applicable privacy and data protection regulations, including the UK GDPR, the DPA 2018 and, where applicable, the GDPR.

International transfers
Certain processing operations and support services may be carried out from Spain by companies within the Lets Go Company group acting on behalf of ALBION VANTAGE. Transfers of personal data between the United Kingdom and the European Economic Area are carried out under the applicable adequacy decisions and regulations: (i) the United Kingdom recognises the European Economic Area as an adequate jurisdiction through the UK adequacy regulations; therefore, the United Kingdom → Spain data flow may take place on that basis without the need to enter into additional standard contractual clauses, an IDTA or a UK Addendum; and (ii) the European Commission renewed the adequacy decision relating to the United Kingdom in December 2025, which covers flows from Spain to the United Kingdom on the same basis. Should it prove necessary to use service providers located outside the United Kingdom or the European Economic Area where no applicable adequacy decision is in place, the safeguards provided for in the UK GDPR and the GDPR will be implemented, such as standard contractual clauses (SCCs), the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, or other valid mechanisms, and the User will be informed where appropriate.

Security measures:

ALBION VANTAGE will implement appropriate technical and organisational measures in relation to the processing operations for which it is responsible.

Users’ rights:

The User may exercise their rights of access, rectification, erasure, objection, restriction and data portability by contacting the relevant data controller depending on the processing operation:

ALBION VANTAGE: privacidad@letsgocompany.com
KZEMOS TECHNOLOGIES: dpo@feverup.com

With regard to processing carried out by the companies of Lets Go Company as independent data controllers, the User may exercise their rights with each of them using the contact details provided in their respective privacy policies.

If you do not wish to receive marketing communications, you may object or unsubscribe at any time by sending a request to privacidad@letsgocompany.com . Similarly, all electronic marketing communications will include a simple and free mechanism to unsubscribe or withdraw consent.

Users have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) (www.ico.org.uk) if they consider that the processing of their personal data by ALBION VANTAGE breaches applicable regulations. With regard to data processing carried out by KZEMOS TECHNOLOGIES or by companies within the Lets Go Company group established in Spain, Users may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority in their country of habitual residence within the European Union.

Minors:

The processing of personal data relating to minors shall be governed by the provisions of Article 8 of the UK GDPR and the DPA 2018. Where processing is based on consent in relation to information society services, those aged thirteen (13) or over may give their consent themselves. The processing of personal data relating to children under the age of thirteen (13) based on consent shall only be lawful if consent has been given by the person exercising parental authority or guardianship over the child. ALBION VANTAGE shall take reasonable measures to verify the User’s age and, where applicable, the authenticity of the consent given by the holders of parental authority or guardianship, using available technology. If ALBION VANTAGE becomes aware that data has been collected from a child under the age of thirteen (13) without such consent, it shall delete it without undue delay. The minimum age for access to the Event and the rules regarding parental authorisation to attend are governed by the General Terms and Conditions of Sale and Access to the Event and not by this Policy.

Cookies:

We use first-party and third-party cookies to enable the use of the Website and the services offered, as well as to understand how our users interact with the Website and analyse their behaviour so that we can display advertising relevant to their preferences based on a profile created from their browsing habits, as detailed in our Cookies Policy.

The use of non-strictly technical cookies requires the User’s prior consent. To this end, the Website features a cookie panel or banner that allows Users to accept, reject and configure the use of non-technical cookies before they are installed, in compliance with the provisions of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR 2003”) and the UK GDPR. Where applicable to processing carried out by Spanish entities, the provisions of Law 34/2002 on Information Society Services and Electronic Commerce (“LSSI-CE”) shall also be observed. For further information, please see our Cookies Policy.

Updates to the Privacy Policy:

ALBION VANTAGE may update this Privacy Policy to bring it into line with legal, technical or operational changes.