PRIVACY NOTICE

WHO CONTROLS YOUR DATA

The data controller is Robb Dixon. Privacy questions and rights requests can be sent to zuumusic.london@gmail.com.

SUB-CULTURE 002 DROP ALERT

If you ask to be notified about the SUB-CULTURE 002 guestlist drop, we collect your first name and email address so we can send that one requested alert. We also record when you signed up and the route used to reach the page, such as an artist, Instagram, WhatsApp or paid campaign link, so we can understand which event promotion worked. Signing up for the alert does not create or promise a guestlist pass.

The legal basis for this one-off email is your consent, given when you choose “Notify me when it opens”. It does not add you to general future-event marketing. You can withdraw before the alert is sent by contacting us. The alert email will also include a way to unsubscribe.

SUB-CULTURE 001 GUESTLIST DATA

We collect your first name, last name and email address to create and administer one guestlist pass for SUB-CULTURE at Aura, Caparica on 29 August 2026. On every registration route except the Meta paid advertising page, we also require a mobile number for guestlist matching and essential event communication. The Meta paid page does not request a mobile number. Your email delivers the pass, and these required details are processed to provide the guestlist registration you request. Providing a mobile number by itself does not give consent for WhatsApp or phone marketing; that permission is recorded only if you actively select “Email + WhatsApp / phone”.

We also record the route used to reach the page, such as A5 flyer, A3 poster or A1 poster, artist link or paid campaign, so we can understand which event promotion worked. This route attribution does not require an advertising cookie.

OPTIONAL META MEASUREMENT

If Meta measurement is enabled, it remains off unless you choose “Accept optional” in the cookie choices. With that permission, Meta Pixel may record page visits and a successful new guestlist registration. We may also send the same successful-registration event through Meta's Conversions API so the browser and server events can be matched and counted once. Available contact details sent for matching are normalised and securely hashed before transmission; Meta may also receive technical identifiers such as your IP address, browser information and Meta cookie identifiers.

We use this optional measurement only to understand and improve event promotion. You can reject it without affecting the site, your pass or your future-contact choice. The legal basis for this optional processing is your consent. We do not rely on legitimate interests for it. Your preference is saved for up to six months. You can change or withdraw it at any time using “Cookie choices” on the event landing page; withdrawal stops future measurement on this site. Meta's own handling of information is described in the Meta Privacy Policy.

FUTURE PARTY UPDATES

Future marketing is optional. On registration pages that collect a mobile number, you must actively choose “Email only”, “Email + WhatsApp / phone”, or “No thanks”; none is selected in advance. “Email only” permits future SUB-CULTURE event, guestlist and early ticket emails. “Email + WhatsApp / phone” permits those emails and future updates on the supplied phone number. The Meta paid page offers “Email only” or “No thanks” because it does not collect a phone number. You may withdraw either permission at any time by contacting us or using the unsubscribe method included with future messages. Choosing “No thanks” does not affect your pass.

SUPPLIERS AND SHARING

The site and registration database are provided through OpenAI Sites and Cloudflare. Brevo processes transactional pass emails and the requested 002 drop-alert email. If you accept optional measurement, Meta Platforms Ireland Limited processes the promotional measurement described above. These suppliers may use approved safeguards where processing involves a country outside the European Economic Area. We do not give the contact list to venues, artists, sponsors or other promoters for their own marketing.

HOW LONG WE KEEP IT

We plan to delete or anonymise non-marketing guestlist and pass data within 90 days of the relevant event, unless a genuine incident, legal claim or accounting obligation requires a longer period. We also plan to delete or anonymise the 002 one-off drop-alert list within 90 days of the event, or earlier if you withdraw before the alert. Contact details covered by an optional general marketing consent are retained until that consent is withdrawn or after 24 months without engagement, when the list will be reviewed and deleted or refreshed. Minimal consent and suppression evidence may be retained as needed to demonstrate your choice and prevent unwanted contact.

YOUR RIGHTS

You may ask to access, correct or delete your information, restrict or object to its use, receive portable data where applicable, and withdraw marketing consent at any time. You may also complain to Portugal's data-protection authority, the CNPD.