Privacy Policy – Steam Town Shanty Crew

Last updated: 30 January 2026

1. Introduction

Steam Town Shanty Crew (“we”, “our”, “us”) is committed to protecting your personal data.
This Privacy Policy explains what information we collect, how we use it, our legal bases for processing, and your rights under the UK GDPR and the Data Protection Act 2018.

By using our website (https://steamtownshantycrew.com) or contacting us, you agree to the practices described in this policy.

2. Who We Are

Steam Town Shanty Crew is a UK-based musical group.
We operate this website to share music, event information, and provide a way to contact or book us.

We act as the Data Controller for the information we collect.

3. Our Website Platform and Hosting

3.1 WordPress

Our website is built using WordPress, which may use cookies and store limited technical data to enable features such as commenting, login sessions, and site functionality.

3.2 Hosting

Our website is hosted by Hostinger, which processes data such as server logs, IP addresses, and security-related information to ensure the website operates correctly.

Our hosting plan stores data on servers located in the United Kingdom.
Where Hostinger transfers data outside the UK, it uses appropriate safeguards such as Standard Contractual Clauses (SCCs).

4. What Personal Data We Collect

We may collect and process the following information:

4.1 Contact and enquiry information

If you contact us (e.g., through a form or email), we collect your:

  • Name
  • Email address
  • Message content
4.2 Website analytics

We collect non-identifiable data such as browser type, device information, and pages visited via Google Analytics or Site Kit.
This helps us understand how visitors use our website.

4.3 Cookies

Our website may use cookies to:

  • Ensure functionality
  • Enable WordPress features such as logins or comments
  • Measure traffic and performance through analytics tools

You may disable cookies via your browser at any time.

4.4 Comments (if enabled)

When visitors leave comments, we collect the data shown in the comment form, visitor IP address, and browser user agent to help detect spam.
A hashed version of your email may be sent to Gravatar.

4.5 Media uploads

If you upload images, avoid including EXIF GPS data that may reveal your location.

4.6 Embedded content

Embedded content (e.g., YouTube, Instagram, Facebook) behaves as if you visited those platforms directly and may collect data according to their own privacy policies.

5. Legal Bases for Processing

We rely on the following lawful bases:

  • Legitimate Interests — responding to enquiries, maintaining security, and improving our website.
  • Consent — sending optional email updates when you opt in.
  • Legal Obligations — complying with applicable laws if required.

These are appropriate for a small band website under UK GDPR.

6. How We Use Your Information

We use your data to:

  • Respond to messages, enquiries, or booking requests
  • Provide updates (only with your consent)
  • Improve our website and visitor experience
  • Protect our site from spam or malicious activity

We never sell or rent your personal data.

7. Third-Party Service Providers

We use trusted third parties to operate our website:

  • Hostinger – website hosting, server logs, security, and performance
  • Google Analytics / Site Kit – anonymised visitor statistics
  • Smash Balloon Social Feeds – displays social media content
  • Cloudflare – security, caching, and performance services

Each provider has its own privacy policy and may process data as part of their services.

8. Data Sharing

We only share data when necessary for core website functionality or security.
If you request a password reset, your IP address may be included in the reset email.
We do not share data for marketing.

9. Data Retention

We keep personal data only as long as necessary:

  • Comments and metadata may be stored indefinitely for moderation.
  • Registered user account data (if any) remains until deleted.
  • Contact enquiries are retained only as long as needed to respond or manage bookings.

10. Your Rights

Under UK GDPR, you have the right to:

  • Access your data
  • Request correction
  • Request deletion
  • Withdraw consent
  • Object to or restrict processing
  • Request data portability

To use these rights, contact: [email protected]
We will respond within one month.

11. International Transfers

Some third-party providers may process data outside the UK.
Where this happens, we rely on safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy regulations (where applicable)

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or significant effects.

13. Security

We use reasonable technical and organisational measures such as hosting security, spam protection, and caching systems to protect your data.

14. External Links

External links to platforms such as Facebook, YouTube, or Google Forms are not covered by this Privacy Policy.
Check those websites’ policies before providing personal data.

15. Updates to This Policy

We may update this Privacy Policy from time to time.
Changes will be posted here with an updated date.

16. Contact Us

For questions about this Privacy Policy or your personal data, contact: [email protected]

Scroll to Top