Privacy Notice
Effective date: 29 August 2026 (Version 1.0)
This privacy notice explains how Mayne Event Media Limited collects and uses your personal data when you book, attend, or contact us about the True Crime Sessions conference. We have written it in plain English so it is easy to understand. If anything is unclear, please contact us using the details below.
1. Who we are and how to contact us
Mayne Event Media Limited ("we", "us" or "our") is the data controller responsible for your personal data. This means we decide how and why your personal data is used.
Company: Mayne Event Media Limited
Company number: 10558400
Registered office: 79 Tib Street, Manchester, M4 1LS, England and Wales
Privacy contact for all queries and requests: contact@mayneeventmedia.co.uk
If you have any questions about this notice, or you want to exercise any of your rights, please email us at contact@mayneeventmedia.co.uk.
2. The event this notice covers
This notice relates to the True Crime Sessions, a one-day public conference held at Millennium Point, Birmingham on 21 November 2026. Tickets are sold through Eventbrite.
3. The personal data we collect
We collect the following categories of personal data:
- Your name and email address, collected through Eventbrite when you check out.
- Accessibility and reasonable-adjustment requirements, so we can make sure the event is accessible to you.
- Dietary requirements and allergies, collected before the event.
- Images or emails you send us to verify a Blue Light Card or student discount.
- Any correspondence you have with us (for example, emails or messages you send us).
- Limited website and cookie data when you visit our website (see Section 8).
Some of this data is more sensitive. Information about your dietary requirements, allergies, and accessibility or reasonable-adjustment needs can reveal information about your health. We treat accessibility and reasonable-adjustment needs as disability-related data, which is a special category of personal data under Article 9 of the UK GDPR. We explain how we handle this in the table in Section 4.
4. How we use your data and our lawful basis
Under data protection law, we must have a valid "lawful basis" for each way we use your personal data. The table below sets out what we do with your data and the lawful basis for each use.
| What we do with your data | Data used | Lawful basis |
|---|---|---|
| Process your booking, issue your ticket, and give you the information you need to attend | Name, email address | Performance of our contract with you (Article 6(1)(b)) |
| Send you essential information about the event you have booked (for example, timing or venue changes) | Name, email address | Performance of our contract with you (Article 6(1)(b)) |
| Make reasonable adjustments and accessibility arrangements for you | Accessibility and reasonable-adjustment needs | For the general use: our legitimate interests in running an inclusive, accessible event and meeting our accessibility responsibilities (Article 6(1)(f)); for the health/ disability-related detail: your explicit consent (Article 9(2)(a)) |
| Cater for your dietary requirements and keep you safe from allergens | Dietary requirements, allergies | For the general use: our legitimate interests in catering safely and appropriately (Article 6(1)(f)); for the health-related detail: your explicit consent (Article 9(2)(a)) |
| Verify your eligibility for a Blue Light Card or student discount | Discount-verification image or email | Performance of our contract, or steps before entering a contract, so we can apply the correct price (Article 6(1)(b)); and our legitimate interests in preventing discount fraud (Article 6(1)(f)) |
| Handle and respond to your correspondence | Correspondence with us | Our legitimate interests in managing our relationship with you and responding to your queries (Article 6(1)(f)) |
| Administer the event and keep proper business records | Booking and attendance records | Our legitimate interests in running the event efficiently and keeping accurate records (Article 6(1)(f)) |
| Send you marketing about our future events, where you have asked to receive it | Name, email address | Your consent (Article 6(1)(a)) |
| Run our website and keep it secure, and understand how it is used | Website and cookie data | Strictly necessary cookies: our legitimate interests in operating a secure website (Article 6(1)(f)). Non-essential cookies (such as analytics): your consent (Article 6(1)(a)) |
| Comply with our legal obligations (for example, tax, accounting, or responding to lawful requests) | Relevant records | Compliance with a legal obligation (Article 6(1)(c)) |
Special category (health and disability-related) data — explicit consent
Because dietary requirements, allergies, and accessibility or reasonable-adjustment needs can reveal information about your health or disability, we rely on your explicit consent under Article 9(2)(a) of the UK GDPR to process these details, in addition to the ordinary lawful basis shown above. You give this consent when you submit these details to us. You do not have to provide this information, but if you do not, we may not be able to meet your dietary needs or make the adjustments you need. You can withdraw your consent at any time by emailing contact@mayneeventmedia.co.uk.
Our legitimate interests explained
Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights. In each case our interest is a specific, limited one: making the event accessible and safe, responding to your correspondence, administering the event and keeping accurate records, operating a secure website, and preventing people from wrongly claiming discounts they are not entitled to. You can object to processing based on legitimate interests at any time (see Section 10).
5. Discount verification
If you send us an image or email to verify a Blue Light Card or student discount, we view it only to confirm that you are eligible for the discount. We do not use it for any other purpose. Once we have issued your discount code, we delete the image or email immediately. We do not keep a copy.
6. Who we share your data with
We share your personal data only where necessary, and only with:
- Eventbrite, our ticketing provider, which processes your booking and payment on our behalf.
- The venue (Millennium Point), where this is needed for access arrangements, including accessibility arrangements.
- Our professional advisers (such as accountants or legal advisers), where necessary.
- Authorities, regulators, or other third parties where we are required to share data by law.
We do not sell your personal data to anyone.
7. International transfers
Some of our providers may process your personal data outside the United Kingdom. For example, Eventbrite may store or process data on servers in other countries. Where your data is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as:
- UK adequacy regulations (where the UK government has decided the destination country provides an adequate level of protection);
- the UK International Data Transfer Agreement (IDTA); or
- the UK Addendum to the EU Standard Contractual Clauses.
You can ask us for more information about these safeguards by emailing contact@mayneeventmedia.co.uk.
8. Cookies and website data
When you visit our website, we use a limited amount of cookie and website data. Strictly necessary cookies (which are needed to make the website work and keep it secure) are used on the basis of our legitimate interests, and do not require your consent. For non-essential cookies, such as analytics cookies that help us understand how the website is used, we ask for your consent first, in line with the Privacy and Electronic Communications Regulations (PECR). You can accept or reject non-essential cookies, and change your choice at any time. For more detail, please see our cookie policy, if published on our website.
9. How long we keep your data
We keep your personal data only for as long as we need it. Our standard retention periods are:
- Booking records, attendance records, and correspondence: up to 24 months after the event.
- Dietary requirements, allergy information, and accessibility or reasonable-adjustment details: deleted within about one month of the event.
- Discount-verification images and emails: deleted immediately once we have verified your eligibility.
- Marketing consent and contact details for marketing: kept until you unsubscribe or withdraw your consent.
- Website and cookie data: kept for short periods only. Session cookies expire when you close your browser session, and analytics data is generally kept for up to 13 months.
Where we are required by law to keep certain records for longer (for example, financial records), we will keep those records for the period the law requires.
10. Your rights
Under the UK GDPR, you have the following rights over your personal data:
- The right to be informed about how we use your data (which this notice provides).
- The right of access — you can ask for a copy of the personal data we hold about you.
- The right to rectification — you can ask us to correct data that is inaccurate or incomplete.
- The right to erasure — you can ask us to delete your data in certain circumstances.
- The right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
- The right to data portability — you can ask us to provide certain data in a portable format.
- The right to object — you can object to processing based on our legitimate interests, and to direct marketing at any time.
- Rights relating to automated decision-making — we do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you.
- The right to withdraw consent — where we rely on your consent (including your explicit consent for health and disability-related data, and your consent for marketing and non-essential cookies), you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it.
To exercise any of these rights, please email us at contact@mayneeventmedia.co.uk. We will respond within the time limits set by law (usually within one month).
11. Marketing
We will only send you marketing about our future events where you have asked us to, by giving your consent. Every marketing email we send will include an easy way to unsubscribe, and you can unsubscribe or withdraw your consent at any time by clicking the unsubscribe link or emailing contact@mayneeventmedia.co.uk. If you unsubscribe, we will stop sending you marketing, although we may still contact you about a booking you have made.
12. How to complain
If you are unhappy with how we have handled your personal data, please contact us first at contact@mayneeventmedia.co.uk so we can try to put things right.
You also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk. Complaining to the ICO does not affect any other legal rights you may have.
13. Changes to this notice
We may update this notice from time to time, for example if the way we use your data changes or the law changes. When we make changes, we will update the effective date and version number at the top of this notice. Where the changes are significant, we will take reasonable steps to bring them to your attention, for example by email or by posting a notice on our website. We encourage you to review this notice from time to time so you stay informed about how we use your personal data.