1. Identify the controller
Treat Lantern Scout Media Ltd, company number 15482631, as the controller for personal information processed through clipscoutlistlantern.online. Write to 162–168 Regent Street, London W1B 5TG, United Kingdom, or email [email protected], then include enough detail for us to understand your request.
2. Review what we collect
Provide your name, email address, subject and message only when you use the contact form or email us directly. Expect our hosting systems to process technical records such as IP address, browser type, requested page, timestamp, referring address and security events. Avoid sending payment details, passport information, health data or other sensitive information through the contact form.
Allow your browser to store a cookie preference in local storage when you choose an option in the banner. Understand that the current static site does not create user accounts or process direct bookings. Contact festival organisers and travel providers separately, then review their privacy notices before giving them personal information.
3. Check our purposes and legal bases
Expect us to process contact messages to answer your request, relying on legitimate interests or steps taken at your request before a contract. Expect us to process limited server logs to secure, diagnose and maintain the service, relying on legitimate interests. Give consent before any optional analytics or functional technology is activated, then withdraw that consent through browser storage controls whenever you choose.
Understand that we may process records when necessary to comply with law, establish legal claims or respond to regulators. Do not provide another person’s information unless you have permission, then tell that person to review this policy.
4. Review processors and transfers
Expect vetted providers to support website hosting, email delivery, security, backups and professional administration. Require those processors to act under contractual instructions and apply appropriate safeguards. Where information moves outside the United Kingdom or European Economic Area, expect us to use an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism, then contact us for further information about relevant safeguards.
5. Check retention periods
Expect routine contact correspondence to be retained for up to 24 months after the last meaningful interaction, unless legal, accounting or dispute requirements justify longer storage. Expect security logs to be retained for up to 12 months, while cookie-choice data remains in your own browser until you clear it. Ask us to delete information sooner where applicable, then understand that backups may retain protected copies until normal rotation completes.
6. Exercise GDPR rights
Request access, correction, deletion, restriction, portability or objection where the UK GDPR or EU GDPR applies. Withdraw consent without affecting earlier lawful processing, then lodge a complaint with the UK Information Commissioner’s Office or your local supervisory authority if you remain concerned. Verify your identity when reasonably requested so we do not disclose information to the wrong person.
7. Exercise California rights
Request disclosure, correction or deletion where the California Consumer Privacy Act applies, and request information about categories collected, sources, purposes and recipients. Understand that we do not sell personal information or share it for cross-context behavioural advertising as those terms are defined by California law. Use our privacy email to submit a request, then appoint an authorised agent with written proof if needed.
8. Protect children and your information
Do not submit personal information if you are under 13, and ask a parent or guardian to contact us instead. Use reasonable care when sending messages because no internet transmission can be guaranteed completely secure. Report suspected misuse promptly, then preserve relevant screenshots or message details.
9. Contact the privacy lead
Direct privacy and data-protection questions to the Data Protection Lead at [email protected] or our registered address. Include “Privacy Request” in the subject line, identify the right you wish to exercise and state your country or state, then allow us the legally permitted response period.