Privacy Policy

01Who we are

On Sale When is a daily email newsletter that tells subscribers when tickets, ballots and registration windows open for live events across the United Kingdom.

This website and newsletter are operated by ON SALE WHEN LTD, a company registered in England and Wales under company number 16555829 (“we”, “us”, “our”).

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ON SALE WHEN LTD is the data controller for the personal data described in this policy. This means we are responsible for deciding how and why your personal data is used.

Registered office

150B Greenhill Road, Winchester, SO22 5DR, United Kingdom

Contact for privacy matters

[email protected]

02What this policy covers

This policy explains what personal data we collect when you subscribe to our newsletter or visit onsalewhen.co.uk, why we collect it, what we do with it, who we share it with, and what rights you have over it.

Our newsletter contains links to third-party websites, principally ticket sellers, venues and event organisers. Once you follow a link away from our newsletter or website, this policy no longer applies and the privacy policy of that third party governs how your data is handled. We are not responsible for the content or privacy practices of external sites.

03The personal data we collect

04Why we use your data, and our lawful basis

UK data protection law requires us to have a lawful basis for using your personal data. Ours are set out below.

05Who we share your data with

We use the following service providers, who process personal data on our behalf and under contract:

Beehiiv, Inc.

Our newsletter platform. Beehiiv stores our subscriber list, sends our emails, records open and click data, and hosts our website. Beehiiv is based in the United States.

Google LLC (Google Analytics 4)

Website analytics. Used to understand how visitors find and use onsalewhen.co.uk.

Each of these providers acts as a data processor. They may use your data only to provide services to us and in accordance with our instructions, and may not use it for their own purposes.

We may also disclose personal data where we are required to do so by law, by a court order, or by a regulator; or where disclosure is necessary to establish, exercise or defend legal claims.

If our business is sold or transferred, subscriber data may transfer with it. You would be notified by email before that happened and given the opportunity to unsubscribe.

06Transfers outside the UK

Some of our service providers, including Beehiiv and Google, are based in the United States. This means your personal data may be transferred to, stored in, and processed in countries outside the United Kingdom.

Where we transfer personal data outside the UK, we rely on appropriate safeguards recognised under UK data protection law. These include the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses, or the provider’s certification under the UK Extension to the EU–US Data Privacy Framework.

If you would like more detail on the safeguards applying to a particular transfer, contact us at [email protected].

07How long we keep your data

We keep your subscription data for as long as you remain subscribed.

If you unsubscribe, we delete your subscriber record but retain a minimal suppression record (your email address in hashed or plain form and the date of unsubscribe) indefinitely. This is so that we do not email you again by mistake if your address is later re-imported. Holding this record is itself a legal requirement of demonstrating compliance.

Email engagement data (opens and clicks) is retained for up to 24 months, after which it is deleted or aggregated so that it no longer identifies you.

Correspondence sent to us by email is kept for up to 24 months from our last exchange, unless we need to keep it longer for legal reasons.

Website analytics data is retained in line with the retention period set in Google Analytics, currently 14 months.

08Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small text files placed on your device. We use:

Strictly necessary cookiesAlways on

Required for the website and subscribe form to function. These do not require your consent.

Analytics cookiesWith consent

Set by Google Analytics to measure how our website is used. These are only set where you have given consent.

You can accept or reject non-essential cookies using the banner shown when you first visit, and you can change your choice at any time through the cookie settings link in our website footer. You can also block or delete cookies through your browser settings, though doing so may affect how the site works.

Our emails contain a small tracking pixel which tells us whether an email has been opened. If you prefer not to be counted, most email clients allow you to disable the automatic loading of remote images.

09Your rights

Under UK data protection law you have the following rights. Exercising them is free of charge.

• The right to be informedTo know how your data is being used, which is the purpose of this policy.
• The right of accessTo request a copy of the personal data we hold about you.
• The right to rectificationTo have inaccurate data corrected.
• The right to erasureTo ask us to delete your data, subject to the suppression record described in section 7.
• The right to restrict processingTo ask us to pause our use of your data in certain circumstances.
• The right to data portabilityTo receive your data in a structured, commonly used, machine-readable format.
• The right to objectTo object to processing carried out on the basis of legitimate interests, and an absolute right to object to direct marketing at any time.
• The right to withdraw consentAt any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email [email protected]. We will respond within one month. We may ask you to confirm the email address you subscribed with so that we can be sure we are dealing with the right person.

10How we protect your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These include access controls on our systems, two-factor authentication on administrative accounts, encryption of data in transit, and limiting access to subscriber data to those who need it.

No method of transmission or storage is completely secure. While we do our best to protect your data, we cannot guarantee absolute security.

11Children

Our newsletter is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under the age of 13. If you believe a child has subscribed, contact us at [email protected] and we will delete the record.

12Changes to this policy

We may update this policy from time to time, for example if we add a new service provider or a new feature. The date at the top of this page shows when it was last revised. Where a change materially affects how we use your data, we will tell you by email before it takes effect.

13How to contact us, and how to complain

If you have a question about this policy or about how we handle your data, contact us first at [email protected]. We would always prefer the chance to put something right.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.