Last Updated: August 2026

BlackLifted and the Team at CACE Events CIC ("we", "us", "our") are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website, purchase tickets, register for workshops, submit films, or interact with our services.

We operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Data Controller: BlackLifted Festival and CACE Events CIC
• Contact Email: hello@cace.org.uk
• Postal Address: CACE Events CIC, LIDO Centre, 63 Mattock Lane, Ealing W13 9LA

If you have any questions about this Privacy Policy or wish to exercise your legal rights regarding your personal data, please contact us using the details above.

We may collect, use, store, and transfer different kinds of personal data depending on how you interact with us:

• Identity Data: First name, last name, username, or title.
• Contact Data: Email address, telephone number, and billing/delivery address.
• Transaction Data: Details about payments made via third-party ticketing platforms (e.g., Ticket Tailor), ticket purchases, workshop registrations, or film submission fee history via FilmFreeway. (Note: We do not directly collect or store complete financial credit/debit card data; all transactions are processed securely through regulated third-party payment providers).
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform via website analytics/cookies.
• Marketing & Communications Data: Your preferences in receiving marketing updates, festival newsletters, and survey responses.
• Submission / Participant Data: Information provided during film submissions, judge applications, or workshop participant intake forms (including portfolio links, bio information, and project details).

We collect data through:

• Direct Interactions: When you buy tickets, register for events/workshops, sign up for our newsletter, apply as a festival judge or sponsor, or contact us via email or contact forms.
• Third-Party Platforms: When you register for events via embedded ticket widgets (e.g., Ticket Tailor) or submit creative works via submission platforms (e.g., FilmFreeway).
• Automated Technologies: As you navigate our site, technical data may automatically be collected using standard website cookies and analytics tools.

We will only use your personal data when the law allows us to. Most commonly, we process data under the following legal bases:

Purpose / Activity

Type of Data

Legal Basis for Processing

Processing ticket sales, workshop bookings, and sending confirmation details

Identity, Contact, Transaction

Performance of a Contract

Managing film submissions, judge applications, and festival programming

Identity, Contact, Submission Data

Performance of a Contract / Legitimate Interests

Sending marketing updates, press releases, and festival news

Identity, Contact, Marketing

Consent (where opted-in) / Legitimate Interests

Responding to enquiries, feedback, or customer support requests

Identity, Contact

Legitimate Interests

Site administration, analytics, and security improvements

Technical

Legitimate Interests

We do not sell your personal data. We may share your data with trusted third-party service providers solely for the operation of our festival services:

• Ticketing & Event Management: Ticket Tailor (processes event registrations and ticket sales).
• Email Marketing & Newsletters: Mailchimp / Email Service Providers (manages subscriber mailing lists).
• Website Hosting & Analytics: Website platform hosts and analytics services (e.g., 123 Reg, Google Analytics).
• Payment Processors: Stripe / PayPal (handles secure payment transactions).

All third-party service providers are contractually required to respect the security of your personal data and treat it in accordance with UK data protection laws.

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations.

• Event & Ticket Data: Retained for accounting/auditing purposes in accordance with legal tax requirements (typically up to 6 years).
• Marketing Subscribers: Retained until you choose to unsubscribe or withdraw consent.
• Submission & Application Data: Retained for the duration of the festival cycle and planning period.

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no lawful reason for us to continue processing it.
• Right to Object / Restrict Processing: Object to or restrict processing of your data under certain circumstances (including direct marketing).
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time (e.g., using the "Unsubscribe" link in any newsletter).

To exercise any of these rights, please email us at [Insert Contact Email].

Our website uses cookies and similar tracking technologies to distinguish you from other users and analyze web traffic. You can adjust your browser settings to refuse some or all cookies, or to alert you when websites set or access cookies.

Our website may include links to third-party websites, plug-ins, or applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.

If you have concerns about our handling of your personal data, we encourage you to contact us first so we can resolve the issue. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).