top of page
Snowflakes 2.png
BRISTOL CHRISTMAS MARKET LOGO.png
DATES.png

Privacy Policy

Bristol Christmas Market

Last updated: 14 October 2026

​

This policy explains how Relevention Ltd uses personal information in connection with the Bristol Christmas Market website, enquiries, newsletters and bookings. It also explains your choices and how to contact us about your information. You do not need to agree to marketing to browse the website, ask a question or make a booking.

​

1. Who is responsible for your information

Relevention Ltd is the controller of the personal information we use for the purposes described in this policy. We are registered in England and Wales under company number 06393533, with our registered office at 24 Cecil Avenue, Bournemouth, BH8 9EJ, United Kingdom.

​

For privacy enquiries or to exercise your rights, email info@bristolchristmasmarket.com with “Privacy” in the subject line, or write to our registered office. Our website is www.bristolchristmasmarket.com.

​

2. Information we collect and where it comes from

Enquiries: your name, email address, telephone number if supplied, message and our correspondence with you.

​

Bookings: the lead booker’s contact details, booking reference, date and time, party size, selected experiences and packages, payment status, transaction references and information needed to fulfil or amend the booking. Our booking provider and payment provider handle the information entered into their checkout. We receive the information needed to administer the booking, rather than requiring you to send us card details directly.

​

Newsletters: your name where supplied, email address, subscription preferences, and records showing when and how you subscribed or withdrew consent.

​

Website use: IP address, browser and device information, page requests, timestamps, security logs and cookie or similar identifiers. Additional usage information may be collected through optional technologies where you have agreed to them.

​

Smart Chat: the messages and any contact information you choose to provide, together with technical information needed to operate the chat. Please do not enter payment card details, identity documents or unnecessary sensitive information.

​

Access and dietary requests: only the information needed to understand and respond to your request. This may reveal health information, such as an allergy or disability. Please describe the assistance you need rather than supplying a full medical history.

​

We normally receive information directly from you, through our website and booking providers, or from the lead booker where someone books on your behalf. We may also receive messages you send through our social media channels. If you supply another person’s information, please ensure they know it will be used for the booking and can read this policy.

​

3. Why we use information and our lawful bases

Enquiries and customer support: we use your contact details and correspondence to answer questions and manage complaints. Our basis is our legitimate interest in responding to visitors and operating the market. Where you are asking us to take steps towards your own booking, or contacting us about it, we also rely on taking those steps or performing that contract, as appropriate.

​

Bookings and service messages: we use necessary booking information to accept bookings, deliver experiences, process payments and refunds, and send confirmations or operational updates. Our basis is performance of our contract with the booker. For other party members and business booking contacts, our basis is our legitimate interest in arranging and delivering the requested booking.

​

Newsletters: we use your email address to send Bristol Christmas Market news and offers when you opt in. Our basis is consent. We do not treat an enquiry or booking as permission to subscribe you to marketing.

​

Website security and administration: we use technical data to operate the site, diagnose faults and prevent misuse or fraud. Our basis is our legitimate interest in providing a secure, reliable service.

​

Optional analytics and advertising: where enabled, we use these technologies with your consent to understand website use, measure campaigns and display relevant advertising. You can refuse optional technologies without subscribing to marketing or affecting an existing booking. Details of the services offered and available choices are provided through the cookie consent interface.

​

Legal records and disputes: we use information where necessary to meet applicable accounting, tax and other legal obligations. Where needed to establish, exercise or defend a legal claim, we rely on our legitimate interest in protecting legal rights, together with any additional legal condition required for sensitive information.

​

We consider the impact on individuals before relying on legitimate interests. You may object to this processing on grounds relating to your circumstances.

​

4. Health information and access requests

Where we need to record health-related details to arrange an optional dietary or accessibility request, we ask for your explicit consent to that use and any necessary sharing with the operator fulfilling the request. We also identify an ordinary lawful basis, such as performing your booking contract or our legitimate interest in arranging support for a guest.

If a different special-category condition is required for a particular purpose, such as dealing with a legal claim or a qualifying emergency, we will use the applicable legal condition. We do not treat a general contact form submission as blanket consent to all uses of health information.

​

You may withdraw consent at any time. We will explain any practical effect on a request and consider whether it can be met without retaining that information. Withdrawal does not affect processing that was lawful beforehand or information we must retain under another applicable legal basis.

​

5 Newsletters and your choices

You can unsubscribe using the link in any marketing email or by contacting us. This will not stop necessary messages about an existing booking, such as a cancellation or time change.

We retain a limited suppression record where necessary to respect an opt-out and avoid adding you back to a mailing list. Its use is based on our legitimate interest in honouring your preferences and, where applicable, our legal obligations.

​

We use email delivery and mailing-list service providers to manage subscriptions and send newsletters on our behalf. These providers process subscriber details and delivery records for that purpose. Where optional tracking is used to measure email opens or link clicks, we obtain any consent required by law and explain the tracking when you subscribe. Subscribing to a newsletter does not automatically provide consent to every form of tracking.

​

We will not use your Bristol Christmas Market newsletter subscription to market unrelated Relevention brands unless your opt-in clearly covered those brands or we obtain a separate appropriate permission.

​

6 Website cookies and embedded services

Cookies and similar technologies can store information on your device or access information already stored there. Some are necessary to deliver a service you request, maintain security or remember privacy choices. Optional analytics and advertising technologies are separate from those necessary functions.

​

Our policy is to seek consent before using optional analytics or advertising technologies. You may accept or refuse optional categories and change your choice through the site’s cookie settings. Refusing optional cookies should not prevent access to the core information on our website. Some optional embedded features may remain unavailable until enabled.

​

You can review the services and cookie information using “More Information” in the privacy banner, and manage optional consent through the privacy controls presented on the site. Contact us if you need help accessing these controls or withdrawing consent. Necessary cookies are used only for the functions that require them; optional cookies are not treated as necessary merely because they are useful to our business.

​

Our site uses a Usercentrics consent interface. External booking pages have their own cookie controls. Browser controls can also delete or restrict cookies, although blocking necessary cookies may affect functions such as checkout. A social media link is not, by itself, the same thing as an embedded tracking service.

​

7. Who receives information

We share only the information needed for the relevant purpose with authorised staff and suppliers supporting the website, customer enquiries, bookings, payments, communications and technical maintenance.

​

Our website is built on Wix. Our linked booking service is DigiTickets, and the booking portal identifies Payyo as its payment processor. These services receive the information needed for the functions they provide. Some providers act on our instructions; payment providers and other services may also act as independent controllers for their own compliance, security and service purposes. Please read the privacy information presented by the relevant service when using it.

​

Chat and customer-support technology providers process messages and the technical information needed to supply the chat service on our behalf. If an automated or AI-powered response is offered, the conversation is used to respond to your enquiry and support our customer service. We do not authorise the use of your identifiable conversations to train general-purpose AI models for unrelated purposes. You can contact our team at info@bristolchristmasmarket.com instead of using Smart Chat.

​

Where necessary, we share relevant booking or dietary information with the operator or caterer delivering your experience. We may also disclose information to professional advisers, insurers, regulators or law enforcement where legally required or justified for a specific lawful purpose.

​

We do not sell personal information. Independent traders are responsible for information you give them directly. Their own privacy information applies to those dealings.

​

8. International processing

Some suppliers may process information outside the United Kingdom. Where a transfer is restricted by UK data protection law, we use an applicable adequacy decision or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum to approved contractual clauses, with any required assessment and additional protections.

You can contact us for further information about relevant safeguards and how to obtain a copy, subject to necessary redaction of confidential information.

​

9. How long we keep information

Our retention policy sets the following normal maximum periods for information under our control. We delete or anonymise information sooner where it is no longer needed. These periods do not mean that every record must be kept for the full duration.

General enquiries and routine chat records: up to 12 months after the enquiry is resolved, to handle follow-up questions and provide continuity of customer service. Only information needed for a booking, complaint or legal record is kept for a longer applicable period.

Booking and transaction records: core contracts, invoices, payment and refund records are kept for six years from the end of the company financial year to which they relate, or longer where tax or other law requires. Unnecessary guest details and routine correspondence are removed sooner. This period does not apply automatically to health information.

Health-related access and dietary information: normally deleted within 30 days after the visit or cancellation, once the request has been dealt with. A limited relevant record may be retained longer where necessary for an incident, complaint or legal claim, using the applicable lawful basis and special-category condition.

​

Newsletter records: retained while you remain subscribed. We review inactive subscriptions annually and normally remove them after 24 months without meaningful engagement. Necessary evidence of consent is retained for up to six years after its last use to address compliance queries or claims. A minimal suppression record is kept for as long as needed to prevent unwanted marketing, with regular review.

​

Technical logs and analytics: routine identifiable technical and security logs are normally retained for up to 90 days; records relevant to a security incident may be retained for the investigation and any necessary follow-up. Optional identifiable analytics data is retained for up to 14 months. Cookie expiry varies by function and provider and is explained in the cookie information. Consent records are retained only as necessary to demonstrate and respect your choices.

​

Event images used for publicity: reviewed annually and normally retained for up to five years after the event. Selected images may be retained longer where they remain relevant to an ongoing publicity purpose, subject to a documented review of necessity, proportionality and the rights of people shown. Outdated or unnecessary identifiable images are removed.

We may retain relevant records longer where necessary for a legal obligation or an actual or reasonably anticipated dispute. We restrict their use to that purpose and review whether they are still needed. Information is then deleted or anonymised; backup copies are removed through the applicable backup retention cycle.

​

10. Event photographs and video

Where we publish identifiable photographs or video of the market, we identify an appropriate lawful basis and consider the people shown. General event coverage may rely on our legitimate interest in documenting and promoting the market, where this is proportionate and does not override individuals’ rights. Where consent is the appropriate basis, we obtain it, with particular care for featured images of children.

Attending the market does not by itself give unlimited consent to commercial use of your image. Contact us to raise a concern or object to a particular image, identifying it so we can review the request. Removal is not automatic in every case, but we will consider your rights and circumstances.

​

If we operate CCTV at the market, it is used for site security, crime prevention and incident investigation on the basis of our legitimate interests in protecting visitors, staff and property. Notices at the relevant location identify the operator and provide contact information. Routine recordings are normally overwritten within 30 days, and sooner where no longer needed. Relevant extracts may be retained for an incident, insurance matter or legal claim and shared where necessary and lawful with security providers, insurers or law enforcement. Cameras operated independently by traders, neighbouring businesses or public authorities are subject to those organisations’ own notices.

​

11. Your rights

Depending on the circumstances and applicable law, you may ask to access your personal information, correct it, erase it, restrict its use, or receive certain information in a portable format. You may object to processing based on legitimate interests and object to direct marketing at any time. You may also withdraw consent where we rely on it.

We may need proportionate information to verify your identity. We respond within the time limits required by law, normally one month for an information rights request, and will explain any lawful extension, clarification requirement or reason we cannot fully comply. Requests are normally free.

​

We do not use Smart Chat to make legally binding decisions about your booking or requests. You can ask our team to review an automated response or resolve a concern. Payment providers may carry out their own automated security or fraud checks under their privacy notices. Where applicable law gives you safeguards in relation to a significant automated decision, you may seek human intervention, explain your position and challenge the decision.

Where information is required to arrange a booking or answer a request, we will explain which fields are necessary. Without that information, we may be unable to provide the requested service. Marketing consent remains optional.

​

12. Complaints and security

Please contact info@bristolchristmasmarket.com if you have a concern about our handling of personal information. We will acknowledge and investigate your complaint and respond within applicable legal time limits.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk/make-a-complaint. You do not need our permission to do so.

We use proportionate technical and organisational measures to protect personal information and limit access to those who need it. No online service can guarantee absolute security. Please avoid sending unnecessary sensitive information through ordinary website forms or email.

​

13. Children and policy changes

The market welcomes families, but bookings and related personal information should be managed by an adult. We do not seek unnecessary information about children. If you believe a child has supplied information that should not be held, please contact us.

We may update this policy when our services, suppliers or legal requirements change. We will display the updated date and provide additional notice or obtain consent where required. UK data protection law, including the UK GDPR, Data Protection Act 2018 and applicable electronic communications rules, governs our handling of personal information.

bottom of page