Who we are

ReBalance Bath Festival of Wellbeing is run by The Bath BID Company, a not-for-profit company limited by guarantee registered in England and Wales (company number 6642936). Our registered office is 11A York Street, Bath BA1 1NG.

The Bath BID Company is the data controller for the personal information collected through this website.

Questions about this policy or your information: Data Protection Officer, The Bath BID Company, 11A York Street, Bath BA1 1NG. Email info@bathbid.co.uk. Phone 01225 430640.

What this policy covers

This policy explains what we collect when you use rebalancebath.co.uk, why, who we share it with, how long we keep it and what your rights are. It covers three kinds of visitor:

• People browsing the festival programme.
• Organisers, venues and practitioners who register an event, offer or package.
• People who sign up to our newsletter.

Ticket purchases are made on Bath Box Office or an organiser’s own ticketing site, not on this website. Those sites have their own privacy policies.

Information we collect from organisers

If you register to take part in the festival, we ask for:

• Your name, email address and phone number.
• Your business or practitioner name, address and website, and your social media links.
• Whether you are a Bath BID levy payer, a business outside the levy area, or a practitioner.
• A logo or photo, if you choose to give one.
• Details of your event, offer or package: title, description, dates, venue, prices, age guidance, accessibility information and an image.

If Bath Box Office are to sell tickets for your event, we also ask for the details they need to set it up: the person responsible for the event, their job title, an email address for billing and sales reports, the promoter name to show online, capacity, concessions and reporting preferences.

We do not collect bank details on this website. If Bath Box Office need them to pay you ticket income, they will ask you directly.

How we use organisers’ information

• To review your registration and decide whether your event can be part of the festival. This is a step towards a contract with you.
• To create an account on this website so you can complete, update and add to your events. We send log-in links by email rather than using passwords.
• To publish your event in the festival programme. The published listing shows your event details, your business or practitioner name and website, and your event image. It does not show your personal contact details.
• To pass approved events to. Bath Box Office so they can set up ticketing, where you have chosen them as your ticket provider.
• To contact you about your registration, your event and the festival, by email.
• To keep a record of who has taken part, for the running of future festivals.

Our lawful bases are: taking steps at your request before entering into a contract, and performing that contract once your event is accepted; our legitimate interest in running the festival and keeping accurate records; and your consent where we ask for it, which you can withdraw at any time.

Who we share organisers’ information with

• Bath Box Office (Bath Festivals, Bath BA1 1NG) receives the details of events it will ticket, including your name, job title, phone, billing email, event copy, image, prices, capacity and accessibility information. Bath Box Office is a separate data controller for ticketing and has its own privacy policy at bathboxoffice.org.uk. We share this only where you have chosen Bath Box Office as your ticket provider and agreed to it on the form. **[Confirm Bath Box Office’s legal entity name.]**
• Event partners and city stakeholders, where needed to deliver your event or with your consent.
• Service providers who process data on our behalf under contract: our website host Zonkey Solutions Ltd our email delivery service SendGrid (Twilio Inc.), and Mailchimp for newsletter mailings.

We do not sell personal information or share it with third parties for their own marketing.

Newsletter

If you sign up to the ReBalance Bath newsletter we hold your email address, and your name if you give it, to send you festival news, on-sale alerts and offers. We do this with your consent. Every email has an unsubscribe link, and you can also ask us to remove you at any time. You’ll be added to the Rebalance list, but will have the opportunity to also join our other lists if you wish.

Information we collect from everyone

Website logs. Our host records technical information about visits, such as IP address, browser, pages requested and the time of the visit, for security and diagnostics. These logs are kept for 30 days.

Cookies. This website sets cookies only where they are needed for it to work:

• Log-in cookies, if you sign in as an organiser, so the site remembers you while you move between pages. They expire when you log out or after 30 days.
• A cookie set by our forms to protect against spam and to carry you between pages of a form.

Enquiries. If you email us, we keep your message and our reply for as long as needed to deal with it and for our records.

Analytics. If you accept, we use Google Analytics 4 to understand how the site is used: which pages are visited, how people find the site, and which events and filters are clicked. Google sets cookies (`_ga` and `_ga_*`) that last up to two years and identify your browser, not you. IP addresses are anonymised. Google processes this data on our behalf and may transfer it outside the UK under its standard contractual clauses; see Google’s privacy policy at policies.google.com/privacy. We do not use analytics for advertising. Nothing is sent to Google until you accept, and you can change your choice at any time using the Cookie settings link in the footer.

How long we keep information

• Organiser accounts and event records: for the festival they relate to and the following **[two]** festivals, so we can invite you back and keep an accurate record of past programmes. Published event pages stay online as an archive of past festivals; they show event details, not personal contact details.
• Registrations that are declined or not completed: 12 months after the festival they were submitted for.
• Newsletter subscribers: until you unsubscribe. If you unsubscribe we keep a minimal record so that we honour your choice.
• Analytics data in Google Analytics: 14 months, the Google Analytics retention setting.
• Website logs: 30 days.

How we protect information

The website is served over an encrypted connection. Organiser accounts use single-use log-in links sent to your email address rather than stored passwords. Access to the administration area is limited to Bath BID staff and our website agency, Zonkey, who support the site under contract. No transmission over the internet is completely secure, and we cannot guarantee the security of information you send to us, but we take reasonable steps to protect it once it is with us.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your information, where we no longer need it.
• Ask us to limit how we use it, or object to our use of it, in some circumstances.
• Receive the information you gave us in a portable format.
• Withdraw consent at any time, where we rely on it.

To make a request, email info@bathbid.co.uk or write to the Data Protection Officer at the address above. We may ask you to confirm your identity. We will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would welcome the chance to put things right first.

Children

This website and the organiser forms are intended for adults. Some festival events have age guidance, shown on the event page.

Changes to this policy

We will post any changes on this page and update the date below. If the change is significant and we hold your email address, we will let you know.

Last updated: 2nd November 2026