Privacy Policy

What we collect

• Contact data: name, email, phone (optional), subject, and message when you submit the contact form.
• Usage and device data: pages viewed, approximate location, browser, and device type. We only run analytics if you opt in.
• Cookie and preference data: your choices saved in localStorage key neopepe_cookie_consent and related UI preferences.
• Transaction context (if applicable): if we sell tickets or merch during the tour, order details and support communications are processed by our payment and fulfillment providers. We’ll show provider details at checkout where relevant.

How we use your data

• Provide and improve the site, content, and community features.
• Respond to inquiries and support requests.
• Run privacy-respecting analytics to understand what’s helpful and fix issues (only with consent).
• Protect the site, prevent abuse, and comply with legal obligations.

Legal bases under UK/EU GDPR: your consent (analytics/marketing cookies), contract (when you request information or buy something), legitimate interests (site safety, basic metrics, product improvement), and legal obligation (records and compliance).

Cookies and similar technologies

Our banner lets you choose. You can accept all, decline, or customize preferences and change them anytime.

• Strictly necessary: store your cookie choices and improve basic experience (e.g., localStorage for banner preferences).
• Analytics (optional): Google Analytics (G-NEOPEPE123). Loads only if consent is granted.
• Marketing/measurement (optional): Meta Pixel (FB-PIXEL-ID-123). Loads only if consent is granted.

You can also manage cookies in your browser settings. Declining analytics will not affect core site use.

Sharing and processors

We do not sell your personal information. We share it only with:

• Service providers acting on our behalf (hosting, analytics, security, email). They are bound by contracts and process data only as instructed.
• Authorities, if legally required to protect our rights or comply with the law.

Key tools (if consented): Google Analytics and Meta Pixel. Please refer to their privacy documentation for details. We keep our vendor list lean and under review.

International transfers

Some providers may process data outside the UK/EEA, including the United States. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses and risk assessments to protect your data.

Retention

• Contact messages: up to 24 months.
• Cookie consent records: up to 13 months.
• Analytics data (if enabled): typically 26 months (or provider default, whichever is shorter).
• Transactional records (if applicable): as required by tax and accounting laws (commonly up to 6 years in the UK).

Your rights

Subject to applicable law, you can request: access, correction, deletion, restriction, portability, and to object to certain processing. Where we rely on consent, you can withdraw it anytime from the cookie banner or by contacting us.

If we can’t resolve your concern, you can lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local authority.

Children

Our site is not directed to children under 16. If you believe a child provided us data without appropriate consent, contact us and we’ll delete it.

Security

We use reasonable administrative, technical, and organizational measures to protect data. No online service is 100% secure, but we work to minimize risks and respond promptly.

Changes to this policy

We may update this policy to reflect changes to our practices or legal requirements. We’ll post the updated version here with a new “Last updated” date.