Privacy Policy

1. Overview & Data Controller

Banko Fam Jam (“we”, “us”, or “our”) operates the website bankofamjam.co.uk. For the purposes of the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Banko Fam Jam is the data controller responsible for your personal information.

2. Information We Collect

When you use our services or purchase event passes, we may collect:

• Contact & Identification Data: Full name, email address, and contact telephone number provided during ticket checkout.
• Booking Information: Event attended, ticket tier, quantity, unique booking reference, and entry timestamp.
• Technical & Usage Data: IP address, device type, browser information, and referral URLs when browsing our platform.

3. Payment Processing & Cardholder Security

We prioritize your payment security and maintain strict PCI-DSS compliance:

• No Raw Card Storage: Banko Fam Jam servers never store or touch your full credit card number, expiry date, or CVV/CVC security code.
• Stripe Security: All financial transactions are directly tokenized and handled by Stripe Payments UK with 256-bit AES encryption, SCA (Strong Customer Authentication), and 3D Secure 2.0 protocols.
• Digital Wallets: When using Apple Pay or Google Pay, your payment tokens and biometric verifications remain encrypted within your secure device hardware.

4. How We Use Your Data

We process your personal information on the following legal bases:

• Performance of Contract: To generate official QR code passes, deliver booking confirmations to your email, and verify admissions at the door.
• Legitimate Interests: To communicate important event updates, venue safety announcements, and fraud prevention checks.
• Consent: To send our newsletter or early-bird release notifications (only when explicitly opted-in; you can unsubscribe at any time).

5. Third-Party Sharing & Data Transfers

We do not sell, rent, or trade your personal information to third parties. We only share necessary data with trusted service providers:

• Stripe UK: For secure payment gateway execution.
• Host Venues: For guest list door verification and capacity compliance.
• Email Services: For reliable digital ticket pass delivery.

6. Your UK GDPR Data Protection Rights

Under UK data protection legislation, you have the right to:

• Request access to copies of your personal data.
• Request rectification of inaccurate or incomplete information.
• Request erasure of your personal data (“right to be forgotten”), subject to statutory record-keeping requirements.
• Object to or restrict our processing of your personal information.
• Request data portability.