YOUR INFORMATION.

Who is responsible?

BACK ON! LTD, company number 17417137, is the controller of personal information covered by this notice. Our registered office is 51 Annandale Avenue, Bognor Regis, England, PO21 2ET. Contact support@getbackon.co.uk.

What this notice covers

This notice covers this website, venue enquiries, messages sent to our business email and the private publishing area. Rentals and payments at a station may involve additional processing by the rental-platform and payment providers. The relevant rental privacy information must be available before a rental; this website does not collect payment-card details.

Information we use and why

• Enquiries and support: your name, venue name and location, email, optional phone number, message, any reference you supply and our correspondence. We use these to respond, investigate issues and consider a business relationship. Our lawful basis is legitimate interests in responding to requests and managing our business; where you personally request steps towards a contract or we perform a contract with you, we use contractual necessity as applicable.
• Website security: hosting access logs can include an IP address, requested page, time, browser information and errors. The application uses a keyed hash derived from your IP address for short-lived abuse prevention. Our lawful basis is legitimate interests in protecting the website and preventing spam.
• Legal and business records: we may retain relevant records where needed to meet legal obligations or establish, exercise or defend legal claims, using legal obligation or legitimate interests as applicable.

Submitting an enquiry is voluntary. Without a working contact method and enough information about your request, we may be unable to respond. The form does not subscribe you to marketing. Please do not submit sensitive information or payment credentials.

Who receives information?

We use Namecheap to host our website and store enquiries submitted through our venue enquiry form. Namecheap processes the submitted contact and venue details, together with technical information generated when visitors use the website.

We use Zoho Mail to send, receive and store enquiry notifications and related correspondence. Zoho processes email addresses, message contents and associated email delivery information.

Access is limited to people who need the information to handle the request, operate the service or provide professional advice. Information may also be disclosed where legally required. We do not sell enquiry details.

Processing outside the UK

Our website is hosted by Namecheap in the United States, where personal information submitted through our enquiry form is processed and stored. Namecheap’s published Data Processing Addendum forms part of its service terms and includes contractual provisions concerning international data transfers.

We use Zoho Mail’s EU service to handle enquiry emails. Zoho states that EU service data is stored within the European Union, although authorised technical support personnel may access it from India in certain circumstances.

We are confirming the specific UK transfer safeguards applicable to these arrangements. We do not represent that all processing takes place in the UK or EU, or that a particular UK transfer agreement has been verified.

For further information about our providers and the applicable safeguards, contact support@getbackon.co.uk

How long information is kept

Copies in the website’s private enquiry inbox are retained for up to 90 days and removed on the next inbox or enquiry request after that period. Email correspondence is kept while we follow up your request or maintain the relevant business relationship. We review closed enquiries and retain additional records only where needed for legal, accounting or dispute-related purposes. Hosting providers may maintain security logs and backups under their own service retention schedules; contact us for the applicable details.

Application rate-limit records expire after their configured period, no longer than one hour, and are removed on the next rate-limit request. Private editor authentication records are kept while the account is in use. An editor session expires after 30 minutes of inactivity or eight hours overall.

Cookies and third-party content

The public website does not deliberately set advertising or analytics cookies and does not embed social-media tracking widgets. Fonts and page assets are hosted with the website. A strictly necessary session cookie is used only when accessing the private publishing area. Following an external link takes you to a service with its own privacy arrangements.

Your rights

Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction or portability. These rights are subject to legal conditions and exceptions.

If we rely on your consent for a particular future activity, you can withdraw it without affecting the lawfulness of processing before withdrawal. We do not make solely automated decisions with legal or similarly significant effects about you.

Questions or complaints

Contact us first if you would like us to address a concern. You can also complain to the Information Commissioner’s Office, the UK data-protection regulator.

Updates

We update this notice when our processing changes. Last updated: 25 September 2026.