Privacy Policy

Last updated: 30/03/2026

1. Controller

Drena, 3 The Quadrant, Warwick Rd, Coventry CV1 2DY, United Kingdommuita@drena.com. This Policy explains how we collect, use, share and protect personal data when you use our website and buy tickets.

2. Data we process

  • Account & orders: name, email, mobile, billing details when needed, order data, tickets issued, support messages.
  • Payments: handled by WooPayments/Stripe; we receive transaction references and status (we do not store full card data).
  • Marketing: email and preferences (only with your consent).
  • Technical: IP, device/browser, and logs necessary for security and performance (e.g., via Cloudflare).

3. Purposes & lawful bases

  • Contract: create account, process your purchase, issue and deliver tickets, provide support.
  • Legal obligations: fraud prevention, accounting/tax compliance.
  • Legitimate interests: site security, service improvement (you may object where applicable).
  • Consent: newsletters/marketing (you can withdraw at any time).

4. Sharing with processors

  • WooPayments/Stripe — payment processing and fraud prevention.
  • Mailchimp and Brevo (Sendinblue) — email marketing (with consent and opt‑in records).
  • Cloudflare — CDN/security and performance.

We engage processors only as necessary and under appropriate data processing agreements.

5. International transfers

Where data is transferred outside the UK/EEA (e.g., to the US), we use appropriate safeguards (such as Standard Contractual Clauses and, where applicable, Data Privacy Framework/UK Extension). We keep records of our vendors and transfer mechanisms.

6. Retention

We keep data for as long as necessary for the purposes above and applicable legal requirements. Afterwards, we delete or anonymise data.

7. Your rights

  • Access, rectification, erasure, restriction, portability and objection (for legitimate interest processing).
  • Withdraw consent for marketing at any time.
  • Complain to the competent supervisory authority (e.g., ICO in the UK or your local EEA authority).

8. Cookies

We use essential cookies and, with consent, analytics/marketing cookies. You can manage preferences via our cookie banner and your browser settings. See our Cookie Policy for details.

9. Security

We apply appropriate technical and organisational measures. Our vendors (e.g., Cloudflare and Stripe) maintain enterprise‑grade security controls.

10. Contact

For privacy requests or questions: muita@drena.com. We aim to respond within 2 business days (08:00–18:00).