Privacy & Cookies

Last updated: 9 June 2026

Vault 27 (“we”, “us”) is a family-run, independent grassroots live music venue at 27 Church Street, Barnsley, United Kingdom, S70 2AH. We respect your privacy and only collect what we genuinely need. This notice explains what personal data we collect, how we use, store and protect it, and your rights under UK data protection law — the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

Who we are

Vault 27 is the “data controller” for the personal data described here. If you have any questions, want to exercise your rights, or wish to make a complaint, contact us at info@vault27barnsley.com or speak to us at the venue.

What we collect, and why

Mailing list sign-ups. When you subscribe we store the name or nickname you give us, your email address, the topics you selected, and the date and time you consented. We use these solely to send you the venue updates you asked for. We use a double opt-in: you confirm your address by email before we add you to the list.
Website analytics.If you accept analytics cookies, we collect anonymous, aggregated information about how visitors use the site — for example which pages are viewed, how people arrived, and broad device and browser type. This helps us see what's popular and improve the site. It is not used to identify you personally and is never used for advertising.
Running the site securely.Like all websites, our servers briefly process technical data (such as your IP address and request details) to deliver pages, serve gig posters, and protect the site against spam, abuse and flooding. We don't use this to identify or track you. Our newsletter form is protected by Cloudflare Turnstile, a privacy-focused bot check that runs invisibly in the background and processes limited technical signals (such as your IP and browser characteristics) to confirm you're human; it doesn't track you across sites. See Cloudflare's Turnstile Privacy Policy for how they handle that data.

Cookies and similar technologies

A cookie is a small file stored on your device. We use two kinds:

Essential cookies and storage— needed for the site to work and to remember your cookie choice. These are always on; the site can't function properly without them, so they don't require consent.
Analytics cookies— set by our analytics provider to measure how the site is used. These are only set if you choose “Accept all” on our cookie banner. We do not load them until you agree.

We do not use advertising or cross-site tracking cookies. You can change your mind at any time — to bring the banner back, or clear this site's storage in your browser.

Our lawful bases

We rely on your consent to send you marketing emails (which you give by ticking the box and confirming by email) and to set analytics cookies — you can withdraw either at any time. We rely on our legitimate interests to operate, maintain and secure the website, kept to what is necessary and balanced against your rights.

Who we share it with

We never sell your personal dataand never share it for anyone else's marketing. We only share it with the trusted service providers (“processors”) that run parts of our service for us, under contracts requiring them to protect it and act only on our instructions:

Email delivery — to send your confirmation and newsletter emails.
Website hosting and database — to run the site and securely store subscriber records.
Website analytics — to measure how the site is used (only if you accept analytics cookies).
Bot protection — Cloudflare Turnstile, to keep the sign-up form from being abused by automated traffic.

We may also disclose data where we are required to by law.

International transfers

Some of our providers are based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place (such as a UK adequacy decision or the UK International Data Transfer Agreement / Addendum) so your data stays protected.

How long we keep it

We keep your mailing-list details until you unsubscribe or ask us to delete them, after which we remove them promptly. Analytics information is retained only in aggregated form for a limited period. Security and server logs are kept only as long as needed to operate and protect the site.

Your rights

Under UK data protection law you have the right to access the personal data we hold about you; to have it corrected or deleted; to restrict or object to its use; to data portability; and to withdraw consent at any time. To unsubscribe, use the link in any newsletter email or email us. To exercise any right, contact info@vault27barnsley.com and we'll respond within one month. You also have the right to complain to the UK's Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to put things right first.

Changes to this notice

We may update this notice from time to time. The “last updated” date above shows when it was last reviewed; significant changes will be highlighted on this page.