Privacy Policy

Key points covered in this Privacy Policy.

Introduction.
What Personal Data the Company might collect on you.
How long might the Company hold on to your Personal Data.
How the Company might collect your Personal Data.
The grounds on which the Company may store and use your Personal Data.
The way(s) in which the Company might use your Personal Data.
The measures the Company has in place to protect your Personal Data.
Your rights.
How the Company will communicate changes to this Privacy Policy.
Cookies.
How you can contact the Company.

1. Introduction

Eltonjohn.com Limited (the “Company”) is a company registered in England and Wales under registered company number 03910174. The Company’s registered office is: 1 Blythe Road, London, W14 0HG.

In compliance with the General Data Protection Regulation (the “GDPR”), in force as of 25 May 2018, this Privacy Policy (the “Policy”) sets out the obligations of the Company in respect of the collection, retention, safeguarding of and access to your Personal Data (defined below).

The GDPR defines “Personal Data” as any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. This includes, but is not limited to, name, email address, postal address location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

The Personal Data that the Company may collect from you is listed in section 2 below.

The Company is committed to protecting and respecting your privacy, and would welcome any feedback you have to: [email protected].

2. What Personal Data the Company might collect on you.

2.1 The Company might collect the following Personal Data from you:
i) Your name, age/date of birth and gender;
ii) Your contact details, including: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address;
iii) Details of purchases and/or orders made by you;
iv) Details of events attended by you;
v) Your communication and marketing preferences;
vi) Your interests, preferences, feedback and survey responses;
vii) Your correspondence and communications with the Company;
viii) Other publicly available Personal Data, including any which you have shared via a public platform (such as a Twitter feed, public Facebook page or a company website).

2.2 The Company’s website is not intended for children and the Company does not knowingly collect data relating to children.

2.3 This list is not exhaustive and, in specific instances, the Company may need to collect additional data for the purposes set out in this Policy. The Company may also collect Personal Data from third parties who have your consent to pass your details to the Company, or from publicly available sources.

2.4 The Yellow Brick Road. In the specific instance of the Elton John Yellow Brick Road website, hosted exclusively at https://yellowbrickroad.eltonjohn.com the Company may need to collect additional data for the purposes set out in this Policy. The Company may also collect Personal Data from third parties who have your consent to pass your details to the Company, or from publicly available sources at the point of registration, these external companies comprise one or more of the following; Meta Platforms, Inc (aka Facebook, Inc), Google LLC (aka Alphabet, Inc) and Spotify AB exclusively. The data stored at the point of submission (referred to throughout the interface as both [Claim] or [Add] Your Brick) is replicated and publicly represented within the aforementioned website in the form of an individual interactive asset containing both your First Name and Surname. No other submission data is publicly available. You consent to the Company aggregating this information and subsequently storing this data as part of the Rocket Club Email Subscription process. In the event that you would wish to withdraw your submission and/or remove your asset from the ‘Yellow Brick Road’, we would welcome any requests of removal via email only at [email protected].

3. How long might the Company hold on to your Personal Data.

The Company will not retain your Personal Data for longer than necessary for the purposes set out in this Policy.

4. How the Company might collect your Personal Data.

The Company may collect your Personal Data in the following ways:

i) Via the Company’s website (e.g. when you opt-in to join the Rocket Club);

ii) Via ticketing agents who sell tickets to Elton John shows, and you opt-in to receive communication direct from the Company;

iii) Via any additional means the Company deems reasonable.

5. The grounds on which the Company may store and use your Personal Data.

The Company might store and use your Personal Data on the following legal grounds:

5.1 Consent
– for example, if you have opted in to receive marketing communications and/or news from the Company, the Company might store your data and contact you with a roundup of Elton John’s recent news and events.

5.2 Fulfilment of a Contractual Obligation
– for example, if you have purchased an item via the website, the Company will store and process your data insofar as it is necessary to fulfil such order.

5.3 Legitimate Interest
– for example, if you have previously provided the Company with your contact details in the course of sale of goods/services (for example a ticket to an Elton John concert), the Company may send you electronic communications relating to similar upcoming event ticket sales. You will always be given the opportunity to opt-out of this form of communication. If relying on legitimate interest as a lawful ground for processing your Personal Data, the Company will always take into account your rights and interests prior to sending any such communications.

Location Tracking Using Cloudflare
Notice Regarding Location Data Collection: The Company’s website employs Cloudflare, a web performance and security service, to enhance user experience and ensure website integrity. As part of this service, Cloudflare may collect and process data related to your geographical location. This information is utilized to deliver region-specific content, improve website performance, and bolster security measures.

Data Collection Mechanism: Cloudflare determines your location by analyzing your IP address. This process does not involve GPS or similar location-tracking technologies. The location data collected is typically limited to the country or city level and does not pinpoint your exact physical location.

Purpose and Use: The primary use of this location data is to provide tailored content and services relevant to your region, optimize website loading speeds, and protect the Company’s website from malicious activities. Additionally, aggregated and anonymized location data may be used for analytical purposes to understand the Company’s audience distribution and enhance user engagement.

Data Sharing and Storage: Location data collected via Cloudflare is processed and stored in accordance with Cloudflare’s privacy policy. The Company does not share this data with third parties except as necessary for legal compliance, to protect our rights, or to facilitate the services provided by Cloudflare.

6. The way(s) in which the Company might use your Personal Data.

6.1 General

The Company (and trusted partners acting on our behalf) might use your Personal Data:
i) to provide goods and services to you;
ii) to make a tailored website available to you;
iii) to manage any registered account(s) that you hold with us;
iv) to verify your identity;
v) for crime and fraud prevention, detection and related purposes;
vi) to contact you electronically about news/events and/or products which the Company thinks may interest you;
vii) for market research purposes – to better understand your needs;
viii) where the Company has a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).

6.2 Communications
The Company might use your Personal Data for electronic marketing purposes (with your consent) and may send you postal mail to update you on the latest events/ work of Elton John.
The Company aims to update you about items which are of interest and relevance to you as an individual.
You have the right to opt-out of receiving communications at any time, by:
i) making use of the simple “unsubscribe” link in emails; or
ii) contacting the Company via email to [email protected] or via post to the registered office (listed in section 1 above).

6.3 Sharing data with third parties

i) Our service providers and suppliers
In order to make certain services available to you, the Company may need to share your Personal Data with some of our service providers/partners. These could include IT, delivery and marketing service providers.
The Company only allows its service providers/partners to handle your Personal Data when the Company has confirmed that they apply appropriate data protection and security controls. The Company also imposes contractual obligations on service providers/partners relating to data protection and security, which mean they can only use your Personal Data to provide services to the Company and to you, and for no other purposes.

ii) Other third parties
Aside from our service providers/partners, the Company will not disclose your Personal Data to any third party, except as set out below. The Company will never sell or rent your Personal Data to other organisations for marketing purposes.
We may share your data with:
– credit reference agencies where necessary for card payments;
– governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where the Company is required to do so: –
— to comply with our legal obligations;
— to exercise our legal rights (for example in court cases);
— for the prevention, detection, investigation of crime or prosecution of offenders; and
— for the protection of our employees and customers.

7. The measures the Company has in place to protect your Personal Data.

The Company strives to maintain the highest standards of data privacy and security to protect your personal details and other information about you.

The Company shall ensure that Personal Data is stored securely using modern software that is kept-up-to-date.

Access to Personal Data shall be limited to personnel who need access and appropriate security should be in place to avoid unauthorised sharing of information.

When Personal Data is deleted this should be done safely such that the data is irrecoverable.

Appropriate back-up and disaster recovery solutions shall be in place.

The Company regularly reviews our processes and procedures to protect your information from unauthorised access and use, accidental loss and/or destruction.

8. Your rights

You have the following rights in respect of the Personal Data that the Company holds:

8.1 the right to ask for a copy of Personal Data that the Company holds about you (the right of access);

8.2 the right (in certain circumstances) to request that the Company deletes Personal Data held on you; where the Company no longer has any legal reason to retain it (the right of erasure or to be forgotten);

8.3 the right to ask the Company to update and correct any out-of-date or incorrect Personal Data that the Company holds about you (the right of rectification);

8.4 the right to opt out of any marketing communications that the Company may send you and to object to the Company using / holding your Personal Data if the Company has no legitimate reasons to do so (the right to object);

8.5 the right (in certain circumstances) to ask the Company to ‘restrict processing of data’; which means that the Company would need to secure and retain the data for your benefit but not otherwise use it (the right to restrict processing); and

8.6 the right (in certain circumstances) to ask the Company to supply you with some of the Personal Data that the Company holds about you in a structured machine-readable format and/or to provide a copy of the data in such a format to another organisation (the right to data portability).

9. How the Company will communicate changes to this Privacy Policy.

The Company may update this Policy to reflect changes in how it collects, stores and/or uses your Personal Data. The most recent version of the Policy will always be available via the Company’s website. Where appropriate, the Company will provide you with notice of any significant changes to how it uses your information.

Updates and Contact Information: The Company recommends reviewing this section frequently for the latest information on the Company’s data practices. If you have questions or concerns about the Company’s use of Cloudflare and your location data, please contact the Company at 27 Queensdale Place, W11 4SQ

10. Cookies.

The Company’s website uses cookies to distinguish you from other users of its website. This helps the Company to provide you with a good experience when you browse our website and also allows us to improve our site. If you wish to reject cookies, you may need to change your website browser settings.

11. How you can contact the Company.

If you have any questions on the contents of this Policy please contact [email protected] or if you would rather get in touch by post, please write to:

Website Team, Eltonjohn.com Limited, Hythe House, 200 Shepherd’s Bush Road, W6 7NL, UK.