Privacy Policy
Registered name: Loch & Lore Events, Ltd
Highland Realms Comic Con (“we”, “us”, “our”) is committed to protecting your personal information and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and share your information when you visit our website, register as an attendee or vendor, or subscribe to our communications.
We operate in the United Kingdom (Scotland) and comply with the UK GDPR, Data Protection Act 2018, and other applicable privacy laws.
Contact Details
If you have questions or requests regarding your data or this Privacy Policy, contact:
What information we collect and use, and why
We collect the following types of personal information:
1.1 Information You Provide to Us
When you register as an attendee or vendor through our Wix forms:
-
Full name
-
Email address
-
Phone number
-
Postal address
-
Business name (vendors only)
If you contact us, we may also collect information contained in your inquiry.
1.2 Payment Information
We do not store or process your full payment card details.
Any payment information is handled securely by Wix’s integrated payment processors or other authorised providers.
1.3 Automatically Collected Data (Analytics & Cookies)
When you visit our website, we automatically collect:
-
IP address
-
Device type, browser type, operating system
-
Pages visited, time spent on the site, clicks, referring URLs
-
Cookie identifiers and tracking information
This is gathered through:
-
Wix Analytics (built-in website analytics)
-
Standard Wix cookies
1.4 Marketing & Communications Data
If you sign up for newsletters or updates:
-
Email address
-
Communication preferences (using Mailchimp)
How we use your information
We use your personal data for the following purposes:
2.1 To Manage Registrations
-
Process attendee and vendor registrations
-
Verify your identity
-
Send confirmations, updates, and event information
2.2 To Process Payments
-
Facilitate secure payment transactions via third-party processors
2.3 To Communicate With You
-
Respond to enquiries
-
Provide important event updates
-
Send newsletters or marketing communications (if you opt in)
2.4 For Website Operations and Analytics
-
Monitor website performance
-
Improve our website, user experience, and event offerings
-
Prevent fraud or misuse of our systems
2.5 Legal and Administrative Purposes
-
Maintain financial and tax records
-
Comply with legal obligations
Legal Bases for Processing (UK GDPR)
We process your personal data based on the following legal grounds:
-
Contract necessity: registration and participation in the event
-
Consent: newsletters, marketing, cookies (where applicable)
-
Legitimate interests: site analytics, fraud prevention, improving services
-
Legal obligation: tax and financial record-keeping
How We Share Your Information
We only share your data with trusted service providers when necessary, including:
4.1 Third-Party Processors
-
Wix (website hosting, analytics, forms)
-
Wix Payments / Stripe / PayPal (as applicable – payment processing)
-
Mailchimp (email newsletters)
-
Other service providers assisting with event administration
These providers are required to safeguard your information and use it only for the services they provide to us.
4.2 Legal Requirements
We may disclose information if required by law, regulation, or to protect our rights.
We do not sell your personal information.
How long we keep information
We retain your personal data only for as long as necessary:
-
Registration and event records: typically 6 years (for tax/legal reasons)
-
Marketing email data: until you unsubscribe
-
Analytics data: retained according to Wix’s retention policies
Cookies & Tracking Technologies
Our website (hosted on Wix) uses cookies for:
-
Essential site functionality
-
Analytics and performance
-
Preference storage
-
Security
Visitors from the UK may see a cookie banner or preferences tool, depending on configuration.
You can control cookies through your browser settings.
Data Security
We use appropriate technical and organisational measures to protect your data, including:
-
SSL/HTTPS secure website connection
-
Access restrictions
-
Encryption applied by Wix and relevant processors
However, no internet transmission is completely secure, and we cannot guarantee absolute security.
International Transfers
Some of our service providers (e.g., Wix, Mailchimp) may store data outside the UK.
When this occurs, we ensure that appropriate safeguards are in place, such as:
-
Standard Contractual Clauses
-
UK-approved data transfer mechanisms
Children's Privacy
Registration is open to attendees aged 16 and above.
We do not knowingly collect personal data from anyone under 16.
If we become aware of such data collection, we will delete the information.
Your Rights (UK GDPR)
You have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request deletion (in some cases)
-
Object to processing
-
Withdraw consent at any time (for marketing/cookies)
-
Request restriction of processing
-
Request data portability
To exercise these rights, contact us at:
hello@highlandrealms.co.uk
If you believe your rights have been violated, you can lodge a complaint with the UK Information Commissioner’s Office (ICO).
Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
The updated version will always be posted on our website with a new “Last Updated” date.
Last Updated
19/12/2025