Privacy Policy

This privacy policy explains how we make use of and protect any personal data collected by us or provided by you in relation to your use of the Website. It applies to you, the User of this Website and EngageMalvern, the operator of Malvern Festival of Ideas, the owner and provider of this Website. We take privacy very seriously and suggest you read this policy carefully.

Who we are

Our website address is:

What personal data we collect and why we collect it

Contact forms

We use contact forms to process bookings, or so that users can get in touch with us. By submitting contact forms, we will process the information you submit in order that we can reply to your message. Form submissions and subsequent replies may be retained in our email archives.


We make use of analytics services to evaluate and improve our website’s performance, and to make sure it is working properly for our users. We do not store any analytics or tracking cookies on your device without first gaining your consent.


You can find out all about how we use cookies on our cookie policy.

Appointment bookings

We use Eventbrite – a third-party booking service – to process ticket purchases and manage session availability. Our site will link to this service whenever you wish to purchase a ticket.

The Eventbrite Privacy Policy and Terms of Service apply.

The data you enter into Eventbrite (except payment information) will be made available to us and will remain stored until you ask us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply. Mandatory legal provisions, in particular retention periods, remain unaffected.

Data transfer to the USA is based on the standard contractual clauses of the European Commission.


We use surveys to gather feedback on different parts of our service offering or to process voting. For voting, we may also collect email addresses to prevent vote manipulation by verifying that each vote is associated with a genuine user. This information will be deleted after voting has closed. 

We may use Google Forms to process surveys and voting. Google Forms is a part of Google Drive and Google Workspace. You can read the general Google privacy policy here.

Mailing lists

If you subscribe to our mailing list, we will collect your name and contact information so we can occasionally send you updates that may be of interest. We use the email platform Mailchimp to collect and store this data. Read Mailchimp’s privacy policy.

We do not share subscribers’ details with anyone and you can amend your details or unsubscribe at any time.


When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Embedded content from other websites

This site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. We bear no responsibility for the content of third-parties, nor how they use your data.

Who we share your data with

We don’t share personal data with third parties unless it is provided for a function described above. Visitor submissions may be checked through an automated spam detecting service.

How long we retain your data

If you fill in a contact form, the information you submit is retained only as long as is necessary for the purpose it is gathered (mainly to respond to your enquiry), or one year, whichever is shorter.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you filled in a contact form on this website, have an account on the site, or have left comments you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Contact information

You can contact us using this website if you want to query anything regarding this policy, or how it relates to your data.