ONE Mas Band - Privacy Policy
Last updated: November 2025
Your privacy is important to us.
This Privacy Policy explains how ONE Mas Band (“we”, “our”, “us”) collects, uses, and protects your personal information when you visit our website, use the ONE MasOS portal, or interact with us online or in person.
We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. WHO WE ARE
ONE Mas Band is a UK-based carnival organisation producing creative, cultural, and costume-based experiences, including participation in Notting Hill Carnival 2026 and related events.
If you have questions about this policy or your personal data, contact us at:
📍 London, United Kingdom
2. INFORMATION WE COLLECT
We collect personal information that you voluntarily provide when interacting with our website, registering via the MasOS portal, or contacting us directly.
This may include:
-
Identity information – full name, date of birth, gender, and ID details.
-
Contact information – email address, phone number, and postal address.
-
Payment information – billing details, payment card type, and transaction history (processed securely via our third-party payment partners).
-
Costume information – measurements, section selection, and preferences.
-
Account information – username, password, and login activity.
-
Marketing preferences – newsletter opt-ins and event communication preferences.
-
Technical data – IP address, browser type, device type, time zone, and cookies when you visit our website.
We do not collect or store full credit/debit card details — these are handled securely by our payment processors.
3. HOW WE USE YOUR INFORMATION
We use your data to:
-
Process and manage your registration and payments.
-
Communicate updates, confirmations, and important event details.
-
Provide customer support and respond to enquiries.
-
Manage costume production, distribution, and event logistics.
-
Send marketing or promotional updates (if you’ve opted in).
-
Improve our website, services, and overall customer experience.
-
Comply with legal obligations and protect against fraud or misuse.
We will only use your information where it is necessary to perform our services, comply with legal duties, or where you have given consent.
4. LEGAL BASIS FOR PROCESSING
We process your personal data based on one or more of the following legal grounds:
-
Contractual necessity: to fulfil your registration, costume order, or event participation.
-
Legitimate interests: to manage operations, improve our services, and ensure security.
-
Legal obligations: to comply with applicable UK laws and regulations.
-
Consent: for marketing communications and non-essential cookies.
5. HOW WE STORE & PROTECT YOUR DATA
Your personal data is stored securely on protected servers and systems used by ONE Mas Band and our trusted partners.
We implement industry-standard security measures, including:
-
Encryption and password protection.
-
Secure payment processing (PCI DSS–compliant).
-
Limited data access on a need-to-know basis.
-
Regular data security audits.
We retain your information only as long as necessary for the purposes outlined in this policy, including legal and tax record-keeping requirements.
6. SHARING YOUR INFORMATION
We respect your privacy and do not sell or rent your personal data.
However, we may share necessary information with trusted third parties who assist in delivering our services, including:
-
MasOS platform providers (for registration and account management).
-
Payment processors (for secure financial transactions).
-
Designers and production teams (for custom costume creation).
-
Event management and logistics partners.
-
Email and communication service providers (e.g. Mailchimp).
These partners only process your data under our strict instruction and in compliance with data protection laws.
We may also share data where legally required (for example, with law enforcement or government agencies).
7. INTERNATIONAL DATA TRANSFERS
If your data is transferred outside the UK (for example, via international service providers), we ensure it is protected by appropriate safeguards — such as Standard Contractual Clauses or other legally approved mechanisms — to keep your information secure.
8. YOUR RIGHTS
Under the UK GDPR, you have the right to:
-
Access – request a copy of your personal data.
-
Rectify – correct inaccurate or incomplete data.
-
Erase – request deletion of your data (in certain circumstances).
-
Restrict – limit how we process your data.
-
Object – object to specific types of processing (like direct marketing).
-
Portability – request transfer of your data to another service provider.
-
Withdraw consent – opt out of marketing or revoke consent at any time.
To exercise any of these rights, contact us at hello@onemasband.com.
We will respond within 30 days as required by law.
9. MARKETING COMMUNICATIONS
We may send you marketing emails or event updates only if you have opted in.
You can unsubscribe at any time by clicking the “Unsubscribe” link in our emails or contacting us directly.
We will never share your information with third parties for marketing purposes.
10. COOKIES & WEBSITE TRACKING
Our website uses cookies to improve your browsing experience and analyse site performance.
Cookies help us:
-
Understand how visitors use our site.
-
Save your preferences for future visits.
-
Deliver more relevant content and marketing.
You can control or disable cookies through your browser settings. For more details, see our Cookie Policy (if applicable).
11. THIRD-PARTY LINKS
Our website or emails may contain links to third-party sites.
We are not responsible for the privacy practices or content of these external websites.
We encourage you to review their privacy policies before providing any personal information.
12. CHILDREN’S PRIVACY
Our services are not directed at individuals under the age of 18, and we do not knowingly collect personal data from minors.
If we learn that a minor has provided personal data without parental consent, we will delete it promptly.
13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.
The updated version will always be posted on this page with the revised date shown at the top.
14. CONTACT US
If you have any questions, concerns, or complaints about how we handle your personal data, please contact us:
📍 London, United Kingdom
If you are not satisfied with our response, you have the right to contact the Information Commissioner’s Office (ICO) — the UK’s data protection authority: