Privacy Policy
Last updated: 1 November 2026
This policy explains what personal data we collect when you use this website, sign up for the pre-sale, buy tickets or accommodation, and attend the festival on Koh Sdach Island, Cambodia, from 13 to 16 December 2026. We handle your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The Collective Koh Sdach (the festival) and this website are run by Collective Experiences Ltd, the data controller responsible for your personal data.
Company
Collective Experiences Ltd
Registered in
Northern Ireland, company number NI742777
Registered office
96 Old Ballygowan Road, Comber, BT23 5RX, United Kingdom
Contact for privacy questions
hello@ramslive.co.uk
| Details | |
|---|---|
| Company | Collective Experiences Ltd |
| Registered in | Northern Ireland, company number NI742777 |
| Registered office | 96 Old Ballygowan Road, Comber, BT23 5RX, United Kingdom |
| Contact for privacy questions | hello@ramslive.co.uk |
The festival is strictly for people aged 18 and over. We do not knowingly collect data from anyone under 18.
2. What we collect
We collect only what we need to run your booking, keep you safe on an island site and, if you agree, keep you updated.
Pre-sale and newsletter signups
Examples: Email address, date and time of signup, your marketing consent
Where it comes from: You, through the signup form
Booking and contact details
Examples: Name, email, phone number, country, the names of other guests on your booking
Where it comes from: You, when you book
Identity and age checks
Examples: Date of birth, passport or ID details checked at check-in, proof of travel insurance
Where it comes from: You, at booking and at check-in
Payment details
Examples: Amount paid, payment status, order reference. Card details are handled by our payment provider and are never stored by us
Where it comes from: You and our payment provider
Accommodation and rooming
Examples: Room or tent choice, who you want to share with, any requests you send us
Where it comes from: You
On-site data
Examples: Wristband and cashless top-ups and spending, entry and zone scans, boat manifests, incident and lost property records
Where it comes from: Created when you attend
Health and welfare information
Examples: Details of any treatment from our on-site medical or welfare teams, and any health information you choose to give us, such as an accessibility need
Where it comes from: You and our medical team
Customer support
Examples: Emails and messages you send us
Where it comes from: You
Website use
Examples: Essential cookies, basic device and log data such as IP address. We do not use optional analytics or advertising cookies unless you accept them
Where it comes from: Your browser
Photos and filming
Examples: Images and video taken at the festival
Where it comes from: Our photographers and film crew
| What | Examples | Where it comes from |
|---|---|---|
| Pre-sale and newsletter signups | Email address, date and time of signup, your marketing consent | You, through the signup form |
| Booking and contact details | Name, email, phone number, country, the names of other guests on your booking | You, when you book |
| Identity and age checks | Date of birth, passport or ID details checked at check-in, proof of travel insurance | You, at booking and at check-in |
| Payment details | Amount paid, payment status, order reference. Card details are handled by our payment provider and are never stored by us | You and our payment provider |
| Accommodation and rooming | Room or tent choice, who you want to share with, any requests you send us | You |
| On-site data | Wristband and cashless top-ups and spending, entry and zone scans, boat manifests, incident and lost property records | Created when you attend |
| Health and welfare information | Details of any treatment from our on-site medical or welfare teams, and any health information you choose to give us, such as an accessibility need | You and our medical team |
| Customer support | Emails and messages you send us | You |
| Website use | Essential cookies, basic device and log data such as IP address. We do not use optional analytics or advertising cookies unless you accept them | Your browser |
| Photos and filming | Images and video taken at the festival | Our photographers and film crew |
Health information is a special category of data. We only use it to look after you, and the medical team keeps patient records confidential.
3. How we use it and our lawful basis
Process your tickets, accommodation and payments, and send booking confirmations and essential updates
Lawful basis (UK GDPR): Contract
Check that every guest is 18 or over and holds travel insurance, and manage entry, wristbands and boat manifests
Lawful basis (UK GDPR): Contract and legitimate interests (running a safe event)
Keep everyone safe: security, welfare, lost persons, incident records and emergency evacuation
Lawful basis (UK GDPR): Legitimate interests; vital interests in an emergency
Provide medical care and pass details to hospitals or emergency services when needed
Lawful basis (UK GDPR): Vital interests, and the provision of health care for health data
Answer your questions and handle complaints and refunds
Lawful basis (UK GDPR): Contract and legitimate interests
Send pre-sale alerts, festival news and offers by email, SMS or WhatsApp
Lawful basis (UK GDPR): Consent, which you can withdraw at any time
Prevent fraud, misuse of the website and spam signups
Lawful basis (UK GDPR): Legitimate interests
Keep accounting and tax records
Lawful basis (UK GDPR): Legal obligation
Use festival photos and film in our marketing
Lawful basis (UK GDPR): Legitimate interests. Tell us if you would prefer not to be featured
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Process your tickets, accommodation and payments, and send booking confirmations and essential updates | Contract |
| Check that every guest is 18 or over and holds travel insurance, and manage entry, wristbands and boat manifests | Contract and legitimate interests (running a safe event) |
| Keep everyone safe: security, welfare, lost persons, incident records and emergency evacuation | Legitimate interests; vital interests in an emergency |
| Provide medical care and pass details to hospitals or emergency services when needed | Vital interests, and the provision of health care for health data |
| Answer your questions and handle complaints and refunds | Contract and legitimate interests |
| Send pre-sale alerts, festival news and offers by email, SMS or WhatsApp | Consent, which you can withdraw at any time |
| Prevent fraud, misuse of the website and spam signups | Legitimate interests |
| Keep accounting and tax records | Legal obligation |
| Use festival photos and film in our marketing | Legitimate interests. Tell us if you would prefer not to be featured |
We do not sell your personal data, and we do not make decisions about you by automated means that have legal or similarly significant effects.
4. Who we share it with
We share personal data only where it is needed to deliver the festival, and only the data each party needs.
RAMS Live, our parent company, and the medical team it engages
Why: On-site medical cover and festival operations
VET Cambodia and our boat operator
Why: Site operations, security, boat transfers and passenger manifests
Mad Monkey and EHM partner resorts
Why: To confirm and manage accommodation you book through us
Payment provider (Revolut)
Why: To take and refund payments
Website, database and email providers (Lovable Cloud and Supabase, Google Workspace)
Why: To host the website and store signups and bookings
Email and messaging providers
Why: To send booking messages and, with your consent, marketing
Hospitals, emergency services, police and other authorities
Why: Where needed to protect life, or where the law requires it
Professional advisers and insurers
Why: Legal, accounting and insurance purposes
| Who | Why |
|---|---|
| RAMS Live, our parent company, and the medical team it engages | On-site medical cover and festival operations |
| VET Cambodia and our boat operator | Site operations, security, boat transfers and passenger manifests |
| Mad Monkey and EHM partner resorts | To confirm and manage accommodation you book through us |
| Payment provider (Revolut) | To take and refund payments |
| Website, database and email providers (Lovable Cloud and Supabase, Google Workspace) | To host the website and store signups and bookings |
| Email and messaging providers | To send booking messages and, with your consent, marketing |
| Hospitals, emergency services, police and other authorities | Where needed to protect life, or where the law requires it |
| Professional advisers and insurers | Legal, accounting and insurance purposes |
Our festival sponsors and brand partners do not receive your personal data unless you choose to share it with them directly, for example by entering a partner competition. Our suppliers may only use your data on our instructions.
5. International transfers, retention and security
International transfers. The festival takes place in Cambodia, and some of our providers store data in the United States and elsewhere. When your data leaves the UK, we use the protections the UK GDPR requires, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum. We share with partners in Cambodia only what they need to run the event.
How long we keep it.
Pre-sale and marketing signups
Kept for: Until you unsubscribe, or 2 years after your last contact with us
Bookings, payments and accounting records
Kept for: 6 years after the festival, for tax and legal reasons
ID and age-check details
Kept for: Deleted within 30 days after the festival, unless needed for an incident
Wristband, entry and boat manifest data
Kept for: 12 months after the festival
Incident, safety and medical records
Kept for: Up to 7 years, or longer where an insurance or legal claim needs them
Customer support messages
Kept for: 2 years
| Data | Kept for |
|---|---|
| Pre-sale and marketing signups | Until you unsubscribe, or 2 years after your last contact with us |
| Bookings, payments and accounting records | 6 years after the festival, for tax and legal reasons |
| ID and age-check details | Deleted within 30 days after the festival, unless needed for an incident |
| Wristband, entry and boat manifest data | 12 months after the festival |
| Incident, safety and medical records | Up to 7 years, or longer where an insurance or legal claim needs them |
| Customer support messages | 2 years |
Security. We use encryption in transit, access controls and limits on who can see your data. Payments are handled by our payment provider and we never store full card numbers. No system is completely secure. If a breach affects you, we will tell you and the ICO where the law requires.
6. Cookies
We use essential cookies to make the website work, for example to keep your booking session and remember your cookie choice. We only use optional cookies, such as analytics or advertising, if you click Accept in the cookie banner. You can change your choice at any time using the Cookie settings link in the footer.
7. Marketing
We only send marketing by email, SMS or WhatsApp if you have opted in. Every message includes a way to unsubscribe, or you can email hello@ramslive.co.uk. Even if you unsubscribe, we will still send essential messages about any booking you have made.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of your personal data
- ask us to correct data that is wrong
- ask us to delete your data
- ask us to limit how we use your data
- object to us using your data for our legitimate interests or for marketing
- ask for your data in a portable format
- withdraw your consent at any time, without affecting anything we did before
To use any of these rights, email hello@ramslive.co.uk. We will reply within one month. We may ask you to confirm your identity first.
9. Complaints
Please contact us first so we can try to put things right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We may update this policy, for example when we add new services. The date at the top shows when it was last updated, and we will tell you about any important changes by email if you have a booking with us.
Contact us
Collective Experiences Ltd (company number NI742777), 96 Old Ballygowan Road, Comber, BT23 5RX, Northern Ireland. Email hello@ramslive.co.uk.