Privacy Policy

1. Introduction

DNBA Entertainment Ltd ("we", "us", "our"), trading as DnB Allstars, is committed to protecting the privacy and personal data of everyone who interacts with our brand. This includes visitors to this Thailand 2027 sign-up page, attendees at our events, subscribers to our marketing communications, and anyone who engages with us through social media or third-party platforms.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

We are the data controller for the personal data described in this policy. Our registered address is 5-9 Headstone Road, Harrow, England, HA1 1PD. For any data protection enquiries, please contact privacy@dnballstars.com.

This policy applies to all personal data processed through this site (dnballstars-thailand.com), our wider DnB Allstars websites (including dnballstars.com and dnballstars.eu), our ticketing platforms, our SMS and WhatsApp messaging services, our email newsletters, our event registration and entry systems, and any other channels through which we collect personal data.

By providing your personal data to us, you acknowledge that we will process it in accordance with this policy. We do not rely on your continued use of our website as a form of consent. Where consent is required, we will always obtain it through a clear, affirmative action from you.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you sign up on this Thailand 2027 page for the presale, mailing list, SMS updates, or WhatsApp notifications, we collect your first name, last name, email address, phone number, country code, and your communication preferences (email, SMS, WhatsApp).

When you join the accommodation waitlist or enquire about packages, we collect whatever information you choose to provide (preferred budget, group size, dates).

When you purchase tickets to our events, we collect your name, email address, billing address, and payment information. Payment details are processed securely by our payment providers and are not stored by us directly.

When you contact us with enquiries, enter competitions, apply for artist bookings, guest list requests, or press accreditation, we collect whatever information you provide in your correspondence.

2.2 Information Collected Automatically

When you visit this site, we automatically collect certain technical data through cookies and similar technologies. This includes your IP address, browser type and version, operating system, language, screen resolution, timezone, referring website, pages visited and time spent on each page, device type, and approximate geographic location based on your IP address. We also capture any UTM or click-ID parameters present on the URL when you arrive.

2.3 Information From Third Parties

We may receive personal data about you from ticketing platforms when you purchase tickets to our events, from social media platforms when you interact with our content or advertising, and from event venues that share attendee information with us for event management purposes.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

Where we rely on legitimate interests, we have carried out a balancing test to ensure our interests do not override your fundamental rights and freedoms. You can request details of this assessment by contacting privacy@dnballstars.com.

4. Consent for Marketing Communications

Under PECR Regulation 22 and UK GDPR, we obtain your explicit, freely given, specific, informed, and unambiguous consent before sending you marketing communications via SMS, WhatsApp, email, or any other electronic channel.

We collect consent on this site through a dedicated sign-up form where you actively opt in by entering your details and clicking SIGN ME UP. The form states what you are signing up for, which communication channels will be used (Email, SMS, WhatsApp), and the consent checkbox is unticked by default. We never use pre-ticked boxes. We never treat your use of our website or purchase of a ticket as implied consent for marketing.

We maintain records of all marketing consents, including the date and time consent was given, the method used, the specific wording presented to you, and the channels you consented to.

4.1 Withdrawing Consent

You have the right to withdraw your consent at any time, and it is as easy as giving it.

• You can unsubscribe from SMS messages by replying STOP to any message.
• You can unsubscribe from emails by clicking the unsubscribe link in any email.
• You can opt out of WhatsApp messages by replying STOP or blocking our number.
• You can also contact us at privacy@dnballstars.com to be removed from all marketing lists.

We will action all withdrawal requests within 48 hours. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.

5. Cookies and Tracking Technologies

This site uses cookies and similar tracking technologies:

You can manage cookies through your browser settings, or contact us at privacy@dnballstars.com to request information about the specific cookies set on this site.

6. Who We Share Your Data With

We share your personal data with third-party service providers who process data on our behalf. These include:

• Klaviyo for email, SMS, and WhatsApp marketing.
• Meta (Facebook, Instagram, WhatsApp Business) for conversion tracking and WhatsApp delivery.
• Google Analytics for aggregate site analytics.
• TikTok and Snapchat for conversion tracking when an ad clickthrough is the source.
• Vercel for website hosting and request logging.
• Seeka / Converge for first-party event tracking and cross-platform attribution.
• Ticketing platforms and payment processors (when you purchase tickets).

Each processor operates under a Data Processing Agreement (DPA) that meets the requirements of UK GDPR Article 28.

We may also share your personal data with law enforcement agencies, regulatory bodies, or courts where legally required, and with professional advisers bound by duties of confidentiality. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction and we will notify you of any such change.

We will never sell your personal data to third parties for their own marketing purposes. This includes your text messaging opt-in data and consent, which will not be shared with any third parties.

7. Advertising and Audience Targeting

With your consent, we use your personal data to create targeted advertising audiences on social media platforms. This involves uploading hashed (encrypted) versions of email addresses or phone numbers so that we can show you relevant advertisements about our events and releases. These platforms may also use this data to create lookalike audiences of people with similar interests.

You can opt out of being included in these audiences at any time by contacting privacy@dnballstars.com or by adjusting your ad preferences directly on the relevant platform.

8. International Data Transfers

Some of our service providers are based outside the United Kingdom. When we transfer your personal data internationally, we ensure appropriate safeguards are in place as required by UK GDPR Chapter 5. These safeguards include transfers to countries with an adequacy decision from the UK Government, and where no adequacy decision exists, we rely on Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner or other approved transfer mechanisms.

As Thailand 2027 is held in Thailand, some operational data (for example, on-site venue lists or local supplier coordination) may be transferred to processors based in Thailand under appropriate safeguards.

You can request a copy of the relevant safeguards by contacting privacy@dnballstars.com.

9. Data Retention

We keep your personal data only for as long as necessary:

When data reaches the end of its retention period, it is securely deleted or anonymised. Anonymised data that cannot identify you may be retained indefinitely for statistical purposes.

10. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights:

You have an absolute right to object to direct marketing at any time. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact privacy@dnballstars.com. We will respond within one month. If your request is complex, we may extend this by a further two months but will let you know within the initial period. We may ask you to verify your identity before fulfilling your request.

11. Children's Privacy

Thailand 2027 is a strictly 20+ event. Our marketing communications and online sign-up pages are not directed at children under 16 and the event itself is restricted to attendees aged 20 and over. We do not knowingly collect personal data from children under 16 for marketing purposes. If we become aware that we have collected data from a child under 16 without appropriate parental consent, we will delete that data as quickly as possible.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, access controls, regular security reviews, ensuring our processors maintain appropriate security standards through DPAs, and secure deletion of data when no longer required.

13. Complaints

If you are unhappy with how we have handled your personal data, please contact us at privacy@dnballstars.com so that we can try to resolve the issue.

If you remain dissatisfied, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). You can contact the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, by telephone on 0303 123 1113, or online at ico.org.uk/make-a-complaint.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page with a revised date. For significant changes that affect how we process your data, we will make reasonable efforts to notify you directly.

15. Accommodation Bookings

If you book accommodation for Thailand 2027 through this site, we process additional personal data specifically to take and manage that booking. This section applies in addition to the rest of this policy.

15.1 What We Collect at Checkout

When you book accommodation, you give us the lead booker's name, email address, and phone number; the size of your group; the property and dates you book; and any message you send us. We also collect basic technical data (such as your IP address) needed to run the checkout securely and prevent abuse.

15.2 Sharing Booking Details With the Property Operator

To provide your stay, we share the booking details the property operator in Thailand needs to host you. This includes the lead booker's name, your dates, your group size, and contact details. We share only what is necessary for them to provide your accommodation. The lawful basis for taking and managing your booking, and for sharing these details, is performance of our contract with you.

15.3 Sending Your Data to Thailand

Because the property operator is based in Thailand, providing your stay involves sending your booking details there. Thailand is not currently covered by a UK adequacy decision, so this is a restricted transfer under UK GDPR Chapter 5. We apply an appropriate safeguard to this transfer so that your data remains protected to UK standards. You can request details of the safeguard that applies by contacting privacy@dnballstars.com.

15.4 Payments and Card Details

Accommodation payments are processed securely by Stripe, our payment processor. We never see or store your full card number. For bookings made on request, Stripe securely retains your card until we confirm the property, and your card is only charged once we confirm. We hold only the booking and transaction records we need, not your card details.

15.5 How Long We Keep Accommodation Data

We keep your accommodation booking data for as long as needed to provide your stay, and then for the period required for accounting, tax, and to handle any dispute (typically up to 6 years), after which we securely delete or anonymise it. We do not use your accommodation booking data for marketing unless you have separately agreed to hear from us.

15.6 Group Bookings

If you book for a group, you confirm that you have the authority of everyone in your group to give us their information and to share this notice with them.

16. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, please contact us at privacy@dnballstars.com or write to DNBA Entertainment Ltd, 5-9 Headstone Road, Harrow, England, HA1 1PD. We aim to respond to all enquiries within 5 working days.