📣 Our letter to PM Andy Burnham: "Let's Get Touring Working." Read it in full →
Home About Us Latest News Our Blog Information Hub FAQ Contact
Home / Privacy & Cookies
Legal

Privacy & Cookies.

What we collect when you use this site, why we collect it, who else sees it, and what you can ask us to do about it.

Who we are

Carry On Touring is a campaign for visa-free creative touring between the UK and the EU. For the purposes of UK data protection law, the data controller for this website is The Digital Room Ltd, a company registered in England and Wales.

The quickest way to reach us about anything on this page — a question, a correction, or a request to see or delete what we hold — is our contact form. If you would prefer to write to us by post, ask through the form and we will give you a postal address.

What we collect, and why

When you use the contact form

We collect the name, email address, subject and message you type in. We use them for one thing only: to read your message and reply to it. The message is sent to the campaign's inbox by email; we do not add you to any mailing list on the strength of a contact form message, and we do not pass your details to anyone else.

To stop the form being abused by spammers, the site briefly records a scrambled (hashed) version of your IP address so it can tell that the same visitor has submitted several times in quick succession. The hash cannot be turned back into your IP address, and it is discarded automatically.

When you join the mailing list

We collect your email address, which is the only field we require. You can also tell us your first name, last name and whether you work for a company or freelance — those are optional, and the form works perfectly well if you leave them blank. We use a name to address emails to you properly, and the company field to understand which parts of the industry the campaign is reaching.

We ask for all of this on the basis of your consent, and you can withdraw that consent at any time — every email we send carries an unsubscribe link, and unsubscribing removes you immediately.

Our mailing list is run using Mailchimp, a service provided by Intuit Inc. Whatever you give us is stored on Mailchimp's systems, which means it is transferred to and held in the United States. We do not sell, rent or share the list with anyone else.

When you search this site

Nothing is collected. The site search runs entirely inside your own browser against a list of pages downloaded with the site — what you type is never sent to us or to anyone else.

Server logs

Like almost every website, the server that hosts this site keeps standard access logs recording which pages were requested, when, and the IP address and browser that requested them. These are generated by the hosting provider, kept briefly for security and troubleshooting, and are not used to build any profile of you.

Cookies

We do not use cookies for anything ourselves. There is no advertising, no analytics and no tracking of visitors between pages or between sites by us. Everything the site needs in order to display — including its typefaces — is served from our own server, so nothing about you is sent to a third party simply because you read a page.

Two other companies are involved in delivering this site to you, and we would rather tell you than let you discover it in your browser:

  • Our web host. The company that hosts this site automatically adds its own performance-monitoring script to every page. It sets cookies named _tccl_visitor, _tccl_visit and _scc_session. We did not add it, we cannot see what it collects, and we have asked our host to switch it off. Until they do, those cookies are set when you visit.
  • Our security service. Traffic to this site passes through a web application firewall that filters out malicious requests before they reach us. It processes your IP address in order to do that.

And one thing that happens only if you choose it:

  • Videos. Videos on this site are hosted on YouTube. We use YouTube's privacy-enhanced mode, and nothing at all is loaded from YouTube unless you actually click play on a video. If you do, YouTube may set cookies on your device at that point, under Google's privacy policy rather than ours.

Links out to Twitter/X, Facebook, YouTube and other sites are ordinary links. They load nothing and track nothing until you choose to follow them, at which point you are on that company's site and subject to its policies.

How long we keep things

Contact form messages are kept in the campaign inbox for as long as they are useful for the correspondence and any follow-up, and are deleted when they are not. Mailing list subscriptions are kept until you unsubscribe or ask us to remove you. The anti-spam hashes described above last only minutes.

Your rights

Under UK data protection law you have the right to:

  • Be told what we hold. Ask for a copy of the personal data we hold about you, and what we do with it.
  • Correct it. If anything we hold about you is wrong or out of date, tell us and we will fix it.
  • Have it deleted. Ask us to erase your personal data. Bear in mind that this removes any record we hold of you, so we will no longer be able to identify or contact you afterwards.
  • Take it with you. Ask for a copy of your data in a portable format.
  • Object, or withdraw consent. Tell us to stop using your data, or withdraw a consent you previously gave. For the mailing list, the unsubscribe link in any email does this instantly.

To exercise any of these, use our contact form. We will respond within one month.

Complaints

If you think we have handled your personal data badly, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

If we start collecting something new, or start using a service that sets cookies, we will update this page before we do it and change the date below.

Last updated 24 September 2026.