CIT
How we collect, use and protect your personal data · Last updated: 7 September 2026
CIT EVENTS LTD, Apartment 37, 98 Tennant Street, Birmingham B15 1BS, United Kingdom, is the data controller for Festival Cuba In Tunisia and for cit-festival.com. For anything related to your personal data, raise a support request from your CIT account, or write to info@cit-festival.com.
Your name, date of birth, nationality and contact details; your CIT account and login details; your orders, passes, Payment Plan info and receipts (card details themselves are held by our payment providers, never by us); information about your hotel, room and roommate requests; your flight details if you buy a Shuttle Pass or a Flight Package; your passport number and, where a hotel requires it, a scan of the passport or national ID; and photos and video taken of you at the festival.
To sell you a pass, run your CIT account, collect your payments, book your room and arrange shuttle to/from the festival location — this is necessary to perform our contract with you. To register you with your hotel and, as Tunisian law requires, with the local authorities, and to keep accounting records as UK law requires — legal obligation. To prevent fraud, keep the platform secure and send you service messages about your booking — our legitimate interest in running the festival safely, balanced against your rights. To tell you about future editions — with your consent, which you can withdraw at any time using the link in every email from us.
We share only the necessary information with third-party service providers. Our payment providers Stripe and Revolut receive information to take your payments; the Festival Hotels receive your room booking and, through them, the Tunisian authorities the hotel registration form; the airline and handling agents if you buy a Flight Package; the shuttle operator if you buy a Shuttle Pass; the providers that run our email, support and website assistant tools; and our accountants and, if ever required, our legal advisers or the authorities. We never sell your data and we do not publish lists of participants except the artists.
Your hotel and registration details go to Tunisia because the festival takes place there; this transfer is necessary to perform your contract. Some of our service providers process data in the EU or the United States; with them we use the safeguards required by UK law (adequacy regulations or the International Data Transfer Agreement / Addendum).
Passport scans are deleted 90 days after the festival ends; the passport number is kept for the same period so that the registration form and any invitation letter can be reconciled against it, then deleted. Orders and receipts are kept for six years as accounting law requires. Your CIT account and booking details are kept until the end of the edition following the last one you booked. Support and assistant conversations are anonymised after six months. Your contact information for marketing purposes is kept until you opt out. Festival photos and videos are kept for as long as we promote the festival.
You can ask us for a copy of everything we hold about you, correct it, have it deleted, restrict or object to how we use it, take it with you in a portable format, and withdraw any consent you have given. Raise a support request; we answer within one month. Deletion removes the person and leaves the transaction: your name, contact information and travel details are removed, while the order and its amounts remain. If you are unhappy with how we handle your data, you can complain to us first by raising a support request, then to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Passes for 16- and 17-year-olds are booked by a parent or legal guardian, who gives consent for the minor's data on their behalf. While bookings are handled by guardians, the data protection rights remain with the individual user.
The site uses the cookies it needs to keep you logged in and your basket active, and analytics cookies only if you accept them. The website assistant stores your conversation to answer you and to improve the answers; conversations are anonymised after six months. We make no automated decisions about you that have legal effects.
We update this policy when our processing changes and show the date of the last update here. Last updated: 7 September 2026.
Last updated Sep 7, 2026, 4:24 PM.
