CIT
Last updated: 05/09/2026.
CIT EVENTS LTD, Apartment 37, 98 Tennant Street, Birmingham B15 1BS, United Kingdom, is the data controller for Festival Cuba In Tunisia and for cit-festival.com. For anything about your personal data, write to info@cit-festival.com or raise a support request from your account.
Your name, date of birth, nationality and contact details; your account and login details; your orders, passes, Payment Plan and receipts (card details themselves are held by our payment provider, never by us); your hotel, room and roommate requests; your flight details if you buy a Shuttle Pass or a Flight Package; your passport number and, where a hotel requires it, a scan of the document; any dietary or medical need you choose to tell us about; your messages to our support team and to the website assistant; and photos and video taken at the festival.
To sell you a pass, run your account, collect your payments, book your room and get you into the festival — this is necessary to perform our contract with you. To register you with your hotel and, as Tunisian law requires, with the local authorities, and to keep accounting records as UK law requires — legal obligation. To prevent fraud, keep the platform secure and send you service messages about your booking — our legitimate interest in running the festival safely, balanced against your rights. To tell you about future editions — your consent, which you can withdraw at any time using the link in every email or from your account. To pass a dietary or medical need to the hotel kitchens — your explicit consent, given when you tell us.
Only what each of them needs: our payment providers Stripe and Revolut to take your payments; the Festival Hotels for your room and, through them, the Tunisian authorities for the hotel registration form; the airline and handling agents if you buy a Flight Package; the shuttle operator if you buy a Shuttle Pass; the providers that run our email Resend; and our accountants and, if ever required, our legal advisers or the authorities. We never sell your data, and we do not publish lists of participants.
Your hotel and registration details go to Tunisia because the festival takes place there; this transfer is necessary to perform your contract. Some of our service providers process data in the EU or the United States; with them we use the safeguards required by UK law (adequacy regulations or the International Data Transfer Agreement / Addendum).
Passport scans are deleted 90 days after the festival ends; the passport number is kept for the same period so that the registration form and any invitation letter can be reconciled against it, then deleted. Orders and receipts are kept for six years, as required by accounting law. Your account and booking details are kept until June 2028, or earlier on request. Support and assistant conversations are anonymised after six months. Marketing data is kept until you opt out. Festival photos and video are kept for as long as we promote the festival.
You can ask us for a copy of everything we hold about you, correct it, have it deleted, restrict or object to how we use it, take it with you in a portable format, and withdraw any consent you have given. Write to us or use your account; we answer within one month. Deletion removes the person and leaves the transaction: your name, contact and travel details go, while the order and its amounts stay, attached to nobody, because the accounts have to keep agreeing with the bank. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — we would appreciate the chance to put it right first.
Passes for 16- and 17-year-olds are booked by a parent or legal guardian, who gives consent for the minor's data on their behalf.
The site uses cookies to keep you logged in and your basket intact. The website assistant stores your conversation to answer you and to improve its answers; conversations are anonymised after six months. We make no automated decisions about you that have legal effects.
We update this policy when our processing changes and show the date of the last update here.
Last updated Sep 5, 2026, 12:19 PM.
