Privacy Policy
Boing LTD, for glitchfestival.com and the Glitch Club Series Effective date: Effective date: 9/11/2026
Who we are
Boing LTD (“Glitch”, “we”, “us”, “our”) organises the Glitch Festival and the Glitch Club Series in Malta and runs these websites and their sub-domains: glitchfestival.com, club.glitchfestival.com, club.mt, glitch.mt (together with our apps and social media accounts, “the Services”).
Partner events: we also run customer support and other services for Dalma Festival, which is organised by Robot 03 LTD. For Dalma Festival, Robot 03 LTD is the data controller and its privacy policy at dalmafestival.com applies; we process that data on its behalf and under its instructions.
Boing LTD is the data controller of the personal data described in this policy. Registered address: 116, Constitution Street, Mosta MST 9055 · Company number: C 73818 Privacy contact: info@glitchfestival.com
The personal data we collect
When you buy tickets or merchandise, register for early access, or sign up to our newsletter: your name, email address and, where you give them, your country and other details on the form. Ticket payments are taken by our ticketing partner Paylogic; we never see or store your card details.
When you contact us by email (for example info@glitchfestival.com, or a form on one of our websites), by Instagram Direct message to one of our accounts (@glitchfestival, @glitchclubseries) or by Facebook Messenger to one of our Pages, we keep your message in our customer support system so our team can answer it: your name; your email address, or your Instagram username or Facebook name and the ID Meta gives us for you; your profile picture as shown by Instagram or Facebook; what you write to us and our replies; the names of any files or images you send; and the dates of the messages.
When you use our websites: usage data (such as your IP address, browser, the pages you visit and when) and cookies, as described below.
How we use it, and our legal basis
What we do Legal basis (GDPR)
Sell and deliver tickets and merchandise, and send you information about your order Performing our contract with you
Answer your messages and handle your requests (tickets, lost tickets, refunds, entry, questions about our events) Our legitimate interest in giving customer support, or taking steps you asked for before a contract
Recruit and schedule event staff, and keep pay records Taking steps you asked for before a contract, our contract with you, and our legal obligations
Send newsletters and offers about our events Your consent, or our legitimate interest in telling customers about similar events (you can opt out at any time)
Analytics and advertising cookies Your consent (given through our cookie banner)
Keep the Services secure and working, and comply with the law Our legitimate interests and our legal obligations
We don’t sell your personal data. We only message you on Instagram or Messenger in reply to a message from you, and we don’t use your messages for advertising.
Messages you send us: how they’re handled
Our team reads and answers your messages in our support system.
An AI service (provided by Anthropic, see below) reads new messages to sort them (customer support or not) and to suggest a reply; a member of our team checks every reply before it’s sent. It doesn’t make decisions about you.
If your message is about a common topic (such as a lost ticket), we may send an automatic first reply asking for the details we need, and then a member of our team takes over.
Who else processes your data
We use these service providers. They process personal data only on our behalf and under contract:
Vercel Inc. (hosting) and Neon Inc. (database), for our websites’ back office and support system.
Anthropic PBC: the AI service that sorts support messages and suggests replies. Under its commercial terms, Anthropic doesn’t use this data to train its models.
Meta Platforms delivers Instagram and Facebook messages. Meta’s own privacy policy applies to your use of Instagram and Facebook.
Google (Google Workspace for our email, and Google Analytics).
Paylogic (ticket sales and payments), with its own privacy policy.
Resend (sending emails from our systems, such as staff application confirmations).
Apple and Google push notification services, which deliver notifications to our staff’s phones; these can include the first line of a customer’s message.
Email and marketing platforms we use to send newsletters and run registrations.
We may also disclose personal data where the law requires it, to protect the rights, property or safety of Boing LTD, our customers or the public, or in connection with legal claims.
International transfers
We’re based in Malta. Some of the providers above are in the United States or process data there. Where personal data is transferred outside the European Economic Area, it’s protected by the European Commission’s Standard Contractual Clauses or another safeguard recognised under the GDPR (such as the EU-US Data Privacy Framework).
How long we keep it
Orders and tickets: as long as needed for the event and our legal accounting obligations.
Support messages: as long as we need them to handle your request and keep a record of our customer support, unless you ask us to delete them sooner.
Staff applications: with the records of that event; pay records as long as the law requires.
Newsletter: until you unsubscribe.
Usage data: for a shorter period, unless needed for security or to improve the Services.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent at any time (this doesn’t affect anything we did before). To use any of these rights, email info@glitchfestival.com. We may ask you to confirm your identity, and we’ll answer within one month.
To delete messages you’ve sent us (email, Instagram or Messenger): email info@glitchfestival.com with the subject “Delete my messages” and tell us your Instagram username, Facebook name or email address. We’ll delete your conversations and the details above from our support system within 30 days and confirm by reply. This doesn’t delete them from Instagram, Facebook or your own email; you can do that in those apps.
You also have the right to complain to Malta’s data protection authority, the Information and Data Protection Commissioner (idpc.org.mt), or to the authority where you live.
Cookies, analytics and advertising
We use cookies and similar technologies to run the Services (session, preference and security cookies) and, with your consent, for analytics and advertising.
Google Analytics helps us understand how our websites are used. You can opt out with the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).
Remarketing: with your consent, Google and Meta Platforms, Inc. may show you our ads on other sites based on your visits. You can change your ad preferences at google.com/settings/ads and in your Facebook and Instagram ad settings, or through youronlinechoices.eu.
You can change your cookie choices at any time through our cookie banner or your browser settings; some parts of the Services may not work without essential cookies.
Marketing emails
We send newsletters only as described above. Every email has an unsubscribe link, or email [privacy email address], and we’ll stop promptly. Our emails are never misleading about who they’re from and include our business address.
Children
Our events and Services are for people aged 18 and over. We don’t knowingly collect personal data from anyone under 18; if you believe a child has given us personal data, contact us and we’ll delete it.
Security
We protect personal data with appropriate technical and organisational measures (for example, access limited to the team members who need it, encrypted connections, and encrypted storage of access keys). No method of transmission or storage is completely secure, but we work to protect your data and will act promptly on any incident.
Links to other sites
Our Services link to sites we don’t operate. Their own privacy policies apply.
Changes to this policy
We’ll post any changes on this page and update the effective date at the top. If a change is significant, we’ll tell you by email or with a notice on our websites before it takes effect.
Contact us
Boing LTD, 116, Constitution Street, Mosta MST 9055, Malta. Info@glitchfestival.com