Privacy Policy
Last updated: 23 August 2026
1. Who we are
Más Que Bachata is operated by Lambreva, enterprise number 0735.909.997, with its registered address at Halmaelshof 35, 2660 Antwerpen, Belgium.
In this Privacy Policy, “Más Que Bachata”, “we”, “us” and “our” refer to Lambreva trading as Más Que Bachata.
For the processing described in this policy, Lambreva is the data controller unless another service provider expressly acts as an independent controller for its own activities.
For questions about this policy or the use of your personal data, contact:
Email: info@masquebachata.com
Postal address: Halmaelshof 35, 2660 Antwerpen, Belgium
2. Scope of this policy
This policy explains how we process personal data when you:
visit masquebachata.com;
contact us by email or through a website form;
subscribe to Más Que Bachata news and marketing emails;
buy or manage tickets for a Más Que Bachata event through Weeztix;
interact with our emails, ticket communications or social-media links; or
otherwise communicate with us about our events and activities.
3. Personal data we may collect
Depending on how you interact with us, we may process:
Identity and contact data: first name, last name, email address and, if voluntarily provided, telephone number.
Ticket and booking data: event, ticket type, order or booking reference, booking status and communications concerning a booking.
Marketing and consent data: subscription status, the date and source of consent, marketing preferences, unsubscribe information, and event-name or ticket-name tags associated with an opted-in buyer.
Email engagement data: delivery status and, where Mailchimp tracking is enabled, information such as opens and link clicks.
Enquiry data: the contents of messages sent to us and any information you choose to include.
Technical and website data: IP address, device and browser information, security logs, pages visited, and cookie or similar-technology information generated when you use the website.
Payment details are handled through Weeztix and its payment-service providers. We do not intentionally receive or store your complete payment-card details.
4. Where the data comes from
We obtain personal data:
directly from you when you contact us or subscribe;
through the Más Que Bachata website hosted by Squarespace;
from Weeztix when you buy a ticket or manage a booking;
from the Weeztix–Mailchimp integration when the booker has actively opted in to email marketing; and
automatically through website, email and security technologies.
The Weeztix–Mailchimp connection is configured to send only the opted-in booker to the Más Que Bachata Mailchimp audience. It may also apply event-name and ticket-name tags so that we can understand which event or ticket was connected to the subscription. Individual ticket holders are not added to Mailchimp through this integration unless they separately subscribe through an approved signup method.
If a booker provides another attendee’s personal data for ticket personalisation, we receive that information indirectly through Weeztix and use it only as necessary for ticket and event administration. It is not added to the Mailchimp audience unless that person separately subscribes.
5. Why we process personal data and our legal bases
We use personal data for the following purposes:
Ticket sales and event administration
We process booking and contact information to provide tickets, manage an event, communicate operational information, answer booking questions and handle cancellations, changes or related requests.
Legal basis: performance of a contract or steps taken at your request before entering into a contract.
Customer service and enquiries
We process messages and contact details to answer questions and manage our relationship with you.
Legal basis: performance of a contract or pre-contractual steps where relevant; otherwise our legitimate interest in responding to enquiries and operating our activities.
Email news and marketing
We use Mailchimp to send event announcements, ticket information and other Más Que Bachata marketing emails only where we have a valid marketing permission or consent.
Legal basis: your consent. You may withdraw it at any time by using the unsubscribe link in any marketing email or by contacting us.
We currently use telephone numbers only where necessary for an enquiry, booking or event communication. We will not use a telephone number for SMS marketing without an appropriate separate legal basis or consent.
If Mailchimp open or click tracking is enabled, the signup information will explain that measurement and we will use it only where the required transparency and consent are in place.
Relevant audience organisation
We may use event-name and ticket-name tags to organise the audience and send information that is more relevant to subscribers. This does not produce legal or similarly significant effects for you.
Legal basis: your consent for the associated email marketing. The tags are used only to administer and tailor communications within the scope of that consent.
Website operation, security and fraud prevention
We process limited technical data to operate and protect the website, prevent abuse and investigate technical or security problems.
Legal basis: our legitimate interests in providing a secure and reliable website and protecting our activities and users.
Legal, accounting and compliance obligations
We may retain and use transaction or communication records where necessary to comply with tax, accounting, consumer-protection or other legal obligations, or to establish, exercise or defend legal claims.
Legal basis: compliance with a legal obligation and, where applicable, our legitimate interest in managing and defending legal claims.
Optional analytics and non-essential cookies
Where non-essential analytics or similar technologies require consent, they will be used only in accordance with the choices made through the applicable cookie-consent mechanism.
Legal basis: consent where required by law.
6. Service providers and recipients
We share personal data only where necessary for the purposes described above. Relevant recipients may include:
Squarespace, which hosts masquebachata.com and processes website, form and technical data;
Weeztix, which processes organiser-controlled ticket and attendee data on our instructions where Lambreva determines the event purpose. Weeztix also acts as an independent controller for certain platform, account, payment, analytics and security activities described in its own Privacy Policy;
Mailchimp / Intuit, which stores audience data and sends and measures our marketing emails;
a technical integration provider used to connect Weeztix and Mailchimp, which transfers opted-in booker information and relevant event or ticket tags between those services;
Google Workspace, which provides our business email service;
payment-service providers used through Weeztix;
professional advisers, such as our accountant or legal adviser, where necessary; and
public authorities where disclosure is legally required.
These providers may use approved subprocessors. They receive only the information reasonably necessary for their services and are subject to contractual or legal data-protection duties where applicable.
You can find more information in the providers’ own notices:
Squarespace Privacy Policy: https://www.squarespace.com/privacy
Weeztix Privacy Policy: https://weeztix.com/privacy-policy
Intuit/Mailchimp Global Privacy Statement: https://www.intuit.com/privacy/statement/
7. International data transfers
Some service providers or their subprocessors may process personal data outside the European Economic Area, including in the United States.
Based on the providers’ current published terms:
eligible transfers by Squarespace to its certified United States entity rely on the EU–US Data Privacy Framework. Squarespace also uses European Commission Standard Contractual Clauses where the Data Privacy Framework or another adequacy decision does not apply;
eligible transfers by Mailchimp/Intuit to certified United States entities rely on the EU–US Data Privacy Framework, with European Commission Standard Contractual Clauses available under its Data Processing Addendum where required; and
Weeztix states in its organiser terms that transfers by its subprocessors outside the EEA must use a lawful safeguard, such as Standard Contractual Clauses, where needed.
Google Workspace and any other relevant provider must also apply a lawful transfer mechanism under its applicable data-protection terms where data is processed outside the EEA.
You may contact us if you would like more information about the safeguards relevant to your personal data.
8. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the relevant purpose:
Newsletter and marketing data: while you remain subscribed, subject to periodic review. After you unsubscribe or withdraw consent, we remove you from active marketing.
Suppression information: a minimal record of the email address and opt-out may be retained for as long as it is needed to prevent the address from being accidentally reintroduced, unless you validly subscribe again.
Consent records: normally for up to five years after consent is withdrawn or last relied upon, unless a longer period is necessary for an ongoing legal claim or legal obligation. We retain these records to demonstrate compliance and respect opt-outs.
Enquiries and ordinary correspondence: normally for up to 24 months after the last substantive contact, unless a continuing relationship, dispute or legal obligation requires longer retention.
Operational ticket records: normally for up to 24 months after the relevant event, unless they form part of an accounting record, dispute or legal claim.
Invoices, accounting books and supporting accounting documents: for 10 years from the legally applicable starting date under Belgian accounting and VAT rules.
Technical or security logs under our control: normally for up to 12 months, unless a security incident or legal claim requires longer retention.
Cookie information: for the periods described in section 9 below.
When information is no longer required, we delete it, anonymise it or securely restrict its use, unless the law requires continued retention.
9. Cookies and similar technologies
Squarespace and connected services use cookies and similar technologies to operate, secure and understand the use of this website.
Necessary cookies may be placed without consent where they are required for the website to function. These can support functions such as security, delivery of website content and remembering your cookie choices.
Squarespace also provides analytics and performance tools. Where these cookies require consent, they are used only after you make the corresponding choice through our cookie banner.
Squarespace currently uses the following analytics and performance cookies:
ss_cid: 2 years
ss_cpvisit: 2 years
ss_cvisit: 30 minutes
ss_cvr: 2 years
ss_cvt: 30 minutes
These cookies help identify unique visitors and understand visits and sessions on the website.
Squarespace may also use ss_performancecookiesAllowed and ss_marketingcookiesAllowed, each for 30 days, to remember the cookie choices you make.
You can accept, reject or manage non-essential cookies through the cookie banner. You can change your choices later by selecting Cookie Preferences at the bottom of the website. You can also remove cookies through your browser settings.
The cookies used by Squarespace can change when website features or integrations change. More information is available in Squarespace's cookie documentation.
10. Social-media links
Our emails and website may include links to social-media services such as Facebook and Instagram. When you follow those links, the relevant platform processes data under its own privacy terms. We do not control the platform’s independent processing.
11. Your data-protection rights
Subject to the conditions in applicable law, you may ask us to:
provide access to your personal data;
correct inaccurate or incomplete data;
delete your personal data;
restrict how your data is used;
provide certain data in a portable format;
stop processing based on legitimate interests; and
withdraw consent at any time.
You always have the right to object to the use of your personal data for direct marketing. The easiest way is to click unsubscribe in any marketing email. Exercising this right is free of charge.
To exercise a right, email info@masquebachata.com. We may ask for information necessary to verify your identity. We will respond within the period required by applicable data-protection law, normally within one month.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
12. Complaints
If you have concerns, you may contact us so that we can try to resolve them, but doing so is not required before making a complaint.
You also have the right to lodge a complaint with the Belgian Data Protection Authority:
Data Protection Authority / Gegevensbeschermingsautoriteit
Rue de la Presse 35
1000 Brussels
Belgium
https://www.dataprotectionauthority.be/citizen/actions/lodge-a-complaint
13. Required and optional information
Information marked as required during a ticket purchase is needed to process the booking and provide the ticket or related service. If you do not provide it, we may be unable to complete the transaction or respond to the request.
Joining the marketing audience is optional. Refusing or withdrawing marketing consent does not prevent you from buying tickets or attending an event.
14. Automated decision-making
We do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects for you.
15. Security
We use reasonable organisational and technical measures, together with the security controls provided by our service providers, to protect personal data against unauthorised access, alteration, loss or disclosure. No internet-based service can guarantee absolute security.
16. Changes to this policy
We may update this Privacy Policy when our services, providers or legal obligations change.
The latest version will be published at:
masquebachata.com/privacy-policy
The “Last updated” date at the top identifies the current version.