PRIVACY POLICY
Who we are
This website belongs to Crab Fight, a band based in Yorkshire. Liam Sullivan is the person responsible for how this website handles your personal information.
The quickest way to reach us about privacy, or anything else, is by email:
Our postal address, for formal correspondence, is:
Liam Sullivan
Unit B5
Curtis House Business Centre
Leeds
West Yorkshire
LS9 9LF
United Kingdom
Information you give us
Contact form
If you use the contact form, we ask for your first name, email address, a subject line and your message, and we ask you to confirm you agree to us processing that information so we can reply. When you submit the form, our systems also record the IP address and browser information your device sends automatically, which helps us keep the form secure and deal with abuse.
Newsletter sign-up
If you sign up for our mailing list, we ask for your first name, email address and your consent to receive email updates. The sign-up form also stores a short internal label recording which part of the site you signed up from (for example the homepage or the Contact page). This label is set automatically by the form and is only used by us to understand where sign-ups come from; it is not something you fill in yourself and it is not shared with anyone.
How and why we use this information
We use the details you send through the contact form to read and reply to your enquiry, whether that is about a booking, press or media request, or anything else. We do this because you have asked us to, which we treat as our legitimate interest in dealing properly with the messages people send us. Where your enquiry is about a possible booking or collaboration, we may also rely on the fact that replying involves steps you have asked us to take before any agreement is made.
We use the details you give us when signing up for the mailing list to send you the news, gig and release updates you asked for. We only do this because you have given us your consent, and only for as long as that consent stands.
We do not use contact form submissions for marketing, and we do not add you to the mailing list just because you got in touch through the contact form.
Where the law requires it of us, for example for accounting or other legal record-keeping, we may also need to process limited information to meet that legal obligation.
Our newsletter and MailPoet
We send our mailing list through MailPoet, an email newsletter plugin running on our own website. Newsletter emails are delivered through our own domain’s mail server rather than a separate email marketing company.
We use double opt-in: after you sign up, you will receive a confirmation email and you need to click the link in it before you are added to our list. If you do not confirm, your sign-up details are automatically deleted after 30 days.
Every newsletter email includes an unsubscribe link. You can withdraw your consent and leave the list at any time by using that link, or by emailing us at info@crabfight.co.uk. Our newsletter tool also records whether emails are opened and whether links inside them are clicked, in the same way most email newsletter services do, so we can see whether our updates are useful. If you do not interact with our emails for 365 days, we pause sending to you rather than deleting your details outright.
Email delivery and hosting
The website is hosted on a dedicated virtual private server provided by IONOS and located in the United Kingdom. The server is administered directly by us; IONOS provides the underlying hosting infrastructure and processes information as part of doing so, including standard technical server logs. Messages you send through the contact form and newsletter sign-up are delivered using our own domain’s outgoing mail server, rather than a separate third-party bulk email service.
Keeping our forms secure
We use Cloudflare Turnstile, a free anti-spam check, on our contact form and newsletter sign-up. It runs in the background to help stop automated spam and abuse, and only shows a visible check if it needs to. We rely on our legitimate interest in keeping the website and its forms working properly and free from spam to do this.
Cookies and similar technologies
Our contact and newsletter forms use a small first-party cookie to support basic form security and to help our forms plugin recognise repeat visits; this is a functional cookie tied to using the forms, not an advertising cookie.
When the Cloudflare Turnstile check described above runs, Cloudflare may set its own cookies or similar identifiers to carry out that check.
If we enable Google Analytics on this site (see below), it will set its own cookies to help us understand how the site is used. Any such non-essential analytics cookies will only run in line with the consent choices this site offers at the time.
The embedded Bandcamp player described further below may also set cookies or use similar storage in its own right; see that section for more detail.
You can control or delete cookies through your browser’s own settings at any time. Doing so may affect how some parts of the site work.
Analytics
We use, or intend to use, Google Analytics to understand how people find and use this website, for example which pages are viewed, roughly where visitors are located (based on IP address or device information), what kind of device or browser they are using, how they arrived at the site, and how they interact with it. Google Analytics does this by using cookies and similar identifiers.
We only use analytics that are not strictly necessary for the site to work, such as Google Analytics, on the basis of your consent, and only where this site’s cookie or consent mechanism allows it at the time. If you do not consent, or if no such mechanism is active yet, this kind of analytics will not run.
Bandcamp and other embedded content
We embed a Bandcamp music player so you can listen to our music directly on this site, and we link out to our Facebook, Instagram and Bandcamp pages. When you view or use the embedded Bandcamp player, Bandcamp (and the service providers it uses, which may include analytics services) can set its own cookies and collect information about that interaction, under Bandcamp’s own privacy policy, which we do not control. We’d encourage you to check Bandcamp’s own privacy policy if you want to understand this in more detail. If you click through to Facebook, Instagram or Bandcamp, you leave this website and that platform’s own privacy policy applies.
Who we share your information with
We do not sell your personal information. We share it only with the service providers who help us run this website and its forms, mailing list and email delivery, our hosting provider IONOS, Cloudflare (for anti-spam protection), and, where enabled, Google (for analytics). Where you interact with our embedded Bandcamp player or click through to Facebook, Instagram or Bandcamp, those platforms act as independent controllers of any information they collect directly from you.
International transfers
Some of the service providers we use, including Cloudflare and Google, are international organisations that may process information outside the UK as part of providing their services. Where this happens, we expect it to be covered by the safeguards those providers put in place, but we are not in a position to confirm the specific details of those arrangements here.
How long we keep your information
Contact form messages are kept for as long as we reasonably need them to deal with your enquiry, handle any follow-up, or meet our own record-keeping and legal needs, and are removed when we no longer need them for those purposes.
If you sign up to our mailing list but never confirm your subscription, your details are deleted automatically after 30 days. Once confirmed, we keep your subscriber details for as long as you remain subscribed, and we pause emailing you (without deleting your details) if you do not engage with our emails for 365 days. You can ask us to delete your subscriber details at any time.
Your rights
Under UK data protection law, you have the right to:
- ask us what personal information we hold about you and get a copy of it (access)
- ask us to correct information that is inaccurate or incomplete (rectification)
- ask us to delete your information in certain circumstances (erasure)
- ask us to limit how we use your information in certain circumstances (restriction)
- object to us using your information where we rely on legitimate interests (objection)
- ask us to provide your information in a portable format, where relevant (portability)
- withdraw your consent at any time, where we rely on consent, such as our mailing list
Some of these rights apply only in certain circumstances, and none of them are absolute. To use any of these rights, email us at info@crabfight.co.uk.
How to complain
We hope we can resolve any concern you have about how we handle your information; please get in touch with us first. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk.
Changes to this policy
We may update this policy from time to time, for example as the website or the services it uses change. We’ll update the date below when we do.
This policy was last updated on 18 September 2026.