Last updated: 20 October 2026
Who we are and how to contact us
Great British Motor Shows Ltd (GBMS), company number 12755643, operates this website, the GBMS booking system and the GBMS Wallet app. We are the controller for the personal information we use to operate our services. Where we process information solely on behalf of an event partner and under its instructions, we act as its processor; that partner is responsible for its own purposes and privacy information.
For privacy questions, requests or complaints, email steve@greatbritishmotorshows.com or write to Great British Motor Shows Ltd, PO Box 149, Driffield, YO43 4YT. Our registered office is Milburn House, 3 Oxford Street, Workington, Cumbria, CA14 2AL.
Information we collect
We collect information you provide when you create or use an account, book tickets, purchase membership, contact us, use optional app features or choose email updates. We also receive booking and payment confirmations from the services supporting your purchase.
Account information includes your email address, account identifier, profile details you supply, authentication records and email-verification status. Booking information includes purchaser and contact details requested on the form, event and ticket selections, quantities, order references, payment status, ticket documents and barcodes, and support or refund correspondence. Some bookings request attendee, vehicle, club or display information relevant to that event.
Technical information can include your IP address, browser and device information, session identifiers, security logs, storage preferences and information about how you use our website. If you provide information about another person, please ensure they know you have done so and direct them to this notice.
How we use information
We use the information necessary to provide the account, booking, ticket or membership service you request, take steps you ask us to take before a purchase, deliver tickets, manage benefits and respond to service enquiries. Our lawful basis for these necessary activities is performance of our contract with you or steps at your request before entering it.
We use account-verification and security information to protect accounts, prevent misuse and check ticket validity and admission. Where these activities are not necessary to perform our contract, we rely on our legitimate interests in protecting customers, operating secure services and preventing fraud and duplicate admission. We use financial records to meet applicable accounting and tax obligations, relying on legal obligation.
Required fields on our forms identify information needed for the requested action. Without the necessary contact, booking or verification information, we may be unable to create access, complete a booking or deliver tickets. Optional marketing and sharing choices are separate.
Payments through Stripe
We use Stripe to process payments. Your full card number and card security code are handled by Stripe and are not stored by GBMS. We retain the order and payment references, amounts and payment, refund or membership status needed to administer your purchase. This is different from storing your full card details.
Stripe also processes information for its own purposes, including payment security, fraud prevention and legal obligations. Its roles and processing are explained in the Stripe Privacy Policy.
Accounts and service emails
We use your email address to verify your account, help you set or reset your password, send order confirmations and tickets, and communicate necessary payment, membership and service information. These transactional messages are separate from optional marketing. Creating an account, buying a ticket or receiving a transfer does not by itself subscribe you to marketing.
The Wallet app and storage on your device
GBMS Wallet uses browser and device storage. App files may be cached so the app can open without a connection. When you choose to save a wallet, tickets or membership information can be kept on that device for offline use. The website and a home-screen installation may have separate storage.
Once saving is set up, the app can refresh saved information when connected and signed in to the appropriate account. If a connection or refresh fails, an existing downloaded copy can remain. Offline copies may not reflect a recent cancellation, transfer or membership change; reconnect and refresh before travelling. A saved wallet is not a substitute for a current account session for online account actions.
Signing out ends online account access; it should not be relied on as the only way to erase downloaded information. Use the app’s “Remove saved wallet” option to remove its saved tickets and membership card from that device. Clear the site’s browser/app data if you need to remove remaining local storage, and repeat this in each browser or installation you used. Removing a home-screen icon alone may leave site data behind.
Removing local copies does not cancel purchases, end membership or erase account and order records held by GBMS. Keep your device locked and remove saved information before sharing or disposing of it. Contact us separately about account closure or a data-erasure request.
My Garage and optional sharing
If you use My Garage, we store the vehicle information you provide, which may include type, year, make, model, descriptions, photographs, video links and optional MOT or insurance dates. We use this information to provide the Garage service you request, relying on our contract with you where necessary for that service.
Vehicle information is private within your account unless you choose an available sharing option. Any wider display depends on your separate sharing choice and the audience described when you make it. Account access, ticket purchases and email marketing permission are not permission to share Garage content. You can manage your vehicle records and sharing choices through the available Garage controls or contact us for help.
Ticket transfers and saved contacts
Where a ticket-transfer option is available for your account and ticket, you choose whether to use it and the recipient chooses whether to accept. We process the recipient email address supplied by the sender, the sender and recipient account identifiers, ticket information, invitation status and relevant timestamps to administer the transfer and protect ticket ownership.
Transfer records are held in our systems; they are not confined to the sender’s device. If you choose to remember a contact, their name and email address can also be saved in your account for easier future selection. You can remove a saved contact through the available contact controls. Removing a saved contact does not itself erase the associated ticket or transfer history.
If you receive an invitation, your email address came from the sender for that transfer. We use transfer information to provide the requested service and rely on our legitimate interests in administering invitations, confirming ownership and preventing misuse where the recipient is not yet party to a contract with us. Acceptance is separate from marketing consent. A transfer does not subscribe the recipient to GBMS or partner marketing.
Optional email updates and partners
If you opt in, we use your email address and preferences to send GBMS events, ticket-launch and website-feature updates. Our lawful basis is consent. You can withdraw it at any time using the unsubscribe link in an email, the available account email preferences, or by contacting Steve. Withdrawal does not affect the lawfulness of processing before withdrawal or stop necessary service emails.
We do not sell your personal information. We share information with partners for their marketing only when you explicitly opt in to the partner sharing described at the time. That choice is separate from GBMS email updates and from sharing needed to deliver a service you request. The relevant partner is responsible for its subsequent use under its own privacy notice. You can withdraw permission for future sharing by contacting us and contact the partner to exercise your rights over information it already holds.
Service providers and other recipients
Authorised staff and suppliers process information needed for their tasks. These include website, database and cloud hosting; booking and ticket delivery; Stripe payment services; transactional email and ticket-email archiving; customer support and security; optional email-update delivery; and website analytics. A copy of ticket emails and ticket PDFs may be retained to make tickets available through your account and assist with enquiries.
We share information needed to fulfil the event or partner service you request with the relevant organiser or delivery partner. Optional partner marketing requires the separate permission described above. We may also disclose information when required by law or necessary to establish or defend legal claims. Suppliers may act as our processors or as controllers for particular activities; their role depends on the service.
Google Analytics, cookies and similar technologies
We use Google Analytics to understand how visitors move through and use the website, identify difficulties and improve the user journey and experience. This can involve page and interaction information, browser/device details, identifiers and network information. Google receives information through the analytics service; the service is not a sale of your personal information.
For more about Google’s processing and available controls, see how Google uses information from sites or apps that use its services. For optional analytics involving consent, our basis is your consent, which you can withdraw. Where a specific lawful storage exception applies, any related personal-data processing must also have an appropriate lawful basis.
Our Cookie Policy describes essential, statistics, marketing, functional and preference cookies and how to manage them. Similar rules can apply to local storage and app caches. Necessary login, security, checkout and explicitly requested offline functions are distinct from optional analytics or advertising uses. Cookie and analytics choices do not subscribe you to email marketing. You can also use your browser’s controls to block or clear site data, although this may affect login, checkout and offline tickets. Contact Steve if you need help changing a choice.
Where information is stored
GBMS stores its hosted customer and service records in UK/EU data centres. This describes our hosting arrangements; it does not mean every external supplier processes information only in the UK or EU. Services such as Stripe and Google operate internationally and describe their processing locations and transfer arrangements in their privacy information linked above. Contact Steve for information about the suppliers, overseas access and safeguards relevant to your data.
How long we keep information
Our retention period for GBMS customer and transaction records is seven years. These records support account and purchase administration, accounting, refunds, disputes and security. Time-limited verification links and invitations have their own expiry; expiry is different from deletion of the underlying record. Optional email permission can be withdrawn at any time, and we may retain a suppression record to honour an opt-out.
You can request earlier erasure where the right applies. Some records may need to be retained to meet legal obligations or resolve a dispute, and we will explain any applicable exception. Device copies remain subject to your device-storage controls. External providers apply the retention rules relevant to their own processing. Contact Steve if you need details about a particular record.
Your rights and complaints
Depending on the circumstances, you have rights to access and correct your personal information, request erasure or restriction, and obtain a portable copy. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing.
Your right to object: You can object to processing based on legitimate interests. You have an unconditional right to object to the use of your information for direct marketing.
To exercise your rights or raise a concern, email steve@greatbritishmotorshows.com. We may ask for proportionate information to verify your identity. If an automated account, payment or ticket check prevents you using a service, contact us to ask for help and review.
You can complain to the UK Information Commissioner’s Office through ico.org.uk/make-a-complaint. You may contact us first so we can try to resolve your concern.
Changes to this notice
We will update this notice when our services or processing change and explain material changes where appropriate. This version was updated on 20 October 2026.
Image: CORGI