Privacy Policy for The Kelpies Experience

Effective Date: 27 Dec 2024

Zone Events Limited ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect personal data in connection with "The Kelpies Experience" events. We comply with the General Data Protection Regulation (GDPR) and other applicable laws.

1. Data Protection Principles

We adhere to the following principles in processing your personal data:

• Lawfulness, fairness, and transparency: Data is processed lawfully, fairly, and transparently.
• Purpose limitation: Data is collected for specified, explicit, and legitimate purposes.
• Data minimisation: Data collected is adequate, relevant, and limited to what is necessary.
• Accuracy: Data is accurate and kept up to date.
• Storage limitation: Data is stored only as long as necessary.
• Integrity and confidentiality: Data is processed securely.
• Accountability: We are responsible for demonstrating compliance with these principles.

2. Personal Data

Personal data means any information relating to an identified or identifiable person. This may include:

• Identity data: Name, date of birth,
• Contact data: Email address, telephone number, postal address.
• Transaction data: Payment information, ticket purchases.
• Technical data: IP address, browser type, and operating system.
• Marketing preferences: Preferences for receiving marketing communications.

3. How Data is Gathered and Used

Data Collection

We collect personal data through the following means:

• Online Event registration forms (hosted on Typeform) or paper based forms at the event location.
• Payment processing systems (Stripe) if required.
• Email correspondence.
• Cookies and similar technologies on our website.

Data Usage

We use your data for the following purposes:

• To process event registrations and ticket sales.
• To communicate important event updates.
• To respond to inquiries or requests.
• For marketing purposes, with your consent.
• To improve our services and user experience.
• To comply with legal and regulatory obligations.
• In the event of an injury that renders you unconscious or incapable of making a medical decision, you authorise Zone Events personnel and emergency medical personnel to make emergency medical decisions on your behalf (including, but not limited to CPR and use of an Automated External Defibrillator), to secure emergency medical care or transportation for you when deemed necessary by Zone Events and to inform your emergency contact.

4. Marketing and Communication

With your explicit consent, we may send you marketing communications about our events and services. You can withdraw your consent or update your preferences at any time by contacting us at hello@zoneevents.co.uk or using the "unsubscribe" link in our emails.

5. Sharing of Personal Data

We may share your data with third parties to facilitate our services:

• Service providers: For payment processing, email distribution, and event management.
• Data hosting: Personal data may be stored on platforms such as Dropbox and Typeform.

International Data Transfers

Some of our service providers (e.g., Dropbox and Typeform) may store data outside the UK, including in the EEA or the United States. When transferring data outside the UK, we ensure appropriate safeguards, such as:

• Adequacy decisions: Where the recipient country is deemed to provide adequate protection by the UK government.
• Standard contractual clauses (SCCs): Approved data protection agreements.

6. Rights and Responsibilities

Your Rights

Under the UK GDPR, you have the following rights:

• Right to access: Request a copy of your personal data.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data in certain circumstances.
• Right to restrict processing: Limit how your data is used.
• Right to data portability: Receive your data in a structured format.
• Right to object: Object to processing based on legitimate interests or direct marketing.
• Rights related to automated decision-making: Ensure meaningful human involvement in automated decisions.

To exercise your rights, contact us at hello@zoneevents.co.uk. We will respond within one month.

Your Responsibilities

• Ensure the accuracy of the data you provide.
• Notify us of any changes to your data.

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy to a maximum of 7 years or to comply with legal obligations. Data not required will be securely deleted.

8. Consequences of Non-Compliance

Failure to comply with this Privacy Policy may lead to:

• Breach of data protection laws.
• Regulatory action, fines, or penalties.
• Reputational damage.

We take compliance seriously and continually review our processes to uphold the highest standards.

9. Contact and Further Information

For any queries, concerns, or to exercise your rights, contact:

• Email: hello@zoneevents.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not handled your data in accordance with the law. Visit www.ico.org.uk for more information.

Thank you for trusting Zone Events Limited with your data. We are committed to ensuring your privacy and security throughout your experience with "The Kelpies Experience."

Last Updated: 2 Dec 2024

‍