Ideas Box UK Ltd (“we” or “us”) is committed to protecting and respecting your privacy, and to keeping your personal data safe and confidential.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, is processed by us.
Information we collect from OUR Customers
We collect and process the following data in order to be able to send you quotes, orders and invoices and to take payment: client name (if applicable), named contact, postal address, phone number(s), email address and payment details (card and bank details).
We also collect and process the following data in order to be able to organise your event: names and contact details of end clients, dietary and similar requirements, date of your event, other relevant dates, venue name and mobile number (on site contact).
We may also collect and process other data that assists us with the booking of your event but the above are the main categories.
Emails sent to our company email addresses or via our website are stored as correspondence so that we may answer your enquiry.
Disclosure of your information
We will not disclose your information to any third parties unless strictly necessary (permission will be sought where possible). For the purposes of providing your quotes and orders, to fulfil any contract with you and to meet our legal obligations, we may from time to time need to share the data we hold with service providers and the suppliers who provide and maintain our systems, the venues and associated suppliers for your event, credit reference agencies, credit card processors and payment service providers, our accountants and if necessary our solicitors; plus if required to by law, or if disclosure is necessary to protect the rights, property, or safety of Ideas Box UK Ltd, our staff, customers and suppliers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Use of your Data
We will only use your personal data to the extent that the law allows us to do so. Under the EU General Data Protection Regulation (the GDPR) we will rely on the following legal bases for processing your personal data:
- where it is necessary to perform a contract we have entered into or are about to enter into with you;
- where it is necessary for the purposes of our legitimate interests (or those of a third party) and your interests or fundamental rights and freedoms do not override those interests. Our legitimate interest means our interest in conducting and managing our business, including enabling us to provide you and our other customers with the best products and services we can and the best and most secure experience when dealing with us. In assessing our legitimate interests, we make sure we consider and balance any potential impact (both positive and negative) on you and others and your rights; where you have given us your consent.
Retention of your Information
We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected your personal data. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of that personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. If by law we are required to retain any information about our customers or their interactions with us, we will retain your personal data as far as required to comply with such law.
Marketing & Information updates
You have the right to ask us not to process your personal data for marketing purposes, such as using information you supply to us to provide you with any newsletters and other information we believe may be of interest to you (e.g. occasional key site updates), currently announced via our occasional newsletters. We will usually inform you (before collecting your data) if we intend to use your data for such purposes. You can exercise your right to prevent such processes by contacting email@example.com. We will then cease to process your data where the law allows as soon as possible, but in any event within 30 days receipt.
Access to information
You have the right, in certain circumstances to request access, changes to or other actions be taken in relation to information held about you, in accordance with the GDPR. If you wish to make such a request please see the “Contact” section on our website.
You can block cookies by activating the setting on your browser that allows you to refuse some or all cookies. However, if you do this you may not be able to access all or parts of our website.
If you require any further information about the cookies used on our website please email: firstname.lastname@example.org
We reserve the right to change this statement at any time by posting revisions on our website; if we make any significant changes then we will endeavour to notify by email as well.