Privacy Notice

IMPACTS360 LIMITED (“we”, “us”) is the data controller for the personal data described in this notice. We are registered in England and Wales under company number 16085654, with our registered office at Room 520, Regus Barking, Jhumat House, 160 London Road, Barking, Essex, IG11 8BB.

For any privacy question, or to exercise any of the rights in section 8, contact us at office@impacts360.co.uk or 0333 339 3220.

This notice applies to:

• This website, impacts360.uk · enquiries, mailing list sign-ups and analytics.
• Buying a ticket to one of our events, and using that ticket on the door.
• Photography and video captured at our events.

Tickets for our events are sold by us, on this website. Your card details are entered on our payment provider’s own secure page and never reach us. Where an event is also listed on another ticketing platform, that platform is a separate company with its own privacy policy and becomes the controller for whatever you give them.

• Enquiry form · your name, email address, phone number (optional), the service you are interested in and your message.
• Mailing list · your email address and which part of the site you signed up from.
• Buying a ticket · your name, email address, mobile number and city, what you bought, what you paid, and any discount or promoter code you used. Your card details are entered on our payment provider’s own secure page and never reach us · we receive only a reference, the amount, and the last four digits.
• Your ticket · every ticket carries a unique QR code. When it is scanned on the door we record that it was admitted and when. That record is what stops one ticket being used twice, and it is also the evidence we rely on if a payment is later disputed with a bank.
• Disputed payments · if you or your bank dispute a payment, we compile what we hold about that order · the reference, the event, the amount, and whether the ticket was scanned in · and send it to the card scheme through our payment provider to answer the claim.
• Technical data · a one-way hashed version of your IP address, your browser user agent and the page you submitted from. We hash the IP rather than storing it so we can detect abuse without holding an identifier.
• Analytics · aggregated, cookieless page-view statistics. See our Cookie Notice.

We photograph and film our events for promotion, and those images may show identifiable people. We rely on our legitimate interest in promoting our events, balanced against your interests, and we will not use an image in a way that is likely to cause you distress.

If you appear in a photograph or video on this site or on our social channels and would like it removed, email office@impacts360.co.uk with enough detail to identify the image. We will remove it from our own channels promptly.

• To answer your enquiry · necessary for steps taken at your request before entering a contract, or our legitimate interest in responding to you.
• To sell you a ticket and get you through the door · performance of our contract with you.
• To send marketing emails · your consent, which you can withdraw at any time using the unsubscribe link.
• To send you messages about an order · your confirmation, your ticket and any change to the event · performance of our contract.
• To keep our systems secure and prevent abuse · our legitimate interests.
• To meet legal and accounting obligations · legal obligation.

We do not sell personal data. We share it only with the following kinds of provider, each bound by contract to protect it and to use it only on our instructions:

• Hosting, database and file storage providers · in the UK or the European Economic Area.
• Email delivery providers · for enquiry replies, ticket confirmations and mailing list messages.
• Our payment provider · for card payments and for answering disputed payments. They are a separate controller for the payment itself, under their own privacy policy, and your card details go to them rather than to us.
• Other ticketing platforms · where an event is also listed elsewhere, that platform is a separate controller for tickets bought there.
• Professional advisers · our accountants and, if we need them, our solicitors.

If you want to know which specific companies we use, ask us at office@impacts360.co.uk and we will tell you.

We may also disclose data where the law requires it, or to establish or defend legal claims.

• Enquiries submitted through this website: 24 months, then deleted automatically.
• Mailing list: until you unsubscribe.
• Tickets and door scan records: 24 months after the event, so we can answer questions about entry and defend disputed payments, which banks may raise long after the night itself.
• Records of a disputed payment: six years, because they are part of the transaction record and may be needed to defend a claim.
• Purchase and payment records: six years, as UK tax law requires.

Under UK data protection law you have the right to:

• Ask what personal data we hold about you and get a copy.
• Have inaccurate data corrected.
• Ask us to delete your data, in certain circumstances.
• Object to, or ask us to restrict, our processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where we rely on it.

To exercise any of these, email office@impacts360.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Some of our providers process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by the International Data Transfer Addendum to the European Commission’s standard contractual clauses.

Our events are strictly 18+ and this website is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

We may update this notice from time to time. The date at the top shows when it last changed. Material changes affecting how we use your data will be notified to you directly where we can.