Star Moments Limited, trading as Event Effects, is the data controller for the personal information described here. This policy explains what we collect, why we hold it, and the rights you have over it.
We do not ask for special category data, and we do not knowingly collect information about children.
We use your information to answer enquiries, prepare quotations, deliver a booked event, meet our health and safety and insurance obligations, take payment and keep proper accounting records. Our lawful bases are the performance of a contract with you, our legitimate interests in operating and improving the business, compliance with a legal obligation, and — for marketing email only — your consent.
We share only what is necessary, and never sell your information. Recipients may include your venue and any production or planning team you have asked us to liaise with; our insurers or legal advisers where a claim arises; and service providers who process data on our behalf, such as our email, cloud storage, accounting and payment providers. Where a provider is outside the UK we rely on an adequacy decision or the International Data Transfer Agreement.
Enquiries that do not become bookings are deleted within twelve months. Booking records, including risk assessments, are kept for six years after the event to meet our accounting, insurance and limitation-period obligations, after which they are deleted or anonymised.
You have the right to ask for a copy of the information we hold about you, to have it corrected or erased, to restrict or object to our use of it, to data portability, and to withdraw consent to marketing at any time. Write to us at the address below and we will respond within one month. If you are unhappy with our response you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
We keep your information on access-controlled systems protected by encryption in transit, and we limit access to those who need it to do their job. No transmission over the internet can be guaranteed secure, but we will notify you and the ICO of any breach that meets the reporting threshold.