Parallux respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, store and share data when you visit our website, purchase tickets, attend an event, receive communications or otherwise interact with us.
1. Who we are
Parallux Ltd is the data controller responsible for deciding how and why your personal data is processed under UK data protection law.
Company number: 17113546
Email: info@parallux.co.uk
Website: winterlightexperience.co.uk
2. Personal data we collect
Depending on how you interact with us, we may collect your name, contact details, billing or postal address, booking details, event attendance, correspondence, marketing preferences, accessibility information you choose to provide, survey responses and customer-service information.
We may also collect technical data such as your IP address, browser and device information, cookie identifiers, referral source and website interaction data. Payment providers and ticketing platforms process card details securely; we do not ordinarily receive or store your full card details.
3. How we collect information
We collect information directly when you book tickets, join our mailing list, attend an event, contact us, enter a promotion, complete a survey or otherwise provide information to us.
We may receive technical information automatically through cookies and similar technologies, and receive relevant information from ticketing providers, payment processors, venues, event partners, analytics providers and marketing platforms.
4. How and why we use your data
We use personal data to process bookings and payments, provide tickets, manage entry, communicate event updates, answer enquiries, provide customer support, improve our events and website, prevent fraud and meet legal obligations.
Our lawful bases may include performing a contract, complying with a legal obligation, your consent, and our legitimate interests in operating safe and effective events, assisting customers and improving our services.
5. Marketing communications
Where permitted, we may send news, offers and event announcements based on your consent or our legitimate interests. You can unsubscribe using the link in any marketing email or by contacting us.
Unsubscribing from marketing does not stop essential messages about an existing booking. We may retain limited suppression information so we continue to respect your choice.
6. Cookies and similar technologies
Our website may use strictly necessary, functionality, analytics and advertising technologies. Necessary technologies support the operation of the site. Where the law requires consent, optional technologies will not be used until you have made a choice through the website's cookie controls.
7. Sharing your personal data
We do not sell personal information. Where necessary, we may share data with ticketing and payment providers, website and cloud providers, email and analytics services, event venues and operational partners, professional advisers, safety providers, regulators and law-enforcement authorities.
Service providers working for us may only process information for agreed purposes under appropriate contractual and security arrangements.
8. Event venues and partners
Some events are delivered with venues or partner organisations. We may share information needed to organise and deliver an event. Where another organisation acts as an independent data controller, its own privacy policy applies.
9. International transfers
Some technology, payment, ticketing, marketing or cloud providers may process information outside the United Kingdom. We use safeguards required by UK law, such as adequacy regulations or approved contractual protections.
10. How long we keep information
We retain information only for as long as reasonably necessary for its purpose and to meet accounting, tax, insurance, contractual, legal and reporting obligations. Retention periods vary by the type of record. When data is no longer required, it is securely deleted or anonymised where appropriate.
11. How we protect information
We use appropriate technical and organisational measures designed to protect data from accidental loss, alteration, unauthorised disclosure or access. Access is restricted to people and providers who reasonably need it for authorised purposes. No electronic system can be guaranteed completely secure.
12. Your data protection rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict your data, object to processing, request portability and withdraw consent. You can object to direct marketing at any time.
Contact us to exercise a right. We may need to verify your identity, and legal conditions or exemptions may apply.
13. Complaints
Please contact us first if you have concerns so we can try to resolve them. You may also complain to the UK Information Commissioner's Office at ico.org.uk.
14. Automated decision-making
We do not currently use personal information for solely automated decisions that produce legal or similarly significant effects. We will update this policy if that changes.
15. Children's personal data
Children may attend our events, but online bookings should normally be made by an adult. We do not intentionally use children's data for marketing without an appropriate lawful basis and safeguards.
16. Third-party websites
Our website may link to independently operated ticketing systems and other services. We are not responsible for their privacy practices and recommend reading their privacy information before providing data.
17. Changes to this policy
We may update this policy to reflect changes in our website, events, services or the law. The latest version and revision date will be published here.
18. Contact us
For questions, rights requests or concerns about personal information, email info@parallux.co.uk.