FanBee Terms & Conditions

Last Updated: September 2025

1. Introduction

The terms and conditions set out on this page tell you the rules for using our websites epicelite.com, songmate.com, elitealliance.net, music.elitealliance.net, and fanb.ee (the “Websites”) and the provision of our services to you, including those we make available via the Websites or otherwise in connection with our business (the “Services”).

This Privacy Notice also explains how we process your personal data if you are another individual that interacts with our business, including if you: are someone who has seen an online ad promoting our Services or our business, work for businesses that provide goods or services to us, visit our premises, attend events that we host, apply to work for us, and are engaged by us to promote our business, including if you are an influencer or other talent. This notice does not apply to you if you are part of the audience of an artist (for example, if you are a listener, a fan, or otherwise affiliated with an artist).

Please take a moment to read this Privacy Notice as it provides you with important information about your personal data, including the rights you have in relation to it. Your access to and use of our Websites is also subject to our Terms and Conditions.

This Privacy Notice is intended to meet the requirements of privacy laws of the United Kingdom (“UK”) and the European Union (“EU”), in particular the EU’s General Data Protection Regulation, the UK GDPR, and other similar European privacy laws (for ease of reference, collectively, the “GDPR”). However, as an international business we may be subject to additional privacy laws and process personal data relating to individuals located in other territories – please see the International transfers of personal data section for more information.

Any changes we make to this Privacy Notice will be posted on our Websites, including to reflect any changes to our use of personal data or to comply with applicable law or regulatory requirements. Where possible we may notify you of these changes by email, but we encourage you to check this page regularly to keep up to date.

2. About us

The Websites and our Services are made available by Epic Elite Ltd (“Epic Elite”, “we”, “us”, “our”). Epic Elite is a company registered in England and Wales (No: 13454659) with its registered office at Runway East, 24-28 Bloomsbury Way, London, England, WC1A 2SN. Epic Elite is registered as a controller with the Information Commissioner’s Office (Registration No: ZB362482).

Epic Elite is the controller of your personal data for the activities described in this Privacy Notice, except where we say in this Privacy Notice that we are a processor (where we process personal data on behalf of our clients when providing our Services).

Please contact us using our contact details in the How to contact us section.

3. How to contact us

If you want more information or have any questions about our processing of your personal data or this Privacy Notice you can contact us via our email at: privacy@epicelite.com.

4. How we collect and receive personal data

We collect and receive personal data through the following methods:

  • Personal data you provide to us. You may give us your personal data directly, for example, when you use or purchase our Services, contact us with enquiries, complete forms on our Websites, apply to work for us, subscribe to receive our marketing communications, provide feedback to us, create an account, set up campaigns, use the link shortener service, or use pre-save features.
  • Personal data we collect automatically, including through cookies and other similar technologies. When you access and use our Websites, we may collect Technical Data and Usage Data automatically, including through our use of cookies and other similar technologies. For more information about this data, please see our Processing Activities Schedule. For more information about our use of cookies and other similar technologies, please see the Cookies section.
  • Personal data we receive from third parties. We may receive personal data from third parties. Such third parties may include event suppliers and organisations we work with, analytics providers, data suppliers, recruiters acting on your behalf, your referees, third-party directories and third parties that provide technical services to us so that we can provide our Websites and our Services.
  • Personal data that is publicly available. We may collect personal data that is available from public sources (including media publications) or that you or a third party may otherwise publish (for example on websites, posts on social media platforms, or speeches at events).

5. Personal data we control

We may process or otherwise be a controller of the following personal data:

  • Identity Data. Name (first, middle, and last); and title.
  • Contact Data. Email address; telephone number; social media handle; and postal/delivery address.
  • Registration Data. Username; password; security questions and answers; and any other personal data that you may provide to register an account with us.
  • Professional Data. Job title; and organisation that you represent (where you or your organisation supplies products or services to us).
  • Image Data. Photos or video recordings that feature you or your likeness, including any profile picture, images or avatar that you upload to our Websites, or social media pages, or which we otherwise take or obtain, for example if we engage you to promote our business, or when you visit our premises or attend events that we host.
  • Transaction Data. Details of Services purchased from us or services that we may purchase from you or the organisation that you work for, including payment information (such as payment card details, bank account details and billing address).
  • Profile Data. Date of birth; gender; personal pronouns; country of residence; nationality; information about your interests, affiliations and preferences, including any dietary requirements; other information that you supply in connection with your use of our Websites or social media pages, or in your interactions with us (including in relation to your provision of feedback or responses to our surveys, or your attendance at an event); and the content of any communications when you contact us.
  • Usage Data. Data observed or collected in relation to browsing activity on our Websites, interaction with our emails, or interaction with ads that you see as a result of the activities described in the Online Advertising Activities section, or attendance at our events. This may include information about pageviews and events on our Websites; information about the webpage or other source that users were previously on before reaching our Websites; information about when a browsing session started and ended; information about views of and clicks on our ads, together with advertising or other identifiers associated with a user or their device (e.g. a device’s IDFA (iOS) or AAID (Android) or advertising cookie identifiers); information from link performance metrics; and information about sessions attended and networking interactions at our events.
  • Technical Data. IP address; details of the Websites that you are viewing, such as full web page URL; browser type, device type and operating system and any other information available to us about the device you are using; tracking codes associated with campaigns, UTM codes and referral tags; links created with the link shortener service; streaming account identifiers and authorisation tokens from the use of pre-save features where strictly necessary to complete the requested action; location data, including the geographic location (which may be approximate, like the city or region you are in, or more precise) of a device derived from IP address, GPS signals or information about a device’s connection with local Wi-Fi equipment; diagnostic data (including crash logs, launch time, hang rate and energy use, and any other data collected for technical diagnostics purposes), and any relevant unique identifiers assigned to a device or browser (including cookie identifiers).
  • Social Media Data. Information that is logged by the third-party providers of social media platforms in relation to events that users take in relation to our social media pages or content. Events can include views, clicks, following or unfollowing, and any other types of interaction with our page or content, and the data that is recorded by the third-party providers of social media platforms may include information about the person taking the action and the device they are using, such as social media handles, the date and time of the event, the country/city (derived from IP address or social media profiles) of the user, age/gender information and the type of device used. Unless specified otherwise in this Privacy Notice, this personal data is not shared with us, but third-party social media providers may use it to provide us with anonymous and aggregate statistics about our social media pages and content, and we may be a joint controller of this personal data, as described in the Social media pages and insights and Advertising and Social Media Partners sections.
  • Advertising Partner Data. Information obtained independently by our Advertising Partners as described in the Online Advertising Activities section. This may include unique identifiers and a profile of your possible interests and characteristics, which may have been built by observing your activity on websites, apps and other digital properties, including those operated by third parties, that use our Advertising Partners’ services. Unless specified otherwise in this Privacy Notice, this personal data is not shared with us, but we may be a controller of it in relation to purposes described in this Privacy Notice.
  • Incident Data. Information about any injury that you suffer or incident you may be involved in (including as a witness) at an event hosted by us or if you visit our premises, including any personal data you or others provide (including any factual description and opinions); details of any injury suffered; actions taken by us or others in response to the incident or injury, including details of any medical assistance or treatment that has been provided or advised (e.g. first aid applied, onsite paramedic or paramedic technician attended, advised to visit hospital, hospitalised); and any other personal data collected during the process of completing our incident report.
  • Communications Data. Marketing preferences; and service communication preferences.
  • Recruitment Data. Profile Data (to the extent that it is relevant to our recruitment activities or you volunteer it during our recruitment process), together with other information including details of your eligibility to work (including documents and information that we may collect to verify this); your work preferences (including areas and dates where you are available for work); skills, qualifications, training and work history; any personal data which appears in your curriculum vitae or application; information required to onboard you if your application is successful, such as information about your bank account, pension contributions and tax and national or social insurance information; and any other personal data that you volunteer during our recruitment process.
  • Special Personal Data. Health data.

6. Our processing activities

We process your personal data for the following purposes:

  • to provide you with our Websites;
  • to provide you with Services;
  • to deal with customer services and enquiries, and carry out surveys and obtain feedback;
  • to carry out Insight and Analysis, Data Improvement and Personalisation;
  • to carry out online and other advertising and marketing activities;
  • for recruitment purposes; and
  • for business administration and legal compliance purposes, including to exercise or defend legal claims.

For more information about our processing activities, including the personal data that is processed in connection with those activities, please see our Processing Activities Schedule.

7. Cookies

Where indicated in this Privacy Notice, cookies, web beacons, pixel tags and other similar technologies (“Cookies”) may be used for the purposes described in this Privacy Notice. In addition to the information set out in this Privacy Notice, you can find out further information about the Cookies that we use on our Websites, and learn how you can manage your consent to the use of non-essential Cookies, by visiting your browser settings.

In some cases, the Cookies that we use may be provided by a third party. Information about you may be shared with the relevant third party and used in accordance with their privacy notice.

You can also manage your Cookie preferences using functionality provided by your browser, but please be aware that to use some parts of our Websites you will need to allow essential Cookies. If you block essential Cookies, some parts of our Websites may not work properly, or you may not be able to access our Websites.

For more general information about Cookies and managing Cookies, including blocking or deleting cookies for a wide variety of browsers, visit All About Cookies.

8. Sharing personal data

We only share personal data with third parties when we are legally permitted to do so. When we share personal data with others, we put contractual arrangements and security mechanisms in place to protect the personal data and to maintain the confidentiality and security of it.

The circumstances where we may typically share personal data are set out below, though there may be other circumstances where we need to share personal data that are not set out below.

  • Third-party suppliers who provide applications/functionality, data processing or IT services. We share personal data with third parties who support us in providing our Websites and help provide, run and manage our internal IT systems. Such third parties may also include, for example, providers of information technology, cloud-based software-as-a-service providers, identity management, website design, hosting and management, data analysis, data back-up, security and storage services. The servers powering and facilitating that cloud infrastructure are located in secure data centres around the world, and personal data may be stored in any one of them. We also share your personal data with third-party service providers to assist us with insight analytics.
  • Payment providers and banks. We share personal data with third parties who assist us with the processing of payments. We will also share personal data with our payroll services, insurers and other benefit providers, our bank and other organisations that host our IT systems and data if you accept an offer of employment from us and this would typically be carried out as part of the on-boarding process.
  • Delivery and courier companies. We share personal data with suppliers who assist us in the delivery of documents, information and materials.
  • Advertising partners. We share personal data with third party advertising partners. This data is used to provide you with, and measure the effectiveness of, online personalised advertising and for other advertising related activities. For more information, please see the Advertising and Social Media Partners section.
  • Third-party marketing and customer relationship management specialists. We share personal data with specialist suppliers who assist us in managing our marketing database and activities, and sending out our marketing and account-related communications.
  • Event partners and suppliers. When we run events, we will share personal data with third-party service providers that are assisting us with the operation and administration of that event. If we are running an event in partnership with other organisations, we will share personal data with such organisations for use in relation to the event.
  • Recruitment agencies and related organisations. We share personal data with external recruiters and third-party providers that undertake background checks on our behalf.
  • Auditors, lawyers, accountants and other professional advisers. We share personal data with professional services firms who advise and assist us in relation to the lawful and effective management of our organisation and in relation to any disputes we may become involved in.
  • Law enforcement or other government and regulatory agencies and bodies. We share personal data with law enforcement or other government and regulatory agencies or other third parties as required by, and in accordance with, applicable law or regulation.
  • Business partners. We may also disclose personal data to third parties:
    • if we sell or buy any business or assets, in which case we may disclose personal data to the prospective seller or buyer of such business or assets; or
    • if we or substantially all our assets are acquired by a third party, in which case personal data held by us will be one of the transferred assets.
  • Other third parties. Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, or to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation.
  • Artists/Creators. Where you choose to subscribe to, or otherwise interact with, an artist’s campaign via our Website, we may share your personal data with that artist/creator as the Controller for their marketing or community management purposes, as described at the point of collection.
  • Third party music platforms. We may share personal data with Spotify, Apple Music and other streaming platforms only if you have completed the requested pre-save actions and with your consent.
  • Regulators. If formally required/requested, we may share aggregated and anonymised diversity statistics to demonstrate how we have met our goals to promote diversity, inclusion and equality.

9. Your rights

You have the following rights in relation to your personal data:

  • Your right of access. If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data (along with certain other details). If you require additional copies, we may charge a reasonable fee for producing those additional copies.
  • Your right to rectification. If the personal data we hold about you is inaccurate or incomplete, you are entitled to have it rectified. If we have shared your personal data with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you who we’ve shared your personal data with so that you can contact them.
  • Your right to erasure. You can ask us to delete or remove your personal data in some circumstances, such as where we no longer need it or where you withdraw your consent (where applicable). If we have shared your personal data with others, we will let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we will also tell you who we have shared your personal data with so that you can contact them directly.
  • Your right to restrict processing. You can ask us to “block” or suppress the processing of your personal data in certain circumstances such as where you contest the accuracy of that personal data or you object to us processing it for a particular purpose. This may not mean that we will stop storing your personal data but, where we do keep it, we will tell you if we remove any restriction that we have placed on your personal data to stop us processing it further. If we’ve shared your personal data with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
  • Your right to data portability. You have the right, in certain circumstances, to obtain personal data you have provided to us (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer it to your chosen third party.
  • Your right to object. You can ask us to stop processing your personal data, and we will do so, if we are: (i) relying on our own or someone else’s legitimate interest to process your personal data, except if we can demonstrate compelling legal grounds for the processing; or (ii) processing your personal data for direct marketing purposes.
  • Your rights in relation to automated decision-making and profiling. You have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for the entering into, or the performance of, a contract between you and us.
  • Your right to withdraw consent. If we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time. You can exercise your right of withdrawal by contacting us using our contact details in the How to contact us section or by using any other opt-out mechanism we may provide, such as an unsubscribe link in an email.
  • Your right to lodge a complaint with the supervisory authority. If you have a concern about any aspect of our privacy practices, including the way we have handled your personal data, please contact us using the contact details provided in the How to contact us section. You can also report any issues or concerns to a national supervisory authority in the Member State of your residence or the place of the alleged infringement. You can find a list of contact details for all EU supervisory authorities at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. As we are incorporated in the United Kingdom, our regulatory authority is the Information Commissioner’s Office (“ICO”). Contact details for the ICO can be found on its website at https://ico.org.uk.

10. Information security

We are committed to keeping personal data secure and we have implemented information security policies, rules and technical measures to protect personal data under our control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss. In addition, our personnel and data processors (third parties that process personal data on our behalf) are obliged to respect the confidentiality of the personal data relating to users of our Websites and those who purchase our Services.

11. How long we keep your personal data

We will only keep your personal data for as long as necessary for the purposes set out in this Privacy Notice. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

If any personal data is only useful for a short period (e.g. for a specific activity, promotion or marketing campaign), we will not retain it for longer than the period for which it is used by us.

If you have opted out of receiving marketing communications from us, we will need to retain certain personal data on a suppression list indefinitely so that we know not to send you further marketing communications in the future. However, we will not use this personal data to send you further marketing unless you subsequently opt back in to receive such marketing.

12. Personal data of minors

Our Websites and Services are not targeted at minors (individuals under the age of 18). However, due to the nature of our business and the Services we provide, we may from time to time process personal data relating to minors. Where we do process personal data of minors, we will comply with all applicable laws and regulations relating to that processing.

13. If you fail to provide your personal data

Where we are required by law to collect personal data, or we need to collect personal data under the terms of a contract we have with you, and you fail to provide that personal data, we may not be able to fulfil any obligations that we owe to you, and we may not be able to enter into or perform a contract with you. This may apply where you do not provide personal data that we need to provide our Services, or to process an application to register an account. In these circumstances, we may have to cancel the provision of the relevant Services to you, in which case we will notify you.

14. International transfers of personal data

We may transfer personal data to third parties (as described in the Sharing personal data section) that are located in countries that do not have data protection laws that protect personal data to the same standard as the GDPR. These third countries may not give you the same rights as under the GDPR in relation to your personal data and may not have a data protection supervisory authority to help you if you have any concerns.

When transferring personal data to third countries, we usually rely on one of the following:

  • Adequacy decisions: We may transfer your personal data to countries or organisations that have been deemed to provide an adequate level of protection for personal data by the European Commission, the UK Government, or any other relevant government body. This may include transfers to organisations that participate in the Data Privacy Framework listed here.
  • Contractual safeguards: We may use specific contracts approved by the European Commission, the UK Government, or any other relevant governmental body to safeguard personal data. The contracts that we usually rely on are referred to as “Standard Contractual Clauses” or “SCCs”, although we may from time to time use other approved mechanisms. To find out more about the SCCs we use, please see here (EU) and here (UK). You can also contact us using the contact details set out in the How to contact us section.

15. Advertising and Social Media Partners

This section provides information about third parties that may be a controller of your personal data in relation to certain activities described in this Privacy Notice, meaning that the third party may (alone or jointly with us) determine how and why they will use your personal data.

Meta (Facebook and Instagram)

We are joint controllers with Meta in respect of Online Advertising Activities, where those activities involve advertising to you on platforms owned and operated by Meta (including Facebook and Instagram). When we refer to Meta, we mean Meta Platforms, Inc. if you are a UK resident, and Meta Platforms Ireland Limited if you are an EU resident.

We and Meta have entered into Meta’s Controller Addendums (available here (EU) and here (UK)) to determine our and Meta’s responsibilities for compliance with data protection obligations in relation to our Online Advertising Activities. We and Meta are each responsible for providing information about how your data might be processed in connection with these activities in our privacy notices. Meta has primary responsibility for giving effect to your data subject rights (see the Your rights section of this Privacy Notice) in respect of these activities.

In addition, where we receive insights from Meta for the purposes described in the Social media pages and insights section, we are joint controllers with Meta in relation to Meta’s processing of their Social Media Data to provide those insights to us. For more information, please see Meta’s Information about Page Insights Data here.

For further information about how Meta uses your personal data in connection with these activities, including the legal basis Meta relies on and the ways to exercise your data subject rights in respect of Meta’s processing, please see Meta’s Privacy Policy at https://www.facebook.com/about/privacy.

Google

Google has published information about how it uses personal data in connection with its advertising services here. In addition, Google provides further information about how it uses personal data in connection with online advertising in its Privacy Policy and here. You can also use Google’s Ad Settings to manage your online advertising preferences.

Google (YouTube)

We receive YouTube insights and Google Analytics from Google for the purposes described in the Social media pages and insights section. Google processes Social Media Data to provide those insights to us. For information about how Google uses your personal data to provide insights, including the legal basis Google relies on and the ways to exercise your data subject rights in respect of Google’s processing, please see Google’s Privacy Policy here.

LinkedIn

LinkedIn Ireland Unlimited Company (“LinkedIn”) is a controller of your personal data when our Online Advertising Activities involve advertising to you on LinkedIn. LinkedIn has published information about how it uses your personal data in connection with its advertising services, including how you can opt-out of LinkedIn’s interest-based advertising, here and here.

In addition, where we receive insights from LinkedIn for the purposes described in the Social media pages and insights section, we are joint controllers with LinkedIn in relation to LinkedIn’s processing of their Social Media Data to provide those insights to us.

For further information about how LinkedIn uses your personal data in connection with these activities, including the legal basis LinkedIn relies on and the ways to exercise your data subject rights in respect of LinkedIn’s processing, please see LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy.

Apple Music

Apple is a controller of your personal data when our online advertising activities involve advertising to you on Apple Music and Apple Music Classical. Apple has published information about how it uses your personal data in connection with its advertising services, including how you can opt-out of Apple’s interest-based advertising, here.

Spotify

Spotify is a controller of your personal data when our online advertising activities involve advertising to you on Spotify. Spotify has published information about how it uses your personal data in connection with its advertising services, including how you can opt-out of Spotify’s interest-based advertising, here.

Deezer

Deezer is a controller of your personal data when our online advertising activities involve advertising to you on Deezer. Deezer has published information about how it uses your personal data in connection with its advertising services, including how you can opt-out of Deezer’s interest-based advertising, here.

Amazon Music

Amazon Music is a controller of your personal data when our online advertising activities involve advertising to you on Amazon Music. Amazon Music has published location-specific information about how it uses your personal data in connection with its advertising services, including how you can opt-out of Amazon Music’s interest-based advertising, here.

TIDAL

TIDAL Music AS is a controller of your personal data when our online advertising activities involve advertising to you on TIDAL. TIDAL has published information about how it uses your personal data in connection with its advertising services, including how you can opt-out of TIDAL’s interest-based advertising, here.

SoundCloud

SoundCloud is a controller of your personal data when our online advertising activities involve advertising to you on SoundCloud. SoundCloud has published information about how it uses your personal data in connection with its advertising services, including how you can opt-out of SoundCloud’s interest-based advertising, here.

16. Processing Activities Schedule

This Schedule sets out detailed information about the purposes for which we process the personal data described in the Personal data we control section and the lawful bases we rely on to do so.

This Schedule is split into the following sections:

  1. Providing our Websites and carrying out other online activities
  2. Supplying Services and running events
  3. Customer Services, Feedback and Relationship Management
  4. Insight and Analysis, Data Improvement and Personalisation
  5. Online Advertising Activities
  6. Other Advertising and Marketing Activities
  7. Business Administration, Compliance and Legal Affairs
  8. Recruitment

1. Providing our Websites and carrying out other online activities

Purpose and Personal Data ProcessedDescriptionLawful Basis

Delivery of our Websites

Personal data: Technical Data

To provide our Websites to you, including ensuring that we are showing you the correct notices and information, and recording your preferences in relation to our Cookies.

Essential Cookies are used on our Websites for this purpose. Please see the Cookies section for further information.

  • Legitimate interests – to provide our Websites effectively.
  • Compliance with a legal obligation.
  • Performance of a contract.

Support, maintenance and security

Personal data: Identity Data, Contact Data, Technical Data, Registration Data

To administer and protect our Websites and users (including troubleshooting, fixing errors, analysis, testing, system maintenance, support, and security, including for fraud monitoring and prevention).

To respond to user enquiries/offer support to users. We may use your information to respond to your enquiries and solve any potential issues you might have with the use of our Websites.

To request feedback and to contact you about your use of our Websites.

Essential Cookies are used on our Websites for this purpose. Please see the Cookies section for further information.

  • Legitimate interests – to run our business and to protect us and our users from harm.
  • Compliance with a legal obligation.

Provision of location-based and other special features

Personal data: Technical Data

To provide you with location-based and other special features through our Websites by accessing your device’s location or other functions. For example:

  • to send push notification reminders, alerts, updates and other information;
  • to use your location when you use certain parts of our Websites that provide location-based functionality;
  • to enable functionality that requires access to your device’s camera or microphone, photo and videos, or contacts. You will be asked if you want to share this access before using these functions for the first time.

Consent through permissions granted on your device.

Consent can be updated or withdrawn at any time through your browser or device settings, as follows:

  • In relation to our Websites, you can change permissions through your browser settings. For example, in Chrome go Settings > Privacy and Security > Site settings. Please note that other browsers may differ.

Set up and manage user accounts

Personal data: Identity Data, Contact Data, Communications Data, Registration Data, Technical Data

To set up and manage user accounts, including to verify users when logging into accounts and secure areas of our Websites, which may be required to access to certain features, functionality, or benefits of our Websites.

To contact users about their accounts.

  • Performance of a contract.
  • Legitimate interests – to provide secure and effective access to the Websites.

Site development and improvement

Personal data: Usage Data, Technical Data

To develop and improve our Websites, including content that we make available, through insight and analysis that we carry out in relation to the use of our Websites as described in the Insight and analysis section.

Non-essential Cookies are used on our Websites for this purpose. Please see the Cookies section for further information.

  • Consent – where non-essential Cookies are used on our Websites.
  • Legitimate interests – to improve and enhance our Websites (where non-essential Cookies are not used).

Personalisation of our Websites

Personal data: Usage Data, Technical Data, Profile Data

To personalise user experiences when using our Websites, such as showing our users content and Websites features that we think may be of interest or relevance to our users.

Non-essential Cookies are used on our Websites for this purpose. Please see the Cookies section for further information.

In addition, activities described in the Insight and Analysis, Data Improvement and Personalisation section may be relied on to carry out this activity.

  • Consent – where non-essential Cookies are used on our Websites.
  • Legitimate interests – to give users of our Websites the best experience (where non-essential Cookies are not used).

2. Supplying Services and running events

Purpose and Personal Data ProcessedDescriptionLawful Basis

Supply of our Services

Personal data: Identity Data, Contact Data, Transaction Data, Professional Data, Technical Data

To register you as a customer (as an individual or corporate customer).

To process and deliver your order for our Services, including to manage and collect any fees or charges from you (or your organisation).

To maintain our customer databases.

To keep a record of transactions for our Services.

To process and deliver selected campaigns.

  • Performance of a contract.
  • Legitimate interests – to provide the Services in an effective, safe and efficient way, and to exercise our rights in relation to transactions, including to receive payment of monies owed to us.
  • Compliance with a legal obligation.

Returns and refunds

Personal data: Identity Data, Contact Data, Transaction Data

To process any return or cancellation that you request in relation to an order for any goods or Services that you purchase from us.

  • Performance of a contract.
  • Legitimate interests – to help with your return or cancellation, provide a good standard of service and improve our customer services.

Advertising campaigns – managing talent and content

Personal data: Identity Data, Contact Data, Professional Data, Profile Data, Image Data

To select talent that will feature in an advertising campaign.

To create and use content (including content featuring talent) in relation to an advertising campaign.

To process marketing communications.

To deliver personal data to the relevant artist/creator with consent.

Legitimate interests – to provide our Services effectively, and our client’s legitimate interest to promote its business.

Where we process special category data in connection with this purpose that was collected from you directly, we will only do so with your explicit consent. Where we obtain this special category from publicly available sources, we will rely on the fact that the individual made such information manifestly public. Where we do this on behalf of our clients as a data processor, we do not require a legal basis for such processing.

Administration of Events

Personal data: Identity Data, Contact Data, Profile Data, Image Data, Professional Data, Usage Data, Technical Data

To register you as a visitor or exhibitor at one of our events. If you are a speaker or performer at our event, we may publish your name in association with the event.

To provide you with important information about our events.

To facilitate your travel to our events, if you are a speaker, performer or exhibitor.

To make other logistical arrangements with you in connection with your attendance at the event (e.g. in respect of your performance or exhibitor space).

Photographs and video footage may be taken at our events and published for promotional and advertising material.

We may send you SMS for operational purposes and the smooth running of an event, e.g. to inform of a travel update.

  • Performance of a contract.
  • Legitimate interests – to provide information about speakers at an event.
  • Legitimate interests – to promote our events. You can opt out of your image being used at any time.
  • Legitimate interests – to provide necessary information about our events.
  • Explicit consent (in respect of any special category data).

Event insight and engagement

Personal data: Identity Data, Contact Data, Technical Data, Usage Data, Professional Data

To gain insights about attendance and engagement at our in-person events, including to monitor attendance and to manage and optimise our events. These insights will only be used to generate aggregate information about our event attendees to assist with planning future events and will not be used to identify or target any individual attendee.

  • Consent (where required).
  • Legitimate interests – to measure the success of our events and to assist in future event planning, and to help attendees network more effectively and get the most out of our events.

3. Customer Services, Feedback and Relationship Management

Purpose and Personal Data ProcessedDescriptionLawful Basis

Customer services and general enquiries

Personal data:

  • Identity Data
  • Contact Data
  • Transaction Data
  • Profile Data
  • Professional Data
  • Communications Data

To manage and respond to any enquiry that you submit to us.

Legitimate interests – to help with your enquiry, provide a good standard of service and improve our customer services.

Social media pages and insights

Personal data:

  • Identity Data
  • Contact Data
  • Social Media Data

To publish and link pages on social media (including LinkedIn, Spotify, Apple YouTube or Instagram) relating to our Websites, Services and business. These pages help social media users discover and engage with us, and help us promote, and keep social media users updated about, our business.

To gain insight into our social media pages, we may receive insights from the third-party provider of the social media platform about how users interact with our pages. We receive this information so that we can understand how many people saw our social media content, which content people are engaging with the most, actions users are taking on our pages (such as whether they are visiting our Websites after visiting our pages, clicking on any content), and the demographics (such as age, gender and location) of those that view our social media pages. These insights are derived from personal data that the third-party provider of the social media platform processes and are only provided to us in the form of anonymous and aggregate statistics – we do not receive your personal data or any information that we can use to identify you when we receive these insights.

In addition, we may also see who has ‘liked’ or shared content that we post on social media (including when you interact with any ‘like’ or similar embedded feature on our Websites).

Note, we may be joint controllers with the relevant social media platform in relation to the insights that we receive. For more information, please see the Advertising and Social Media Partners section.

Legitimate interests – to improve our online presence and promote our Websites and Services via social media.

Legitimate interests – to improve the content that we post on social media, including to ensure that our content is relevant to persons that we would like to engage with on social media.

Managing our relationship with you or the organisation you work for

Personal data:

  • Identity Data
  • Contact Data
  • Profile Data
  • Transaction Data
  • Professional Data
  • Communications Data

To manage our relationship with you or the organisation you work for (where your organisation is a customer of, or supplier to, us), including to contact you about any matter concerning an order for our Services that you have placed, to contact our suppliers about goods or services that we have purchased or may purchase from them, and to provide you with other important information (including about changes to our terms and conditions or this Privacy Notice).

  • Performance of a contract.
  • Legitimate interests – to provide those that we work with the best experience and to ensure effective business administration.
  • Legitimate interests – to effectively manage our supply chains.
  • Compliance with a legal obligation – to comply with our consumer rights and privacy obligations.

Survey and feedback

Personal data:

  • Identity Data
  • Contact Data
  • Transaction Data
  • Profile Data
  • Communications Data

To help us to monitor and improve our Websites and Services , and to assist with the selection of future services lines and to train our personnel, we may carry out surveys or ask you for feedback.

Legitimate interests – to improve our Websites and our Services and provide them in an effective way.

4. Insight and Analysis, Data Improvement and Personalisation

Purpose and Personal Data ProcessedDescriptionLawful Basis

Insight and analysis

Personal data:

  • Technical Data
  • Usage Data
  • Profile Data

To carry out insight and analytics, including:

  • to carry out insight and analytics in relation to our Websites, including counting user visits to our Websites, combining this with general insights about our users’ interests and browsing habits so that we can understand the type of user that our Websites appeals to, and learning what content and features of our Websites are most popular – these insights and analytics are used for the purposes described in the Site development and improvement section;
  • to count the open rate and measure the effectiveness of our marketing emails;
  • to measure the effectiveness of our online advertising, including to generate aggregate statistics that do not identify individuals (for example, counting how many people viewed or clicked on our ads and were redirected to our Websites through one of our ads);
  • to gain general insights about customers and their purchase or use of our Services, so that we can develop future services lines; and
  • to analyse the success of our events, including assessing sign-up rates, monitoring social media, online forums, and other online content, and collecting and analysing event feedback.

Some of the insights and analysis that we gather may be used by us to support the activities described in the Personalisation section.

Non-essential Cookies are used our Websites for this purpose. Please see the Cookies section for further information.

Legitimate interests – to develop and improve our Websites and our Services and to support other activities described in this Privacy Notice (where non-essential Cookies are not used).

Consent (where non-essential Cookies are used).

Data improvement

Personal data:

  • Identity Data
  • Contact Data
  • Profile Data

To improve the quality of our data through the use of services and the data of third-party data suppliers, including to:

  • enrich the data we hold about our customers and users (for example, adding data to information that we already hold);
  • carry out data cleansing and tracing (for example, identifying redundant records and updating records);
  • segment our customers and users (for example, identifying target sub-groups of our customers or users).

Some of activities set out in this section, may be used by us to support the activities described in the Personalisation section.

Legitimate interests – to ensure the effective and efficient use of data and to support other activities described in this Privacy Notice.

Compliance with a legal obligation.

Personalisation

Personal data:

  • Technical Data
  • Usage Data
  • Profile Data
  • Advertising Partner Data

To tailor the information and experiences provided to our users and customers, so that they are more likely to be of interest and relevance, including in relation to:

  • user experiences on our Websites as described in the Personalisation of our Websites section;
  • our marketing communications described in the Marketing communications section;
  • our online advertising described in the Online Advertising Activities section.

The activities described in the Insight and analysis and Data improvement sections may be relied on to carry out this activity.

Non-essential Cookies are used our Websites for this purpose. Please see the Cookies section for further information.

Legitimate interests – to give users and customers the best experience, and to support our marketing and advertising activities, where non-essential Cookies are not used.

Consent (where non-essential Cookies are used).

5. Online Advertising Activities

We may share your personal data with, or otherwise use the services of, third-party social media and advertising technology companies (“Advertising Partners”), so that we can advertise our business, including our Websites and our Services, on websites, apps, and other digital platforms, including social media, that are operated by third parties (“Third-party Sites”).

Our online advertising activities are explained in more detail below. If you see one of our ads, this may be the result of one or a combination of these activities.

Please note:

  • Some of the advertising that you see based on these activities may be personalised to you. Please see the Personalisation section for more information about how we personalise our online advertising.
  • We may be joint controllers with our Advertising Partners, or our Advertising Partners may be independent controllers, in relation to the activities described in this section. For more information, please see the Advertising and Social Media Partners section.
Purpose and Personal Data ProcessedDescriptionLawful Basis

‘Custom Audience’ advertising (also known as ‘Custom Match’ advertising)

Personal data:

  • Contact Data
  • Usage Data (identifiers only)
  • Advertising Partner Data

To enable our Advertising Partners to ‘match’ identifiers which we have obtained (for example, your email address or your device’s advertising identifier) with identifiers that are available to our Advertising Partners, including those relating to registered users of Third-party Sites.

The matched identifiers are known as a ‘custom audience’. We and our Advertising Partners create this custom audience so that our ads will be displayed to individuals whose identifiers are included in the custom audience when those individuals use the relevant Third-party Site (e.g. to show you an ad on your Facebook newsfeed).

Our custom audience may also be used to exclude individuals from seeing our ads (because we want to show ads to people who are not our existing customers or users).

Consent (in relation to data that we share with our Advertising Partners).

Legitimate Interests – to increase the effectiveness of our advertising (to the extent we are a controller of Advertising Partner Data).

‘Lookalike Audience’ advertising

Personal data:

  • Contact Data
  • Usage Data (identifiers only)
  • Advertising Partner Data

To ask our Advertising Partners to find other people that share similar interests and characteristics to the individuals who are in our custom audience (as described in the ‘Custom Audience’ advertising section), so that we can show our ads to those other individuals when they use Third-party Sites.

This activity is known as ‘lookalike audience’ advertising because the individuals who see our ads ‘look like’ the individuals who form part of our custom audience.

For example, our Advertising Partners may use their data to identify that 70% of our custom audience are men aged between 20-25. We then ask our Advertising Partners to show our ads to other men aged between 20-25.

Our Advertising Partners do not provide their Advertising Partner Data to us, but they may provide us with aggregate insights about the individuals who are shown our ads (for example, their age, gender, approximate location and interests).

Legitimate Interests – to increase the effectiveness of our advertising by finding new people who we may wish to advertise to.

See the ‘Custom Audience’ advertising section to understand the lawful basis we rely on to create our custom audience.

Advertising on Third-party Sites using Cookies and our Advertising Partners’ tools

Personal data:

  • Technical Data
  • Usage Data
  • Advertising Partner Data

To display ads for our Services or that promote our business to you when you visit Third-party Sites, including to:

  • recognise you as a user of our Websites and to display ads for Services that you have viewed on our Websites; and
  • reach users of Third-party Sites who meet certain criteria determined by us or our Advertising Partners using selection tools made available by our Advertising Partners (for example, users who are likely to be men or are aged between 20-25).

Non-essential Cookies are used on our Websites to recognise you as a user of our Websites. Please see the Cookies section for further information.

In addition, our Advertising Partners may use non-essential Cookies on Third-party Sites, as well as Advertising Partner Data that they have independently collected, for this purpose. We are not responsible for these technologies and you should separately review the information provided to you on the Third-party Site about these technologies.

Consent (where non-essential Cookies are used on our Websites).

Legitimate interests – to increase the effectiveness of our advertising by displaying our ads to individuals who have previously shown an interest in our Services, or our business, or are most likely interested in our ads based on criteria determined by us and our Advertising Partners (where other personal data is used).

Measuring the effectiveness of our advertising

Personal data:

  • Usage Data
  • Technical Data
  • Advertising Partner Data

To determine how successful our other advertising activities described in this Online Advertising Activities section have been, and to understand who has viewed or interacted with our ads.

We may do this to:

  • generate insight and analysis about our advertising activities, as described in the Insight and analysis section; and
  • personalise experiences, as described in the Personalisation section.

Non-essential Cookies are used on our Websites to recognise you as a user of our Websites. Please see the Cookies section for further information.

In addition, our Advertising Partners may use non-essential Cookies on Third-party Sites, as well as Advertising Partner Data that they have independently collected, for this purpose. We are not responsible for these technologies and you should separately review the information provided to you on the Third-party Site about these technologies.

Consent (where non-essential Cookies are used on our Websites).

Legitimate interests – to understand the type of advertising and marketing content that is most likely to be of appeal (where other personal data is used).

Legitimate interests – to increase the effectiveness of our advertising by collecting information about which of our ads an individual has responded to, so that we can show that individual similar ads, or other ads that may be of interest to them, in the future.

6. Other Advertising and Marketing Activities

Purpose and Personal Data ProcessedDescriptionLawful Basis

Marketing communications

Personal data:

  • Identity Data
  • Contact Data
  • Communications Data

To promote our Websites, our Services, or to otherwise promote our business (including events), via email, telephone or post.

To ensure that the marketing content that is provided to you is more likely to be of interest, our marketing communications may be personalised. For more information, please see the Personalisation section.

Consent (where marketing via email).

Legitimate interests (where marketing via email, telephone or post) – to grow our business.

You can unsubscribe from our email marketing by clicking the ‘unsubscribe’ link in our emails. You can also ask us to stop using your personal data for our direct marketing activities by contacting us using the details set out under the How to contact us section.

Third-party marketing (lead generation)

Personal data:

  • Identity Data
  • Contact Data
  • Profile Data
  • Communications Data

To share your personal data with third-party partners and event sponsors to enable them to contact you in relation to an event and to send marketing to you in relation to their products and services (including artists/creators).

Consent.

Legitimate interests – to provide marketing services to third parties and to help those third parties grow their business, and for our third-party partners’ and event sponsors’ legitimate interests to get the most out of an event and to promote their business to you.

7. Business Administration, Compliance and Legal Affairs

Purpose and Personal Data ProcessedDescriptionLawful Basis

Business administration and legal compliance

Personal data:

  • Identity Data
  • Contact Data
  • Registration Data
  • Professional Data
  • Transaction Data
  • Profile Data
  • Usage Data
  • Technical Data
  • Social Media Data
  • Advertising Partner Data
  • Communications Data
  • Recruitment Data

To comply with our legal obligations.

To enforce our legal rights or defend against potential legal claims.

To protect the rights of third parties.

To facilitate a business transition such as a merger, reorganisation, acquisition by another company, or sale of any of our assets.

Legitimate interests – to operate our business effectively.

Compliance with a legal obligation.

Security

Personal data:

  • Identity Data
  • Contact Data
  • Image Data

To implement and manage physical security measures.

Security measures are in place at our premises, including CCTV and building access controls. There are signs in place showing that CCTV is in operation. The images captured are securely stored and only accessed on a need-to-know basis (e.g. to look into an incident). CCTV recordings are typically automatically overwritten after a short period of time unless an issue is identified that requires investigation (such as a theft).

Visitors to our premises may be required to sign in on arrival and where that is the case, we will keep a record of visitors for a short period of time. Our visitor records are securely stored and only accessible on a need-to-know basis (e.g. to look into an incident).

Legitimate interests – to keep our premises secure and provide a safe environment for our personnel and visitors to our premises.

Health, Safety and Incidents

Personal data:

  • Identity Data
  • Contact Data
  • Profile Data
  • Incident Data

To report or manage a health and safety or other type of incident that occurs at our premises, or at one of our events.

Compliance with a legal obligation.

Legitimate interests – to effectively manage an incident, including to assess our handling of an incident to help us improve our processes.

Necessary to protect vital interests.

8. Recruitment

References in this section to employment, work (and similar expressions) include any arrangement we may have under which an individual applies for such work or services. By way of example, when we mention an “employment contract”, that includes a contract under which you provide us with services; when we refer to ending your potential employment, that includes terminating a contract for services. We use the word “you” to refer to anyone within the scope of this Privacy Notice.

Processing special personal data

Processing special personal data about you may be necessary in your jurisdiction (for example, processing personal data relating to diversity monitoring). If we process your special personal data, we will also make sure that one or more of the grounds for processing special personal data applies. In outline, these include:

  • Processing being necessary for the purposes of your or our obligations and rights in relation to employment in so far as it is authorised by law or collective agreement, e.g. for providing a healthy and safe working environment;
  • Processing relating to data about you that you have made public;
  • Processing being necessary for the purpose of establishing, making or defending legal claims;
  • Processing being necessary for provision of health care or treatment, medical diagnosis, and assessment of your working capacity;
  • Processing for equality and diversity purposes to the extent permitted by law; or
  • Processing is for the purposes of preventing or detecting unlawful acts and complying with our regulatory obligations or is in the public interest.

Further information on the data we process and our purposes

This Privacy Notice outlines the purposes for which we process your personal data. More specific information on these, descriptions, and the grounds on which we process data are in the table below.

The examples in the table cannot, of course, be exhaustive. For example, although the table does not mention data relating to criminal offences, if we were to find out that someone applying to work for us was suspected of committing a criminal offence, we might process that information if necessary for our purposes. If necessary, we will also require criminal background checks for certain roles – for example those working in financial roles or with minors, subject to applicable law.

Purpose and Personal Data ProcessedDescriptionLawful Basis

Recruitment

Personal data:

  • Identity Data
  • Contact Data
  • Professional Data
  • Recruitment Data
  • Special Personal Data

To assess your suitability for any of our positions that you apply for (or future positions for which we think you may be suitable).

To communicate with you about the recruitment process.

To keep records about our recruitment process.

To comply with our legal and regulatory obligations in relation to recruitment.

To review our equal opportunity profile in accordance with applicable legislation.

To conduct background checks we may make to verify information provided and any information connected with your right to work. This may include as necessary for your role (and subject to legislation in your jurisdiction) checks verifying your job history, qualifications and previous remuneration as well as credit, criminal record, social media and adverse media checks.

If necessary, to process information concerning your health, any disability and in connection with any adjustments to working arrangements.

Legitimate interests – to ensure that we can make informed recruitment decisions.

Performance of a contract or to take steps at your request prior to entering into a contract.

Compliance with a legal obligation.

Administering our recruitment process

Personal data:

  • Contact Data
  • Identity Data
  • Recruitment Data

To evaluate your experience and qualifications against the requirements of the position you are applying for.

To administer our online careers webpage.

To communicate with you in respect of any offer of employment we choose to make and providing you with information about our onboarding process.

Legitimate interests – to effectively manage the recruitment process and ensure suitable candidates are selected.

Performance of a contract or to take steps at your request prior to entering into a contract.

Compliance with a legal obligation.

Entering into a contract with you (if you are made an offer by us)

Personal data:

  • Contact Data
  • Identity Data
  • Recruitment Data

To prepare the proposed contract terms, including your hours and working patterns, and your pay and benefits, such as your participation in pension arrangements, life and medical insurance; and any bonus or share schemes or other similar schemes.

Legitimate interests – to have an accurate record of your employment contract for its performance and variation.

Performance of a contract or to take steps at your request prior to entering into a contract.

Compliance with a legal obligation.

Contacting you or others on your behalf

Personal data:

  • Contact Data
  • Identity Data
  • Incident Data

To communicate with you about your application and the recruitment process, including application status updates, interview and assessment scheduling, logistics and travel details, and requests for information or documents (such as right-to-work evidence).

Where appropriate, to contact individuals or organisations you have identified or authorised on your behalf, such as referees, recruitment agencies, or background-check providers, to obtain references or complete pre-employment screening.

In case of emergency, to contact your nominated emergency contact or others, such as your next of kin and/or dependents.

Legitimate interests – the ability to contact you, or others on your behalf in an emergency.

Performance of a contract or to take steps at your request prior to entering into a contract.

Compliance with a legal obligation.

Payroll and payroll administration (if you are made an offer by us)

Personal data:

  • Contact Data
  • Identity Data
  • Recruitment Data

To set up and run payroll and related payments, including collecting information on your bank account; pension contributions; tax; and national or social insurance number or other government issued identifier.

Legitimate interests – the ability to carry out payroll, general HR and business administration in an efficient manner, and to plan around your absence where necessary.

Performance of a contract or to take steps at your request prior to entering into a contract.

Compliance with a legal obligation.

Financial planning and budgeting

Personal data:

  • Recruitment Data

To propose a salary and (if applicable) envisaged bonus levels.

Legitimate interests – the ability to carry out effective financial planning and budgeting for our business.

Physical and premises security

Personal data:

  • Image Data
  • Incident Data

To manage building access and visitor registration.

To issue and monitor access cards or codes.

To operate CCTV and other security monitoring systems in accordance with local law.

To maintain entry/exit and incident logs.

To co-ordinate emergency response, health and safety, and evacuation procedures.

Legitimate interests – the ability to keep our locations secure, provide a safe environment for our personnel.

Compliance with a legal obligation.

Providing information to third parties in connection with transactions that we contemplate or carry out

Personal data:

  • Recruitment Data
  • Identity Data
  • Contact Data

To provide a party to a transaction such as a prospective purchaser, seller or outsourcer information on any offer made to you and your proposed contract and other employment data that may be required.

Legitimate interests – to provide information to third parties in connection with transactions related to our business that we contemplate or carry out.

Monitoring of diversity and equal opportunities (if you choose to provide it)

Personal data:

  • Special Personal Data

To inform diversity monitoring initiatives and for equality of opportunity monitoring purposes only using aggregated data.

Such data will be aggregated.

Please note we may share aggregated and anonymised diversity statistics with regulators if formally required / requested.

Legitimate interests – to ensure that we have an equal and diverse workforce.

Necessary for reasons of substantial public interest.

Disputes and legal or regulatory matter or proceedings

Personal data:

  • Identity Data
  • Contact Data
  • Image Data
  • Incident Data
  • Professional Data
  • Recruitment Data
  • Special Personal Data
  • Any other information relevant or potentially relevant to a dispute or legal or regulatory matter or proceeding affecting us

To prevent, prepare for, manage, and resolve disputes.

To establish, exercise, or defend legal claims.

To respond to complaints or inquiries.

To comply with or assert our rights under applicable laws, regulations, or proceedings affecting us.

Legitimate interests – the ability to respond to and defend against legal claims.

Compliance with a legal obligation.

Please note that if you accept an offer from us, we will process further information as part of the employment relationship. We will provide you with our Workplace Privacy Notice as part of the on-boarding process.

Who gets to see your data?

Internal use

Where necessary and as set out in this Privacy Notice, your personal data will be disclosed to relevant managers, HR and administrators for the purposes of your application as mentioned in this document. We will also disclose this to other members of our group where necessary for decision making regarding your application – this will depend on the type of role you are applying for.

External use

We will only disclose your personal data outside our company group if disclosure is consistent with a ground for processing on which we rely and doing so is lawful and fair to you.

We will disclose your data if it is necessary for our legitimate interests as an organisation or the interests of a third party (but we will not do this if these interests are over-ridden by your interests and rights in particular your right to privacy). Where necessary, we will also disclose your personal data if you consent, where we are required to do so by law and/or in connection with criminal or regulatory investigations.

Specific circumstances in which your personal data may be disclosed include (without limitation):

  • Disclosure to organisations that process data on our behalf such as our payroll service, insurers and other benefit providers, our bank and organisations that host our IT systems and data. This would normally occur if you accept an offer from us and would be carried out as part of the on-boarding process;
  • To third party recruitment consultants and similar businesses (including online recruitment portals) as a part of the recruitment process;
  • Disclosure of aggregated and anonymised diversity data to relevant regulators as part of a formal request.

Retaining your personal data – more information

If you are successful in becoming employed by us, although there is no specific period for which we will keep your personal data, we will not keep it for longer than is necessary for our purposes. In general, we will keep your personal data for the duration of your employment and for a period afterwards. In considering how long to keep it, we will take into account its relevance to our business and your employment either as a record or in the event of a legal claim.

If you are unsuccessful in gaining employment with us, we will likely keep your personal data for up to 12 months after informing you that you were unsuccessful.

If your data is only useful for a short period (for example, CCTV footage is kept for 30 days) we will delete it.