1. Introduction & Who We Are Prime Booth Ltd (“we”, “us”, “our”) is committed to protecting your privacy under UK GDPR, the Data Protection Act 2018, and PECR. Our registered office is 62 Springfield Road, Hemel Hempstead, HP25EH, and we’re a company registered in England and Wales. This policy explains how we collect, use, store, and protect personal data collected through our website and services.

2. Data We Collect
Enquiry/Booking data: Name, email, phone number, event date, venue details—provided when you submit a booking or enquiry form.
Usage data: IP address, browser type, cookies, and analytics data (e.g., via Google Analytics) to monitor and improve our site.
Event data: Images and videos captured during events—used with your consent per our T&Cs.

3. Lawful Basis for Processing
We rely on:
Contractual necessity: to deliver your booked services.
Legitimate interests: to maintain our website, improve our services, and comply with tax/insurance obligations.
Consent: where required, for marketing and image use.

4. How We Use Your Data
To process your booking and confirm event details.
To communicate with you about your event and follow-up.
For internal business use (e.g., invoicing, tax, compliance).
For marketing purposes (only with explicit consent).
To analyse website traffic and improve user experience.
To share and publish event images (per signed rights in T&Cs).

5. Cookies & Website Analytics
We use cookies to enhance user experience and analyse site traffic through tools like Google Analytics, which collects non-identifiable, aggregate data. You can manage your cookie preferences via your browser settings.

6. Data Sharing
We never sell your data. We may share data with:
Service providers (e.g., cloud storage, email platforms) who act as our processors.
Legal or regulatory authorities when required.
Third parties only where legally necessary (e.g., in response to court orders).

7. Data Storage & Security
Data is stored on secure, encrypted servers (UK/EU-based where possible).
Access is limited to authorised staff only.
We use password protection, encryption, and regular backups.
For event images, retention period is 3 months from event date unless otherwise agreed. Then securely deleted.

8. Your Rights
Under GDPR, you have the right to:
Access, correct, port, or erase your personal data.
Restrict or object to processing.
Withdraw consent for marketing at any time.
Lodge a complaint with the UK ICO.
To exercise these rights, contact us at:
Email: hello@primebooth.co.uk
Post: Prime Booth Ltd, 62 Springfield Road, HP25EH, UK

9. Data Retention
Enquiry/Booking data: up to 6 years for legal and tax compliance.
Marketing list: retained until OptOut.
Analytics data: retained as non-identifiable aggregate reports.

10. Children’s Data
We do not knowingly collect data from children under 13 unless consent is obtained from a parent/guardian.

11. ThirdParty Links
Our website may link to other websites. We are not responsible for their privacy policies or practices.

12. Policy Updates
We may update this policy—each version is dated. The most current version supersedes previous ones. We recommend reviewing it periodically.