Norfolk Events Ltd Data Protection Notice
Effective Date: 19 03 2025, version 1.0
1. Introduction
Norfolk Events Ltd (referred to as “we” “our” or “us”) is committed to protecting the privacy and security of your personal data and we have developed this data protection notice (“notice”) to inform you of the personal data we collect, what we do with your personal data, what we do to keep it secure as well as the Rights you have over your personal data.
Throughout this notice we refer to data protection legislation which includes the UK GDPR and Data Protection Act 2018, and other applicable laws including (but not limited to) the EU GDPR 2016, the Privacy Electronic Communication (EC Directive) Regulations (“PECR”) 2003 and the e-Privacy Directive. This also includes any new or replacement legislation which may come into effect from time to time.
Our contact details are as follows:
Post:
68 Sam Smith Way
Rackheath
Norwich
NR13 6TB
United Kingdom
Telephone number: +44(0)7825302639
Email address: info@Norfolkevents.uk
For any questions, complaints or concerns regarding data protection you can contact: Email address: info@Norfolkevents.uk
1. Purpose of Our Website
Norfolk Events is a UK based website which hosts event links from other UK websites which are clearly marked as such. We do not create these events and not responsible for where they are hosted, along with how and why an event collects, stores and processes personal data. We are also not responsible for third party website security and we advise you refer to a website’s data protection notice when using it.
Please also refer to our Terms and Conditions on our website before using our services.
2. Legal Basis
The legal basis for which we may process personal data are:
· Consent
· Contractual obligation
· Our legitimate interests
3. Data Subjects
Due to our business activities, we may process personal data of the following individuals (“data subjects”):
· Enquirers
· Customers (prospective, new and returning)
· Social media users
The above list is representative and non-exhaustive.
4. Personal Data We Collect
The personal data we may process include:
· Name
· Email address
· Telephone number
· Addresses
· Event information
The above list is non-exhaustive and representative.
As mentioned in point one above, we provide links and details to events hosted on other websites. Although some events may be of a religious or medical nature (e.g. religious community celebrations or medical awareness events) we don’t intend to collect or process any special category personal data in any form or manner. If we were to collect any special category personal data we will be sure to update this notice as appropriate.
5. How We Collect Personal Data
We collect personal data through different means such as:
· When you send us an enquiry via our website
· Register as a customer
· Contact us via telephone, email or letter
· Contact us on social media
· Through photos and video recordings
The above list is representative and non-exhaustive.
6. How We Use Personal Data
We use personal data for the below activities:
· Event hosting and communications/enquiries
· Event detail amendments/removals
· To communicate with you regarding our services
· Social media interactions
· For our internal records
· Issuing invoices/taking payments
· Notify you of changes to our services
· To update and improve our website and services
· For any legal disputes and defend legal claims
· Marketing news and communications
· Handle any enquiries or complaints
The above list is non-exhaustive and representative.
7. Event Bookings and Children’s Data
We store event and client information on our third party website host providers within the UK.
When you click on an event we use Google Maps so you can pin point more accurately where the event is being hosted. We do not verify the location of an event so these may well be in a private or public venue/space and we are not responsible for the venue (and event) being detailed and on display.
We do not at any time intend to collect or process any personal data relating to children including for any event enquires. We understand some events can be aimed at children but we are only providing links from where they are originally hosted and not responsible at anytime for them.
Our services are primarily aimed at those who are 18 and over. If we are to receive any event enquires from anyone under the age of 18 we will be sure to cease processing their data, delete data where possible and prevent them from using our services any further.
Please refer to our Terms and Conditions for further information on event bookings and children’s data.
8. Who We May Share Personal Data With
We do not sell, rent, or lease personal data pertaining to our customers (including prospective customers) at any time.
Due to the nature of our business, there may be times we are required to share personal data with other individuals/organisations.
Examples of this can include (and is not limited to):
· Third party website host and support providers
· External advisers (e.g. Legal and compliance)
Please note there may also be instances where we may need to share personal data with a competent law enforcement body, regulatory body, government agency, court, or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation or (ii) to exercise, establish or defend our legal rights.
9. Marketing and Social Media
We use social media sites such as Facebook, X, LinkedIn and Instagram to share news, updates and for promotional activities as a few examples. Our use of social media enables us to interact with customers (including potential customers), reach new audiences and showcase our services as a few examples.
When you interact with us on social media through means such as “likes”, “shares” or leaving comments this enables us to see certain social media details (e.g. names, social media handles and photos).
We don’t record or copy any social media profiles or details, but you should be aware when interacting with us on social media, other users or viewers can view your profile and any comments/feedback and it is your responsibility to ensure you have set up suitable and appropriate privacy settings for your use of social media.
10. Data Transfers Outside The UK
Due to the nature of our organisation there may be instances where we may need to transfer and share your data with other organisations (e.g. service suppliers) who are in the European Economic Area (The EU member states, Norway, Iceland, and Liechtenstein), in an adequate listed country or in other third countries who may not have robust or similar data protection laws to the UK/EEA. If we need to transfer your information where required, we will take steps to ensure that appropriate safeguards are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this notice.
11. Cookies
For details on the cookies we use on this website and how you can change your consent, please see our cookie notice on our website.
12. What Happens If Our Business Changes Hands?
We may from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will be permitted to use that data only for the purposes for which it was originally collected by us.
13. Data Retention
We will retain personal data to provide our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations, including our insurance requirements. We will also determine appropriate retention periods based on our legitimate interests where identified.
At the end of the retention period personal data will be securely deleted or anonymised where necessary. For more information to our data retention practices, you can contact us using our details above.
14. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
If we become aware of any loss, misuse, alteration of personal data we will work closely with our internal teams and other parties as necessary to investigate the incident and report (when needed to relevant parties) such instances.
15. Data Subject Rights
Under data protection law individuals have the following rights:
- Right to be informed
- Right to access personal data
- Right to rectify personal data
- Right to erase personal data
- Right to object to personal data
- Right to have data ported
- Right to restrict personal data
- Right to not have personal data processed by automated means and profiled
If you would like to enquire about these rights, how they apply and how they can be exercised please contact us using our details above.
16. Concerns and Complaints
If you have any concerns and/or complaints to this notice and/or to how we process personal data please contact us using our details above.
You can make a complaint to the ICO (or other supervisory authority) at any time however, we hope that you would consider raising any issue or complaint you have with us first. You can submit a complaint to the ICO via https://ico.org.uk/make-a-complaint/.
17. Data Protection Notice Updates
We will review this notice and make changes to it from time to time. We recommend that you check this notice to see where changes have been made and to ensure you are able to review updated information at all times.
