Privacy Policy
How we collect, use and look after personal data — written in plain English, under the UK GDPR and the Data Protection Act 2018.
This is a portfolio demonstration site. The policies below are written to real UK conventions and are structurally complete, but they describe a fictional company and are not legal advice.
1. Who we are
Halo Field Experiential Ltd (“Pulse”, “we”, “us”) is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 11408622, with our registered office at The Cistern, 118 Copeland Road, London SE15 3SN.
We are registered with the Information Commissioner’s Office under registration number ZB021749. If you would like to talk to a person about anything in this policy, email hello@pulse-experience.com or call 020 7946 0138.
2. What we collect
Information you give us. When you complete a form on pulse-experience.com we collect the details you type into it — typically your name, email address, phone number if you choose to give one, and whatever you write in the message field. If you book tickets we also collect the date, time and ticket types you select, along with any access requirements you tell us about.
Information we collect automatically. Our servers keep standard access logs: IP address, browser and device type, the pages you visited, referring page, and the date and time. These logs are used for security and troubleshooting and are deleted on a rolling basis.
Payment details. We do not see or store full card numbers. Card payments are handled entirely by our payment provider, who is a separate data controller for that transaction.
Special category data. We do not ask for it, and you should not send it to us through a web form. The one exception is access requirements you choose to tell us about so we can plan your visit — we use that information only to prepare for your booking and delete it after your visit.
3. Why we use it, and our lawful basis
To answer you. When you contact us we use your details to reply and to keep a record of the conversation. Lawful basis: legitimate interests — running a business and responding to the people who get in touch with it.
To honour your booking. We use your details to issue tickets, admit you on the night and contact you if a performance changes. Lawful basis: performance of a contract.
To send you things you asked for. If you opt in to our mailing list we use your email address to send it. Lawful basis: consent. Every message has an unsubscribe link, and unsubscribing takes effect immediately.
To keep the site working and secure. Lawful basis: legitimate interests — keeping pulse-experience.com available and defending it against abuse.
To meet legal obligations. Accounting and tax records are kept because the law requires it. Lawful basis: legal obligation.
4. Who we share it with
We do not sell personal data, and we do not share it for anyone else’s marketing. We do use a small number of suppliers who process data on our behalf under written contracts: a website host, an email provider, a payment processor and a delivery or ticketing partner, and an analytics provider. Each is limited to what they need and may not use it for their own purposes.
We will disclose personal data where we are legally required to — for example to HMRC, a regulator or a court — and we will tell you if we are permitted to.
Some suppliers are based outside the UK. Where that is the case we rely on UK adequacy regulations or on the ICO’s International Data Transfer Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.
5. How long we keep it
Enquiries that do not become work are deleted after 24 months. Booking records are kept for 24 months, and the financial record of the transaction for seven years because tax law requires it. Mailing list subscriptions are kept until you unsubscribe, plus a suppression record so we do not accidentally add you back.
Server logs are kept for 90 days.
6. Your rights
Under the UK GDPR you have the right to be told what we hold about you and to get a copy of it; to have inaccurate data corrected; to have data erased where we no longer have a good reason to keep it; to restrict or object to how we use it; to receive it in a portable format; and to withdraw consent at any time where consent is the basis we rely on.
To exercise any of these, email hello@pulse-experience.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
If you are not happy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would rather you came to us first so we can put it right.
7. Automated decision-making
We do not make decisions about you by automated means, and we do not profile you.
8. Children
pulse-experience.com is not directed at children. Under-16s are welcome to visit with an adult, but bookings must be made by someone aged 18 or over and we do not knowingly collect data directly from a child. If you believe a child has given us personal data, email us and we will delete it.
9. Changes to this policy
We update this policy when what we do changes. The date at the top of the page tells you when it was last revised, and material changes are announced on the site for 30 days.