Data protection policy

Our commitment

Pixel Takeaway Limited is committed to handling personal data lawfully, fairly and transparently, in line with the UK GDPR and the Data Protection Act 2018. This policy explains how we do that across the EventsBench platform.

Scope and responsibility

The policy covers every personal data the company processes through the EventsBench platform, its marketing website and its business communications.

Senior management is responsible for compliance. All staff and contractors are trained on data protection before they access personal data, and access is limited by role.

Lawful bases

We process booking and event administration data on the basis of the contract with the booker or the organiser's legitimate interest in running their event.

We process payment data to complete ticket purchases. Marketing emails are sent only on the basis of consent, which you can withdraw at any time.

Data minimisation

We collect only what is needed to run the event: name, email address, and optionally job title, organisation, dietary and accessibility requirements, and answers to the organiser's registration questions.

Special category data such as dietary or accessibility details is collected only to make arrangements for the attendee, is shared only with the people making those arrangements, and is deleted when the event has taken place.

Retention

Booking and attendance records are kept for as long as the organiser or programme funder requires them for reporting and audit, and are then deleted.

Marketing contacts are kept until consent is withdrawn. Audit and security logs are kept for a limited period needed to detect misuse and meet legal obligations.

Sub-processors and transfers

Personal data is stored in the United Kingdom and the European Economic Area.

Where we use sub-processors for hosting, email delivery or payment processing, we keep them under written agreements with Article 28 terms and check that transfers outside the UK are covered by an adequacy decision or standard contractual clauses.

Individual rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, restrict or object to a particular use, or ask us to move your data to another provider. Write to team@eventsbench.com and we will respond within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk.

Security

We use encryption in transit and at rest, two-step sign-in for staff accounts, role-based access control and activity logging. Significant actions on personal data are recorded in an audit trail.

We operate an incident response process. If a personal data breach is likely to affect people or their data, we will notify the Information Commissioner's Office within 72 hours and, where required, the people affected.

Data protection by design

New features are reviewed for privacy impact before release, and we carry out a data protection impact assessment where processing is likely to result in a high risk to individuals.

Company details

Pixel Takeaway Limited, registered company number 08705786, registered address 1 Canada Sq 37th Floor, Canary Wharf, London, E14 5AA, UK. Contact team@eventsbench.com with any question about this policy.