Privacy Policy

1. Who we are

Parallux Ltd is the data controller for your personal information. This means we decide how and why it is used, under UK data protection law.

Company number: 17113546
Email: info@parallux.co.uk
Website: winterlightexperience.co.uk

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Your name, contact details, and billing or postal address.
• Booking details and event attendance.
• Correspondence and customer-service information.
• Your marketing preferences and survey responses.
• Accessibility information you choose to provide.

We may also collect technical data. This includes your IP address, browser and device information, cookie identifiers, referral source and website interaction data.

Payment providers and ticketing platforms process card details securely. We do not ordinarily receive or store your full card details.

3. How we collect information

You give us information when you book tickets, join our mailing list, attend an event or contact us. You may also provide it when you enter a promotion, complete a survey or otherwise share information with us.

We may receive technical information automatically through cookies and similar technologies. We may also receive relevant information from ticketing providers, payment processors, venues, event partners, analytics providers and marketing platforms.

4. How and why we use your data

We use personal data to process bookings and payments, provide tickets and manage entry. It also helps us send event updates, answer enquiries, support customers, improve our events and website, prevent fraud and meet legal obligations.

The lawful bases we may rely on are:

• Performing a contract, such as providing your booked visit.
• Complying with a legal obligation.
• Your consent.
• Our legitimate interests in operating safe and effective events, assisting customers and improving our services.

5. Marketing communications

Where permitted, we may send news, offers and event announcements based on your consent or our legitimate interests. You can unsubscribe using the link in any marketing email or by contacting us.

Unsubscribing from marketing does not stop essential messages about an existing booking. We may keep a limited record of your unsubscribe request so we continue to respect your choice.

6. Cookies and similar technologies

Our website may use strictly necessary, functionality, analytics and advertising technologies. Necessary technologies support the operation of the site. Where the law requires consent, optional technologies will not be used until you have made a choice through the website's cookie controls.

7. Sharing your personal data

We do not sell personal information. Where necessary, we may share data with:

• Ticketing and payment providers.
• Website and cloud providers, and email and analytics services.
• Event venues, operational partners and safety providers.
• Professional advisers, regulators and law-enforcement authorities.

Service providers working for us may only process information for agreed purposes. Appropriate contractual and security arrangements must be in place.

8. Event venues and partners

Some events are delivered with venues or partner organisations. We may share information needed to organise and deliver an event. Where another organisation acts as an independent data controller, its own privacy policy applies.

9. International transfers

Some technology, payment, ticketing, marketing or cloud providers may process information outside the United Kingdom. We use safeguards required by UK law, such as adequacy regulations or approved contractual protections.

10. How long we keep information

We keep information only for as long as reasonably necessary for its purpose. We also need to meet accounting, tax, insurance, contractual, legal and reporting obligations.

How long we keep it depends on the type of record. When data is no longer required, it is securely deleted or anonymised where appropriate.

11. How we protect information

We use appropriate technical and organisational measures designed to protect data from accidental loss, alteration, unauthorised disclosure or access. Access is restricted to people and providers who reasonably need it for authorised purposes. No electronic system can be guaranteed completely secure.

12. Your data protection rights

Depending on the circumstances, you may have the right to:

• Access or correct your personal data.
• Ask us to erase your data or restrict its use.
• Object to processing.
• Request portability, meaning a copy of your data in a reusable format.
• Withdraw your consent.

You can object to direct marketing at any time.

Contact us to exercise a right. We may need to verify your identity. Legal conditions or exemptions may apply.

13. Complaints

Please contact us first if you have concerns so we can try to resolve them. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

14. Automated decision-making

We do not currently use personal information for solely automated decisions that produce legal or similarly significant effects. We will update this policy if that changes.

15. Children's personal data

Children may attend our events, but online bookings should normally be made by an adult. We do not intentionally use children's data for marketing without an appropriate lawful basis and safeguards.

16. Third-party websites

Our website may link to independently operated ticketing systems and other services. We are not responsible for their privacy practices and recommend reading their privacy information before providing data.

17. Changes to this policy

We may update this policy to reflect changes in our website, events, services or the law. The latest version and revision date will be published here.

18. Contact us

For questions, rights requests or concerns about personal information, email info@parallux.co.uk.