GDPR Policy

1. Introduction

Atlas Events Production is committed to protecting the privacy and security of personal information. We recognise the importance of safeguarding personal data and are committed to processing it fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

This policy explains our commitment to data protection and outlines how personal information is managed within our business.

2. Our Commitment

Atlas Events Production is committed to:

Processing personal data lawfully, fairly and transparently.
Collecting personal information only for specified, legitimate purposes.
Ensuring personal data is accurate and kept up to date.
Collecting only the information necessary for the purposes for which it is processed.
Keeping personal information secure using appropriate technical and organisational measures.
Retaining personal information only for as long as necessary.
Respecting the rights of individuals under UK GDPR.

3. Personal Information We Process

Depending on the nature of your enquiry or our services, we may process:

Names.
Company names.
Job titles.
Email addresses.
Telephone numbers.
Postal addresses.
Event venue details.
Communications between you and us.
Technical information such as IP addresses, browser types and website usage data.
Information collected through cookies and analytics tools where applicable.

4. Why We Process Personal Information

We process personal information to:

Respond to enquiries.
Arrange quotations and services.
Communicate with customers.
Manage customer relationships.
Improve our website and services.
Meet legal and regulatory obligations.
Prevent fraud and maintain website security.
Maintain business records.

Where appropriate, enquiries may be shared with carefully selected service providers so they can contact you directly and deal with your enquiry.

5. Lawful Bases for Processing

We process personal information under one or more of the following lawful bases:

Consent.
Performance of a contract.
Legitimate interests.
Compliance with legal obligations.

Where consent is relied upon, individuals have the right to withdraw that consent at any time.

6. Data Sharing

We only share personal information where it is necessary to provide the services requested or where we are legally required to do so.

Recipients may include:

Carefully selected service providers who deal with customer enquiries.
Payment providers.
Website hosting providers.
IT support providers.
Professional advisers.
Accountants.
Government bodies or regulators where required by law.

We require organisations handling personal information on our behalf to maintain appropriate security measures and comply with applicable data protection legislation.

7. Data Security

Atlas Events Production takes appropriate technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, disclosure or destruction.

Security measures may include:

Secure hosting environments.
Password-protected systems.
Restricted access to personal information.
Secure data storage.
Regular software and security updates.
Staff awareness of data protection responsibilities.

8. Data Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected or to meet legal obligations.

Retention periods are reviewed regularly and personal information is securely deleted or anonymised when it is no longer required.

9. Individual Rights

Under UK GDPR, individuals have the right to:

Access their personal information.
Request correction of inaccurate information.
Request erasure of personal information where applicable.
Restrict processing.
Object to processing.
Request data portability where applicable.
Withdraw consent where consent is the lawful basis.
Lodge a complaint with the Information Commissioner's Office (ICO).

Requests relating to personal information will be handled without undue delay and within the timeframes required by law.

10. International Data Transfers

Where personal information is transferred outside the United Kingdom, appropriate safeguards will be implemented in accordance with UK GDPR to ensure the continued protection of personal data.

11. Staff Responsibilities

Anyone handling personal information on behalf of Atlas Events Production is expected to:

Process information confidentially.
Follow this policy and applicable data protection legislation.
Report suspected data breaches promptly.
Only access personal information required for their role.

12. Data Breaches

Any actual or suspected personal data breach will be investigated promptly.

Where required by law, breaches will be reported to the Information Commissioner's Office and affected individuals within the required timescales.

13. Policy Review

This policy will be reviewed periodically to ensure it remains accurate, effective and compliant with current legislation.

14. Contact

If you have any questions regarding this GDPR Policy or our handling of personal information, please contact us through our contact form.