Privacy Policy

Project Genius ("we," "our," or "us") is committed to protecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and other applicable privacy laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this privacy policy carefully. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with our policies and practices, you should not use our services.

We collect several types of information from and about users of our website, including:

• Personal Identification Information: Name, email address, phone number, postal address, date of birth, and other contact details when you register for events or contact us.
• Payment Information: Credit card details and billing information for ticket purchases (processed through secure third-party payment processors that comply with PCI DSS standards).
• Technical Data: IP address, browser type, operating system, referring URLs, device information, and usage data collected through cookies and similar technologies.
• Usage Data: Information about how you interact with our website and services, including pages visited, time spent, clickstream data, and other diagnostic data.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To perform the contract we are about to enter into or have entered into with you
• To process transactions and send related information including confirmations and invoices
• To improve, personalize, and expand our services based on legitimate interests
• To communicate with you, including responding to inquiries and providing customer support
• To send promotional communications about events and services (where you have consented to this)
• To monitor and analyze usage trends and preferences for business improvement
• To detect, prevent, and address technical issues, fraud, and security risks
• To comply with legal obligations and enforce our terms and policies

Under UK GDPR, we rely on the following legal bases for processing your personal data:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.
• Legitimate Interests: Where processing is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.

We may share your information with the following categories of recipients:

• Service Providers: With third-party vendors who perform services on our behalf (payment processing, data analysis, email delivery, hosting services, etc.) under strict data processing agreements.
• Business Partners: With event venues, artists, and other partners necessary to fulfill our services to you.
• Professional Advisors: With lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services.
• Authorities: With HM Revenue & Customs, regulators, and other authorities who require reporting of processing activities in certain circumstances.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal information to third parties for their marketing purposes.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier.

Types of cookies we use:

• Essential Cookies: Necessary for the website to function properly. These cannot be switched off.
• Performance Cookies: Help us understand how visitors interact with our website.
• Functional Cookies: Enable enhanced functionality and personalization.
• Targeting Cookies: Used to deliver relevant advertising and track campaign effectiveness.

You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings. However, if you do not accept cookies, some portions of our website may not function properly.

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. These measures include:

• SSL/TLS encryption for data transmission
• Regular security audits and vulnerability testing
• Access controls, authentication procedures and limited access on a need-to-know basis
• Employee training on data protection and security awareness
• Business continuity and disaster recovery procedures

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. While we strive to protect your personal information, no security system is impenetrable, and we cannot guarantee the absolute security of your data.

Under data protection laws in the UK, you have rights including:

• Right to Access: Request copies of your personal data (commonly known as a "data subject access request").
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request restriction of processing your personal data.
• Right to Data Portability: Request transfer of your data to another organization.
• Right to Object: Object to our processing of your personal data in certain circumstances.
• Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.

You are not required to pay any charge for exercising your rights. We have one month to respond to you. To exercise any of these rights, please contact us using the information in the "Contact Us" section below.

We may transfer, store and process your personal data outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
• Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18 without verification of parental consent.

If we become aware that we have collected personal information from a child under age 18 without verification of parental consent, we will take steps to remove that information from our servers. If you believe we might have any information from or about a child under 18, please contact us.

We may update our Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Where appropriate, we may notify you of changes by email or through a notice on our website.

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact our Data Protection Officer:

• By email: projectgeniusuk@gmail.com
• By phone: +44 7377 993041

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Last Updated: January 8, 2025