The Big Festoon Ltd

Last updated: 9 November 2026

1. Who we are

The Big Festoon is operated by The Big Festoon Ltd, a company registered in England and Wales under company number 15798703.

Our registered office is:

206 Hoyles Lane

Cottam

Preston

England

PR4 0LD

The Big Festoon Ltd is the data controller responsible for the personal information covered by this Privacy Policy. This means we determine how and why your personal information is collected, stored and used.

For any questions about this policy or how we handle personal information, please contact:

Email: [email protected]

Website: https://thebigfestoon.com

This Privacy Policy applies to our website visitors, customers, event

attendees, ticket holders, members, speakers, sponsors, exhibitors, business partners, suppliers and anyone whose personal information we hold in connection with our business activities.

2. What personal information we collect

Depending on how you interact with The Big Festoon, we may collect and process the following information.

- Personal and business information

- Full name

- Business or organisation name

- Job title or professional role

- Email address

- Telephone number

- Postal or billing address

- Website and social media details

- Relevant business information

- Event and membership information

- Event registrations and ticket purchases

- Membership applications and subscriptions

- Attendance records

- Booking and transaction information

- Payment and invoice records

- Speaker, sponsor and exhibitor information

- Event participation and correspondence

- Accessibility and dietary requirements where necessary

- Marketing and communication information

- Email subscriptions

- Marketing preferences and permissions

- Previous enquiries and correspondence

- Communication history

- Email engagement information where lawfully collected

- Unsubscribe requests and communication preferences

- Website and technical information

- IP addresses

- Browser and device information

- Website activity and usage information

- Cookie preferences

- Information submitted through online forms

Photography, video and audio

We may collect photographs, video recordings and audio recordings during our events or through materials provided to us for agreed business, editorial or promotional purposes.

We collect information that is relevant to our activities and take reasonable steps to ensure it is accurate and kept up to date.

Where information includes sensitive personal details, such as health conditions or accessibility requirements, we apply additional protections and process it only where the appropriate legal conditions are met.

3. How we collect your information

We may collect personal information directly from you when you:

- Visit our website

- Purchase event tickets

- Join Festoon 500 or another membership

- Register for an event, programme or workshop

- Apply to become a speaker, sponsor or exhibitor

- Subscribe to our emails

- Complete a form

- Contact us by email, telephone or social media

- Participate in our events or activities

We may also receive relevant personal information from authorised ticketing providers, event partners, payment processors, service providers and other organisations where the sharing is lawful.

Information received from other organisations

The Big Festoon Ltd also holds personal information originally collected by IATQB Ltd in connection with its events, memberships, programmes and business activities.

This may include contact details, previous business relationships, relevant communication history and marketing preferences.

We review the information received to establish its relevance, accuracy and the appropriate lawful basis for retaining and using it.

Where required, we provide affected individuals with separate information about how their personal information will be handled.

You can contact us at [email protected] to find out more about the information we hold about you and exercise your data protection rights.

4. How and why we use your information

We use personal information to operate our business, provide services, manage events and communicate with individuals and organisations.

Under UK GDPR, we must have an appropriate lawful basis for processing personal information. The lawful basis depends on the purpose and circumstances of the processing.

Events, bookings and memberships

We use personal information to:

- Process event registrations and ticket purchases

- Manage bookings and attendance

- Provide event information and updates

- Deliver membership benefits

- Administer speaker, sponsor and exhibitor arrangements

- Respond to booking and membership enquiries

Lawful basis: Performance of a contract, steps taken before entering into a contract or legitimate interests where appropriate.

Customer service and administration

We use information to respond to enquiries, manage customer relationships, provide support and communicate important information about our services.

Lawful basis: Contract or legitimate interests in managing our business and providing appropriate customer service.

Marketing and business communications

We may use personal information to send relevant information about:

- The Big Festoon events

- Festoon 500 and other memberships

- Workshops, programmes and opportunities

- Business updates

- Related products and services

- We send marketing communications only where permitted under applicable data protection and electronic marketing legislation.

Lawful basis: Consent or legitimate interests, as appropriate under UK GDPR, alongside compliance with the Privacy and Electronic Communications Regulations (PECR).

Financial and legal obligations

We process relevant information to maintain accounting records, administer payments, meet tax obligations, manage disputes and comply with legal requirements.

Lawful basis: Legal obligation, contract or legitimate interests, depending on the purpose.

Website operation and improvement

We may process website and technical information to maintain website functionality, protect our systems, understand website performance and improve the visitor experience.

Lawful basis: Legitimate interests, consent or another applicable lawful basis depending on the activity and technology involved.

Cookies and similar technologies are subject to additional rules explained in our Cookie Policy.

Event photography and recordings

We may use photographs, videos and recordings to document and promote our events, share highlights and communicate our activities.

We identify an appropriate lawful basis, provide relevant information about photography and filming, and obtain additional permissions where required.

Lawful basis: Legitimate interests or consent, depending on the circumstances.

Maintaining appropriate historical records

We may retain and use relevant historical relationship information where this supports legitimate business administration, continuity of appropriate services, responding to enquiries or complying with legal obligations.

Lawful basis: Legitimate interests, contract or legal obligation, as appropriate.

Where we rely on legitimate interests, we consider the purpose of the processing, its necessity and the impact on individuals.

Where special-category information is required, we also identify an appropriate additional condition under Article 9 UK GDPR.

5. Marketing communications and your choices

We may send you information about The Big Festoon, our events, memberships, activities and related services where legally permitted.

We respect your communication preferences and maintain appropriate records of marketing permissions and unsubscribe requests.

You can opt out of marketing communications at any time by:

- Clicking the unsubscribe link in a marketing email

- Contacting [email protected]

You also have the right to object to the processing of your personal information for direct marketing at any time.

Existing contact information

Where personal information was originally collected by another organisation, including IATQB Ltd, we review the original collection circumstances and applicable marketing permissions before using it for promotional communications.

Existing relationships or previous marketing permissions do not automatically authorise every type of marketing by The Big Festoon Ltd.

We assess the relevant requirements under UK GDPR and PECR before contacting individuals for marketing purposes.

Important service communications, including information about existing bookings, are handled separately from marketing communications.

We do not automatically provide event attendee or membership contact lists to sponsors, exhibitors or other organisations for their independent marketing.

6. Sharing your personal information

We may share personal information with trusted third parties where necessary for the operation of our business, delivery of our services or compliance with legal obligations.

These may include:

- Event venues and production suppliers

- Ticketing and registration providers

- Payment processors

- Website hosting and technology providers

- Customer relationship management and email platforms

- Accountants and professional advisers

- Event delivery partners

- Insurers and other relevant service providers

- Regulators and public authorities where required by law

Where another organisation processes information on our behalf, we require appropriate contractual and security safeguards. We only share information where there is an appropriate lawful reason to do so.

Sharing information with Festoon Media Ltd

The Big Festoon Ltd may share relevant historical client contact and relationship information with Festoon Media Ltd, company number 15798727, trading as Dani Wallace.

This relates to individuals who previously worked directly with Dani Wallace and where the sharing is supported by an appropriate lawful basis.

The sharing is governed by a separate Data Sharing Agreement between the two companies. Festoon Media Ltd is an independent data controller and is responsible for how it uses and protects any information it lawfully receives.

Personal information is limited to what is necessary for the agreed purposes. We do not sell personal information for unrestricted third-party marketing.

7. International data transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure appropriate protection in accordance with UK data protection legislation.

These may include:

- Transferring information to countries covered by applicable UK adequacy arrangements

- Using appropriate contractual safeguards, including the UK International Data Transfer Agreement or UK Addendum where required

- Carrying out relevant transfer assessments and applying additional safeguards where necessary

You can contact us for further information about the safeguards applicable to your personal information.

8. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or lawfully obtained.

Retention periods depend on the type of information, the relevant business relationship and any applicable legal requirements. For example:

- Event and booking information: Retained for as long as necessary to administer the event, manage related enquiries and meet relevant contractual, accounting or legal requirements.

- Membership information: Retained while the membership is active and for an appropriate period afterwards where necessary for administration, legal obligations or legitimate business purposes.

- Financial records: Retained in accordance with applicable tax, accounting and company recordkeeping requirements.

- Marketing information: Retained while there is an appropriate lawful basis for using it. We may retain limited suppression information to respect previous unsubscribe requests and objections.

- Enquiries and correspondence: Retained where necessary to respond to enquiries, maintain appropriate business records or manage ongoing relationships.

- Historical information: Reviewed for relevance, accuracy and an appropriate lawful retention purpose. Information without a continuing lawful purpose is securely deleted or anonymised.

- Sensitive event information: Information relating to accessibility, dietary requirements or similar arrangements is normally deleted when it is no longer required, unless another lawful reason justifies continued retention.

We maintain internal retention arrangements and review information periodically.

9. How we protect your information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures include:

- Secure systems and accounts

- Appropriate password and access controls

- Restricted access to personal information

- Confidentiality arrangements

- Appropriate security measures with service providers

- Procedures for managing data protection incidents

- Regular review of data handling practices

Access to personal information is limited to individuals who require it for legitimate business purposes.

10. Your data protection rights

Under UK data protection legislation, you have a number of rights relating to your personal information.

Depending on the circumstances, these may include:

- Right of access: You can request a copy of the personal information we hold about you.

- Right to rectification: You can ask us to correct inaccurate or incomplete information.

- Right to erasure: You can request deletion of your personal information in certain circumstances.

- Right to restrict processing: You can ask us to limit how your personal information is used in certain circumstances.

- Right to object: You can object to certain types of processing, including processing based on legitimate interests. You can object to direct marketing at any time.

- Right to data portability: You may be entitled to receive certain personal information in a structured, commonly used and machine-readable format.

- Right to withdraw consent: Where we rely on consent, you may withdraw it at any time. This does not affect processing already carried out lawfully before withdrawal.

- Rights relating to automated decisions: We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects about individuals.

If this changes, we will provide the additional information and safeguards required by law. To exercise your rights, contact: [email protected]

We normally respond to valid requests without undue delay and within one calendar month, subject to applicable extensions or exceptions. We may request reasonable information to verify your identity before releasing personal information.

11. Providing your information

Some personal information is necessary for us to provide particular services. For example, we may need your name, contact details and relevant booking information to process event tickets or membership applications.

If you choose not to provide information required for a particular service, we may be unable to process your booking, deliver the service or fulfil the relevant request. Where information is optional, we aim to make this clear when collecting it.

12. Complaints

If you have concerns about how we collect, use, store or protect your personal information, please contact us.

Email: [email protected]

We will acknowledge data protection complaints within 30 days, investigate them without undue delay, keep you informed where appropriate and explain the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator. ICO website: https://ico.org.uk/make-a-complaint/

13. Cookies and website technologies

Our website uses cookies and similar technologies to support functionality and, where enabled and legally permitted, website analytics, visitor preferences and other services.

Some cookies are necessary for the website to operate. Others require consent or another applicable legal exception.

For further information about the types of cookies used and how to manage your choices, please read our separate Cookie Policy.

14. External websites

Our website and communications may contain links to other websites, social media platforms and third-party services.

These organisations are responsible for their own privacy practices. We recommend reviewing their privacy policies before providing personal information.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our business activities, services, technology or legal obligations.

The most recent version will be published on our website with an updated date.

Where changes require direct notification, we will communicate them in accordance with applicable data protection legislation.

16. Contact details

For any questions about this Privacy Policy, your personal information or your data protection rights, please contact:

The Big Festoon Ltd

Company number: 15798703

206 Hoyles Lane

Cottam

Preston

England

PR4 0LD

Email: [email protected]

Website: https://thebigfestoon.com.