PRIVACY
PROTOCOL

1. DATA CONTROLLER

Twisted Melon IO LTD ("we", "us", "our") is the data controller responsible for your personal data.

2. INFORMATION WE COLLECT

We may collect and process the following categories of personal data:

2.1 Information You Provide

• Contact Information: Name, email address, phone number, company name, and job title when you contact us or request our services.
• Business Information: Details about your events, technical requirements, and project specifications.
• Communications: Records of correspondence when you contact us via email, phone, or our website.

2.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
• Usage Data: Information about how you use our website, including pages visited, time spent on pages, and navigation paths.
• Cookie Data: Information collected through cookies and similar technologies (see Section 8).

3. LAWFUL BASIS FOR PROCESSING

Under UK GDPR, we process your personal data on the following lawful bases:

• Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, marketing, and fraud prevention, where these are not overridden by your rights.
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Legal Obligation: Processing necessary for compliance with a legal obligation to which we are subject.

4. HOW WE USE YOUR DATA

We use your personal data for the following purposes:

• To provide and manage our live event engineering services
• To respond to your enquiries and provide customer support
• To send you service-related communications
• To send marketing communications (where you have opted in)
• To improve our website and services
• To comply with legal and regulatory obligations
• To protect our business and your security

5. DATA SHARING

We may share your personal data with:

• Service Providers: Third-party vendors who assist us in operating our business (e.g., hosting providers, email services, analytics providers). These parties are contractually bound to protect your data.
• Professional Advisers: Lawyers, accountants, and insurers where necessary.
• Regulatory Bodies: Where required by law or to protect our legal rights.
• Business Transfers: In connection with any merger, sale of company assets, or acquisition.

We do not sell your personal data to third parties.

6. INTERNATIONAL TRANSFERS

Your personal data may be transferred to, and processed in, countries outside the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, including:

• Transfers to countries with an adequacy decision from the UK Government
• Use of UK International Data Transfer Agreements (IDTAs)
• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)

7. DATA RETENTION

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Client Data: For the duration of our business relationship plus 6 years for legal and accounting purposes.
• Enquiry Data: For 2 years from your last interaction with us.
• Marketing Data: Until you unsubscribe or withdraw consent.
• Website Analytics: For 26 months.

8. COOKIES

Our website uses cookies and similar technologies to enhance your browsing experience. Types of cookies we use:

• Essential Cookies: Required for the website to function properly.
• Analytics Cookies: Help us understand how visitors interact with our website.
• Functional Cookies: Remember your preferences and settings.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

9. YOUR RIGHTS

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Request transfer of your data to another organisation.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Rights Related to Automated Decision-Making: Rights concerning automated decisions, including profiling.

To exercise any of these rights, please contact us at privacy@twistedmelon.io. We will respond to your request within one month.

10. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication measures
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

11. THIRD-PARTY LINKS

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

12. CHILDREN'S PRIVACY

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. CHANGES TO THIS POLICY

We may update this Privacy Protocol from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. COMPLAINTS

If you have concerns about how we handle your personal data, please contact us first at privacy@twistedmelon.io.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

15. CONTACT US

For any questions about this Privacy Protocol or our data practices, please contact: