PRIVACY POLICY

Last updated: 22 July 2026

​

1. Who we are

PopHaus Ltd ("PopHaus", "we", "us", "our") is a London-based event production company. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Company name: PopHaus Ltd. Company number: 16999617, registered in England and Wales. Registered office: The Dock Hub, Wilbury Villas, Hove BN3 6AH. Trading address and workshop: Brook Lane Business Centre, Brentford, London TW8 0PP. Contact email: hello@pophaus.co.uk. Phone: 07964 704 027. PopHaus is the data controller for the personal data described in this policy.

​

2. What data we collect

We collect personal data in two main ways. Information you provide directly includes contact details such as name, email, phone number and company name submitted through our contact form, project details including brief description, budget and timelines submitted with enquiries, email correspondence with our team, and information exchanged during quote preparation, contracts and project delivery. Information collected automatically when you visit pophaus.co.uk includes standard web analytics such as pages viewed, time on site, referring source, general geographic region and device type, collected via Google Analytics 4 subject to your cookie consent, along with cookies as described in section 8 below. We do not knowingly collect data from children under 13, and our services are intended for business use only.

​

3. How we use your data

We use your personal data to respond to enquiries and prepare project quotes, deliver contracted projects including design, fabrication, install and de-rig, send follow-up communications relating to active or recent projects, invoice and manage financial records, improve our services through anonymised website analytics, and comply with legal and tax obligations. We do not sell your personal data to third parties, and we do not use your data for advertising or marketing without your explicit consent.

​

4. Legal basis for processing

Under UK GDPR, we rely on the following legal bases: legitimate interest, for responding to business enquiries you initiate and delivering contracted services; contract, for processing necessary to fulfil agreed project work; legal obligation, for retaining financial records for tax purposes; and consent, for optional cookies and any future marketing communications. You can withdraw consent at any time — see section 9.

5. How long we keep your data

Contact form enquiries that don't proceed to a project are kept for 2 years then deleted. Active project data is kept for the duration of the project plus 12 months. Financial records such as invoices and contracts are kept for 7 years, as required by HMRC. Client contact records for repeat clients are kept for the duration of the working relationship plus 3 years after the last engagement. Website analytics data is retained by Google Analytics 4 for up to 14 months, which is Google's standard retention period.

​

6. Who we share your data with

We share your personal data only where necessary, with service providers acting on our behalf such as freelance crew, subcontractors and suppliers required to deliver your project, bound by confidentiality where relevant; professional advisors including our accountant, insurers and legal advisors as required; hosting and technology providers, listed in section 7; and government bodies such as HMRC where legally required. We do not share your data with any third party for their own marketing purposes.

​

7. Third-party services we use

Our website and business operations rely on a small number of third-party services, each with their own privacy policy. These include Wix for website hosting and content management, Google Analytics 4 (ID: G-4FB2B2E8B5) for anonymised website usage analytics, Google Tag Manager (ID: GTM-NXQHCQMP) for tag delivery infrastructure, Usercentrics for cookie consent management, and Google Workspace for our business email. Full details, including links to each provider's privacy policy, are set out in the table below. Data may be transferred outside the UK to countries where these providers operate, typically the EEA and the US, and all providers are certified under appropriate data transfer frameworks such as the UK-US Data Bridge and the EU-US Data Privacy Framework.

​

8. Cookies

We use cookies to make our website work, understand how visitors use it, and, if you consent, support future advertising. When you first visit pophaus.co.uk, you will see a cookie consent banner powered by Usercentrics, allowing you to accept all cookies, reject all non-essential cookies, or choose specific categories. Our cookie categories are essential, which are always on and required for the site to function and are not used for tracking; functional, which are optional and remember preferences to improve site behaviour; analytics, which are optional and use Google Analytics 4 to measure aggregate site usage; and marketing and advertising, which are optional and currently not used, reserved for future use. You can change your cookie choices at any time via the consent icon on our website. Our site uses Google Consent Mode v2, so Google services respect your consent choices in real time.

9. Your rights

Under UK GDPR, you have the right to access the personal data we hold about you, correct inaccurate or incomplete data, delete your data (the "right to erasure") subject to legal record-keeping obligations, restrict how we use your data, object to processing based on legitimate interest, receive your data in a structured, machine-readable format, and withdraw consent at any time for optional cookies or marketing communications. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully. To exercise any of these rights, email hello@pophaus.co.uk. We will respond within 30 days.

​

10. Data security

We take reasonable technical and organisational measures to protect your data, including HTTPS encryption on our website, secure business email through Google Workspace, access controls on internal systems, and signed non-disclosure agreements with subcontractors handling sensitive client information. No system is 100% secure. If a data breach occurs that is likely to affect your rights, we will notify you and the ICO within 72 hours in accordance with UK GDPR requirements.

​

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will always reflect the most recent revision. Material changes will be flagged prominently on the website, and we recommend reviewing this policy occasionally.

​

12. Contact

Questions about this policy or any data we hold about you can be sent to hello@pophaus.co.uk or by phone on 07964 704 027, or by post to PopHaus Ltd, Brook Lane Business Centre, Brentford, London TW8 0PP.