1. Who we are
BPMH Limited is the data controller responsible for the personal information described in this policy.
Address: Suite A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE
Email: admin@bodypower.com
2. What this policy covers
This policy explains how we collect, use, share and protect personal information when you use the BodyPower website, buy a ticket, complete a quiz or form, contact us, enquire about sponsorship or partnership opportunities, or choose to receive marketing.
3. Personal information we collect
- Contact information: name, email address, telephone or WhatsApp number and organisation.
- Ticket and order information: ticket type, order reference, purchase status and attendance-related information.
- Quiz and lead information: professional role, quiz answers, score, knowledge gaps, marketing choices and internal follow-up notes.
- Enquiry information: details provided in sponsor, partner, speaker, support or general contact enquiries.
- Marketing preferences: whether you have agreed to receive email or WhatsApp communications and records of any withdrawal.
- Technical information: IP address, browser/device information, website activity, referral source and campaign data.
We may also receive information from service providers that help us operate ticketing, email, website analytics, advertising and hosting.
4. Why we use your information
| Purpose | Typical lawful basis |
|---|---|
| Process ticket purchases, administer attendance and provide ticket support. | Performance of a contract and legitimate interests in administering the event. |
| Respond to enquiries and manage sponsor, partner or speaker relationships. | Legitimate interests, steps taken before a contract, or performance of a contract. |
| Send email or WhatsApp marketing where you have chosen to receive it. | Consent, or another lawful permission where applicable. |
| Measure website use, campaign performance and improve our services. | Consent for non-essential tracking where required, and legitimate interests for permitted analytics and improvement. |
| Prevent misuse, protect our systems and maintain business records. | Legitimate interests and legal obligations. |
5. Marketing communications
We may send marketing by email or WhatsApp only where we have an appropriate legal basis. You can withdraw consent or opt out at any time by using an unsubscribe option in a message or emailing admin@bodypower.com.
Withdrawing from marketing does not affect essential communications about an order, ticket or event you have booked.
6. Cookies, analytics and advertising technologies
Our website may use cookies, pixels and similar technologies, including services associated with Google Analytics, Google Tag Manager and Meta, to understand website use and campaign performance. Non-essential technologies should operate according to the choices presented through the website's cookie controls.
Browser settings may also allow you to restrict or delete cookies. Doing so may affect some website functionality.
7. Who we share information with
We may share relevant information with trusted service providers, including:
- Ticket Tailor and payment providers for ticket sales and order administration;
- Microsoft services for business email and communications;
- Google services for website analytics and tag management;
- Meta services for advertising measurement, where permitted;
- website hosting, security, database and technical support providers;
- professional advisers, insurers, regulators or public authorities where necessary.
Providers may only use information for agreed purposes and must protect it appropriately. We do not sell personal information to advertisers.
8. International transfers
Some service providers may process information outside the United Kingdom. Where required, we use appropriate safeguards for international transfers and take steps to ensure that personal information remains protected.
9. How long we keep information
- Ticket and financial records: normally kept for up to six years where required for tax, accounting, legal or dispute purposes.
- Quiz leads, enquiries and marketing records: generally reviewed after 24 months of inactivity and deleted or anonymised unless there is a reason to keep them longer.
- Consent and opt-out records: kept for as long as reasonably necessary to demonstrate your preferences and prevent unwanted marketing.
- Technical and security records: retained for a proportionate period based on security, operational and legal needs.
We may keep information longer where required by law, to establish or defend legal claims, or while a complaint is being resolved.
10. Your rights
Depending on the circumstances, you may have the right to:
- ask for access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to delete information;
- ask us to restrict how information is used;
- object to certain uses, including direct marketing;
- receive certain information in a portable format;
- withdraw consent at any time where we rely on consent.
To exercise a right, email admin@bodypower.com. We may need to verify your identity before acting on a request.
11. Security
We use reasonable organisational and technical measures designed to protect personal information from unauthorised access, alteration, loss or disclosure. No online service can guarantee absolute security.
12. Complaints
Please contact us first so that we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office.
13. Changes to this policy
We may update this policy when our services, suppliers or legal obligations change. The latest version will be published on this page with a revised update date.