Privacy Policy

Effective Date: 01/01/2024

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website. We are committed to safeguarding your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:
Joel Marriott
Email: halloweendisplaysbristol@gmail.com

2. Personal Data We Collect

We may collect the following personal data:
  • First name
  • Last name
  • Contact details (e.g. Whatsapp number or Facebook handle)
  • Address & Postcode
  • Latitude & Longitude

3. Lawful Basis for Processing

We process your personal data only where permitted under GDPR:
  • Contractual necessity: To provide services you request (e.g. list your display on our website).
  • Legal obligation: To comply with applicable laws or regulations.
  • Legitimate interests: To maintain accurate records, ensure security, and improve our services (provided your rights do not override these interests).
  • Consent: By registering for the website and creating a display you consent for us to hold your data.

4. How We Use Your Personal Data

We use your personal data to:
  • Provide and manage the Displays in Bristol service
  • Communicate with you about your display/account
  • Maintain records for administrative and legal purposes
  • Improve our website

5. Data Retention and Anonymisation

We retain your personal data only as long as necessary for the purposes outlined above.

At the end of the year (after Christmas season ends), your address information including latitude and longitude will be anonymised, ensuring it can no longer be used to identify you. A rough latitude and longitude is retained to preserve the look of the map history from afar, but cannot be used to pinpoint your house's exact location. Your photos are unlinked from your display, but retained for the year photo gallery.

Anonymised data is kept to display historic year information.

6. Sharing of Personal Data

We will not sell or rent your personal data. We may share it only with:
  • Service providers (e.g. hosting, IT, or delivery partners) who act on our behalf under strict contractual obligations.
  • Regulators, authorities, or law enforcement where legally required.

7. International Data Transfers

If your data is transferred outside the UK/EEA, we will ensure appropriate safeguards are in place, such as:
  • Standard Contractual Clauses approved by the European Commission.
  • Transfers to countries deemed to provide an adequate level of protection by the EU/UK authorities.

8. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or disclosure. However, no online service can guarantee complete security.

9. Your Data Protection Rights

Under GDPR, you have the following rights:
  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal and contractual obligations.
  • Restriction: Request restriction of processing under certain circumstances.
  • Data portability: Request your data in a structured, commonly used, and machine-readable format.
  • Object: Object to processing based on legitimate interests or direct marketing.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise these rights, contact us at halloweendisplaysbristol@gmail.com. We will respond within one month, as required by GDPR.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated Effective Date.

11. Contact Us

If you have questions about this Privacy Policy or how we process your data, you can contact us at:
Displays in Bristol
Email: halloweendisplaysbristol@gmail.com

If you are based in the UK or EU, you also have the right to lodge a complaint with your local data protection authority.