Privacy Policy

This Privacy Policy explains how Project 90 collects, uses, stores and protects your personal information when you visit www.project90.uk, sign up to our mailing list, make an enquiry, buy from us, enter a promotion, or interact with our brand online.

We take your privacy seriously and only use your personal information in ways that are lawful, fair and transparent.

1. Who we are

Project 90 is registered in England.

For the purposes of UK data protection law, Project 90 is the “controller” of your personal information.

2. Information we collect

We may collect the following information:

Information you give us directly, including your name, email address, phone number, location, date of birth or age confirmation, payment details, billing details, delivery details, competition entries, survey responses, preferences, and any messages you send to us.

Information collected automatically, including your IP address, browser type, device information, pages visited, links clicked, referral source, approximate location, website usage data, cookie identifiers, and advertising tracking data.

Information from third parties, including payment providers, ticketing platforms, email marketing platforms, advertising platforms, analytics providers, social media platforms, competitions, referral partners, or public sources where lawful.

3. How we use your information

We may use your personal information to:

  • provide access to our website, products, services, events, offers or content;

  • process purchases, bookings, payments, refunds or customer service requests;

  • send you service messages, confirmations, receipts and important updates;

  • send you marketing emails, offers, announcements, product launches, event news and sales campaigns;

  • personalise marketing based on your interests, behaviour, location, purchases or engagement;

  • create advertising audiences, lookalike audiences, retargeting campaigns and customer segments;

  • measure the performance of our website, marketing, adverts and campaigns;

  • improve our website, brand, products, services, customer experience and sales activity;

  • run competitions, giveaways, promotions, surveys or referral campaigns;

  • prevent fraud, abuse, security threats, misuse of our website, or unlawful activity;

  • protect our brand, business, website, intellectual property, legal rights and users;

  • comply with legal, tax, accounting, regulatory or reporting obligations.

4. Email marketing and sales targeting

When you provide your email address, we may use it to send you marketing communications about Project 90, including news, offers, product launches, events, promotions, sales campaigns and related updates.

We may also use your email address and engagement data to create customer segments, understand what you are interested in, personalise our communications, and advertise to you on platforms such as Meta, Instagram, Facebook, Google, YouTube, TikTok or similar advertising networks.

We will only send marketing emails where we have a lawful basis to do so. This may be because:

  • you gave us consent by signing up or ticking an opt-in box;

  • you bought from us or enquired about similar products or services and did not opt out, where the soft opt-in applies;

  • we have a legitimate interest in promoting our brand, products or services, where permitted by law.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or contacting us.

You have an absolute right to object to your personal data being used for direct marketing. If you object or unsubscribe, we will stop using your data for direct marketing. The ICO states that people have an absolute right to object where personal data is used for direct marketing.

5. Cookies, pixels and tracking technologies

Our website may use cookies, pixels, tags, SDKs and similar technologies to make the site work, improve performance, understand usage, personalise content, and support advertising or retargeting.

These may include tools from providers such as:

  • Google Analytics;

  • Google Ads;

  • Meta Pixel;

  • TikTok Pixel;

  • email marketing platforms;

  • website hosting and analytics tools;

  • payment, checkout or ticketing platforms.

Where required, we will ask for your consent before placing non-essential cookies or tracking technologies on your device. Advertising cookies, retargeting pixels and similar technologies generally require consent under PECR/UK data protection rules, and non-essential cookies should not be set before consent is given.

You can manage your cookie preferences through our cookie banner or your browser settings.

6. Lawful bases for using your data

We rely on one or more of the following lawful bases:

Consent — where you have opted in to marketing, accepted cookies, entered a promotion, or given permission for a specific use.

Contract — where we need your data to provide a product, service, ticket, booking, purchase, account or customer support.

Legitimate interests — where we use your data to grow, protect and improve our business, brand, website, customer experience, advertising and sales activity, provided your rights do not override those interests.

Legal obligation — where we need to keep or share information to comply with legal, tax, accounting, regulatory or law enforcement requirements.

7. Who we share your data with

We may share your personal information with trusted third parties, including:

  • website hosting providers;

  • payment processors;

  • email marketing platforms;

  • CRM and customer database providers;

  • analytics providers;

  • advertising platforms;

  • social media platforms;

  • ticketing, booking or ecommerce platforms;

  • delivery or fulfilment partners;

  • professional advisers, accountants, insurers or legal advisers;

  • regulators, authorities or law enforcement where required.

We do not sell your personal information.

Where we use third-party platforms for advertising, we may share hashed or matched identifiers, such as your email address, so that we can target ads, suppress existing customers from campaigns, measure performance, or create similar audiences.

8. International transfers

Some of our suppliers and technology providers may process personal information outside the UK.

Where this happens, we will take steps designed to ensure your information receives appropriate protection, such as using approved transfer mechanisms, contractual safeguards, or providers with recognised data protection measures.

9. How long we keep your information

We keep your personal information only for as long as necessary for the purposes described in this policy.

As a general guide:

  • marketing contact data may be kept until you unsubscribe or object;

  • customer purchase, accounting or transaction records may be kept for up to six/seven years where required for tax, legal or accounting purposes;

  • competition and promotion data may be kept for the duration of the promotion and a reasonable period afterwards;

  • website analytics and cookie data may be kept according to the settings of the relevant analytics or advertising provider;

  • suppression records may be kept to ensure we do not contact you again after you opt out.

10. How we protect your information

We use appropriate technical and organisational measures to protect your personal information, including access controls, password protection, secure systems, limited access, supplier checks, encryption where appropriate, and internal procedures.

However, no website, database or online service can be guaranteed to be completely secure. You are responsible for keeping your own login details, devices and passwords safe.

11. Your rights

Depending on the circumstances, you may have the right to:

  • access the personal information we hold about you;

  • correct inaccurate or incomplete information;

  • request deletion of your information;

  • restrict how we use your information;

  • object to certain uses of your information;

  • withdraw consent at any time;

  • request transfer of your information;

  • complain to the Information Commissioner’s Office.

The ICO says privacy notices should explain people’s rights, including access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent where consent is the lawful basis.

To exercise your rights, contact us.

12. Unsubscribing from marketing

Every marketing email we send will include a way to unsubscribe. You can also contact us directly.

Once you unsubscribe, we may keep a limited record of your email address on a suppression list to make sure we do not send you further marketing emails. UK government guidance states that marketing emails must give people the ability to opt out or unsubscribe.

13. Children

Our website and marketing are not intended for children under 18.

We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

14. Links to other websites

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices, content or security of those third parties. You should read their privacy policies before providing personal information.

15. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. Where changes are significant, we may notify you by email or through the website.

16. Contact us

For questions about this Privacy Policy or how we use your data, contact us via our channels.

You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how we use your personal information.