attractions.agency keeps all client data secure and confidential, as per our client agreements.

We are a part of Semantic Ltd, a digital agency with over 20 years' experience helping attractions in the UK and around the world.

We are governed by Semantic's policies, and their privacy policy which is included below.

‍

Employee and client data

For the limited amount of employee and client business contact details we store, we are sure to keep them private and confidential:

• We don't share data
• We keep our systems and processes secure
• The team is trained to use secure systems and passwords
• We do not collect, process or store user data for clients. Limited data may be provided by the client so that we can assist in bug fixes, but this is deleted as soon as the request is complete.

Our full policy is below, but please email Neil with any questions (neil@semantic.co.uk)
‍

Full Privacy Policy

Our privacy policy tells you how we collect and process data received when you contact us using our site. If you have any comments on this privacy policy, please email them to neil@semantic.co.uk

Who we are

Here are the details that the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regards to the processing of personal data and on the free movement of such data, known as General Data Protection Regulation (GDPR) says we have to give you as a 'data controller':

• Our site address is www.semantic.co.uk
• Our company name is Semantic
• Our registered address is Epsilon House, Southampton Science Park, Southampton, SO16 7NS
• Semantic is not required to appoint a Data Protection Officer because it does not engage in a) large scale, regular and systematic monitoring of individuals or b) large scale processing of special categories of data or data relating to criminal convictions and offences.

What we collect

All Cookies used by and on our website are used in accordance with current English and EU Cookie Law. Cookies are small text files on your computer.

We do not use 1st-party cookies which contain PII on the website but do make use of several 3rd-party services to make sure we can give you the best experience:

• Google Analytics
  This uses cookies to collect information about your access to the site but this does not contain PII that we can use to identify you. You can visit the Google website to check their privacy policy.
• Hotjar
  We sometimes run heatmaps, tests and surveys on the site with Hotjar. PII is only collected if you enter it into the surveys, so we would advise against doing this - https://www.hotjar.com/legal/policies/privacy
• Hubspot
  We store certain 'first-contact' data here to help us build long-term relationships. - https://legal.hubspot.com/privacy-policy

You can change your browser to block cookies if you prefer. Instructions for doing this are available online or you can contact us and we’ll be happy to help.

How we use your data

We use information about you to:

• Provide information, products and services that you request
• Carry out our contracts with you.

If you are a client, we will only use your details to contact you with company news relevant to our ongoing relationship.

We don’t use your data for marketing or pass it on to advertisers or third parties for marketing purposes.

Your business contact data will be used for invoice processing and client support.

Where we store your data

We will do everything we can to keep your data secure. Data may be transferred to systems outside the European Economic Area (EEA) (e.g. on global services such as Google Drive and Evernote). By giving us your personal data, you agree to this arrangement. It is company policy to protect all accounts by strong passwords and 2 Factor Authentication (where available). Our devices and backups are encrypted.

If we give you a password, you must keep it confidential. Please don't share it but keep it safe, as we do not keep records of passwords. When transferring data to you, we cannot guarantee complete security, particularly if using email. We recommend that you enable encryption for your email where possible.  Sensitive data must be transferred using secure encrypted services.

We only keep your personal data for as long as we need to in order to use it as described above in section 5, and/or for as long as we have your permission to keep it. In any event, we will conduct an annual review to ascertain whether we need to keep your personal data. Your personal data will be deleted if we no longer need it.

Disclosing your information

We are allowed to disclose your information in the following cases:

• If we have a legal obligation to do so, or in order to protect other people's property, safety or rights
• To protect against fraud or credit risks
• If we want to sell our company, we can disclose it to the potential buyer

If setting up services with third party providers (e.g. for hosting) we recommend that you own this relationship. If you prefer us to setup these services, we will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under GDPR and the law.

Your rights

Under the GDPR, you have the right to:

• request access to, deletion of or correction of, your personal data held by us (at no cost to you)
• request that your personal data be transferred to another person (data portability)
• be informed of what data processing is taking place
• restrict processing
• to object to the processing of your personal data
• complain to a supervisory authority

You also have rights with respect to automated decision-making and profiling as set out in section 11 below. To enforce any of the foregoing rights or if you have any other questions about our site or this Privacy Policy, please email neil@semantic.co.uk.

Links to other sites

Our terms and conditions and our policies will not apply to other websites that you get to via a link from our site. We have no control over how your data is collected, stored or used by other websites and we advise you to check any privacy policies carefully before providing any data to them.

Automated Decision-Making and Profiling

We do not use automated decision making or profiling on our website or as part of our business.

The Legal Stuff

All parties will use their best efforts to negotiate in good faith with regards to any dispute or breach of this agreement. If this is not possible then the assistance of a third-party mediator is acceptable (to be mutually agreed). All negotiations connected with the relevant dispute(s) will be conducted in confidence and without prejudice to the rights of the Parties in any further proceedings.

Any dispute shall not affect the Parties' ongoing obligations under this Privacy Policy.

The English courts have the only right to hear claims related to our site, and all disputes are governed by English law.

If we change our Privacy Policy, we will post the changes on this page and may also email you.

‍

‍