How we use information collected through chaos-management.co.uk

​

This notice applies to our website and contact form. It does not describe all personal information handled during client projects, which is covered by our wider business data protection arrangements.

​

1. Who we are

Chaos Management (UK) Limited provides B2B event operations, event safety and crowd safety consultancy services. We are the controller of personal information collected through this website. This means we decide why and how that information is used.

Registered office: Sorby House, 42 Spital Hill, Sheffield, South Yorkshire, S4 7LG

Company number: 06741998

Privacy enquiries: info@chaos-management.co.uk

​

2. Information we collect

We collect only the information needed to operate the website, respond to enquiries and understand how the website is being used.

• Contact form information: first name, optional last name, email address and the contents of the message.

• Correspondence: information contained in emails and any follow-up communication about an enquiry.

• Technical and usage information: IP address, approximate location, device and browser information, pages viewed, visit times, how a visitor reached the website and how the website is used.

• Cookie choices: records of the visitor's consent selections, which can include the IP address, device information and the date and time of the choice.

 

Please do not use the website contact form to send special category information, detailed incident reports or confidential event-safety documents. Contact us first so that we can agree an appropriate method of transfer.

​

3. How and why we use it

Responding to enquiries. We use contact details and messages to respond, discuss requirements and take steps requested before a possible contract. Our lawful basis is taking steps at the person's request before entering into a contract and, where appropriate, our legitimate interests in handling B2B enquiries and maintaining suitable business records.

​

Operating and securing the website. We use necessary technical information to deliver the website, prevent misuse, diagnose faults and protect the website and our systems. Our lawful basis is our legitimate interests in operating a reliable and secure business website.

​

Website analytics. We may use analytics to understand website performance and improve our content. This may include pages viewed, visit patterns, approximate location, device and browser information and how visitors reached the website. Where consent is required, analytics information is collected only after the visitor accepts the relevant cookies through our cookie settings. Our lawful basis for personal information collected through those analytics is consent.

​

Cookie preferences. We use necessary technology to remember and demonstrate a visitor's privacy choices. This is required to operate our consent arrangements and comply with our legal obligations.

​

4. Marketing

We do not currently add website enquiries to a marketing mailing list or use contact-form details to send promotional emails. If this changes, we will provide an appropriate choice and update our practices before marketing begins. We do not sell personal information.

​

5. Cookies and analytics

Cookies are small files or similar technologies used by websites to make features work, remember choices and, where permitted, measure website use. Essential cookies may operate without consent where they are necessary. Analytics and other non-essential technologies are controlled through our cookie banner where consent is required.

​

Visitors can accept, refuse or adjust non-essential cookies and can change their choice later using the privacy-settings control on the website. Our separate Cookie Policy identifies the cookies and providers found on the live website.

​

6. Who receives the information

We limit access to people and service providers who need the information for the purposes described above. These currently include:

• Wix, which hosts the website, provides the contact form, stores form submissions and contacts, and provides website analytics.

• Usercentrics, which provides the cookie-consent banner and records visitors' privacy choices.

• UK2 and Stackmail, which support our business email service, and Microsoft Outlook, which we use to access and organise email.

• Our website developer or other authorised support provider, but only where access is needed to maintain or complete the website.

 

We may also disclose information where required by law, to protect legal rights, or in connection with professional advice. We do not permit service providers to use our information for their own unrelated purposes.

​

7. International processing

Some website, consent, email and technology providers may process information outside the United Kingdom. Where this occurs, we rely on a lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, and take reasonable steps to ensure that the information remains protected.

​

8. How long we keep it

If an enquiry does not become client work, we normally retain the contact-form submission, related contact record and correspondence for no longer than 24 months after the last meaningful contact. We may delete it sooner if it is no longer needed.

​

If an enquiry develops into client work, relevant information becomes part of the client or project record and is retained under our wider business retention arrangements. Technical, analytics and consent information is retained according to the relevant service settings and only for as long as needed for the purposes described in this notice.

​

9. Security

We use appropriate technical and organisational measures to protect personal information. These include controlled account access, multi-factor authentication, device encryption, password or PIN protection and limiting access to those who need it. No internet or storage system can be guaranteed completely secure, so sensitive or confidential project material should not be sent through the general contact form.

​

10. Your rights

Depending on the circumstances, individuals may have the right to ask us for access to their personal information, correction of inaccurate information, deletion, restriction, transfer of information, or to object to certain uses. Where processing depends on consent, consent can be withdrawn at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.

​

To exercise a right, email info@chaos-management.co.uk. We may need to confirm identity before acting on a request.

​

11. Complaints

Please contact us first if you have a concern so that we can investigate it. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection.

​

ICO: ico.org.uk/make-a-complaint  |  Telephone: 0303 123 1113

​

12. Changes to this notice

We may update this notice when our website, suppliers or use of personal information changes. The current version and date will be shown on this page. We will review the notice after significant website changes and periodically as part of our compliance review.