On Infinite Island, we value the protection and respect of your privacy and data. Please review this policy in order to understand how and when we collect your data as well as how we use it.

​

About Us
Infinite Island is a registered Limited Company in the UK (Company Registration No. 13631614). The registered address is 804 Glasshouse Gardens, E20 1HT, London, UK.

​

 

Where and how we collect information from you

​

1.     Direct Consent

Our website collects your information only when you consent for it to be collected. This is done through our Newsletter Subscription portal, when Signing Up for our exhibition events, or when submitting exhibition materials for the Infinite Island, as well as through our Online Chat system and Contact Us form. The data collected in these sections is gathered through forms in which you will have to enter the personal information we ask. By filling the forms and by accepting the privacy notice at the bottom of each page, you will directly consent for us to collect the information you entered.

​

2.     Observed

We use cookies in order to track activities that happen on our website. The information and data gathered is not personal and is anonymised. This is statistical information which measures quantifiable data about how users interact with our website. Cookies are currently active on every page of our website. You will be able to disable Cookies through the settings menu of the browser you may be using.

​

3.     Inferred

We may use algorithms to analyse the data on records of purchase and social media usage for activities related to our website, products and services. This type of information is also anonymised.

​

 

The information we collect
The information we collect may include your full name, address, date of birth, email address, IP address, gender, phone number, The personal information we collect might include your name, address, email address, IP address, and data about which of our pages you may visit and interact with.

​

We never collect and store sensitive personal data such as card details in order to protect your purchases and experience on our website. Payments are processed by a secure third party provider (Acquirer). Card details are processed for payments using Transport Layer Security (TLS) version 1.2 (Please read the section below “Third parties working with us” to know more about how your data is handled when another party is necessarily involved).

​

What we use your information for
We use your information for the following reasons:

1.     Process payments on our website.

2.     Provide you (if you consent) with targeted marketing materials that may be of interest to you.

3.     Verify your identity, age and address if you were to enrol for one of our courses.

4.     Verify your identity, age and address if you were to be part of an art competition.

5.     Process the details of your entries if you were to apply for one of our competitions.

6.     Provide you with updates and notify you about changes in policies and T&Cs.

7.     Process job applications.

8.     Process any obligations we are due to you.

9.     Process your enquiries.

10.  Process your bookings for exhibition events and educational activities.

11.  Profiling activities in order to prevent activities such as fraud

​

Handling of Data – Marketing
We may use your personal information in order to understand which products and services may be of interest to you as well as improve on services you may be using already.

​

Please note that we will never contact you by any means (email, phone, or address) for marketing and promotional purposes without having your consent to do so first. You can give us your consent to contact you by ticking the relevant boxes in sections of our websites where you will be able to provide us with your details.

​

You can change your marketing and contact preferences at any time by also emailing us at hello@infiniteisland.co

Please note that your data is not provided to external organisations or third parties websites for promotional material or marketing purposes.

​

Other websites linked to us

Parts of our website contain links that may redirect you to a website run by a different organisation (e.g. social media, or one of our partners). Please note that we are not liable for the privacy policy of these websites. Please ensure that you read their privacy policy when you visit these linked websites.

​

Third parties working with us
We may hand over your information to Third Party Service Providers contracted by us in order to process the services available on our website.

​

This include Card Processing services by Worldpay, Stripe, American Express, Cypto, Woocommerce and Shopify which regulate the information about your payment details. We recommend consulting the Privacy Policy of these service providers in order to understand how they handle your sensitive data.

​

Furthermore, we use Stripe for payment, analytics, and other business services. Stripe collects identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

​

We may occasionally analyse anonymised data using algorithms provided by third-party service providers. This allows us to improve our online facilities offering our service for more targeted and quality content. As such, your anonymised data is only used for quality and service improvements and will never be shared with third parties for them to carry out their own potential marketing campaigns and similar activities. We also never provide or share, at any time, your personal details with Third Party Product Providers.

​

We will do our best in order to ensure that your data is constantly protected at all times. At the same time, we may have to share details in the case of a law enforcement or meet legal any potential obligations or whether such action is needed in order to protect the safety of our customers and services (including for fraud prevention).

​

How can you access your personal information?

You may ask us to provide you with the details of the data we have about you at any time by contacting hello@infiniteisland.co

​

Moreover, we are working on new ways that will allow you to securely access your personal data at any time as well as allow you to modify any information you may feel is inaccurate.

​

You can also contact us at hello@infiniteisland.co if you wish to ask us to change any personal detail we have about you.

​

The security of your data.

We take the protection of your data very seriously and we always strive to ensure that it is properly.

​

When you navigate on our website, your data is always encrypted using SSL encryption technology. A green lock screen will appear on the left corner of the URL bar signifying the encryption of your data.

​

Our card payment processor also uses encrypted technology to handle your sensitive information such as card details.

Please note though that non-sensitive details that live or are transmitted over the internet can never be guaranteed totally secured for the mentioned reasons. Non-sensitive information can be your email address, or first name, etc., and you are providing this information to us at your own risk.

​

Please note that most areas of our website also lock and secure your information through means such as a password required to access your account and details. This applies to sections such as your Online Account to book in for our Exhibition Events as well as your account to exhibition materials. Please note that we do not have access, nor have access to parts, of your passwords for security purposes. Please ensure that you choose a secure and memorable password and do not share it with anyone.

​

16 Years Old or Under

If you are aged 16 or under, we will need the consent of your parents in order to handle your data. If you are applying for an Exhibition Events and you are 16 or under, an adult has to complete the enrolment form and create an account on your behalf.

​

If you are under 18 years old, you will not be able to apply for the Exhibition Events and hence, we will not store any data about underage applicants.

​

Website recording

Our website uses Hotjar website recording services in order to track activities such as mouse clicking, scrolling, keyboard typing, and page interactions on our website in order to identify errors on our web pages and to track the content that our audiences find engaging. This service is provided by Hotjar and the data gathered is anonymised and is for internal use only to be handled by Infinite Island.

​

We also use Google Analytics to track, register, and understand traffic flows and data on our website.

​

The gathering of this data by Google Analytics and Hotjar is for statistical purposes and therefore, the data itself is anonymised.

​

Your Information Outside of the EU

We will not transfer your personal information outside of the EU (and EEA) unless necessary. Circumstances in which personal information and data may have to be moved outside of the EU would be in our own events. In this instance, exhibitors and attendees may be part of touring exhibitions and exchange of data with our Partner’s Platforms hosting the exhibitions is necessary in order to guarantee the running of the event and the participation of the exhibitors.

​

Data sourced from other locations (see first section ‘Where and how we collect information from you’) will not be transferred outside of the EU. We may use anonymised data outside of the EU for statistical purposes.

​

NHS Test & Trace. Recording customer details: how we use your information.

​

To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we have been mandated by law to collect and keep a limited record of staff, customers and visitors who come onto our premises for the purpose of contact tracing.

​

By maintaining records of staff, customers and visitors, and sharing these with NHS Test and Trace where requested, we can help to identify people who may have been exposed to the coronavirus.

​

As a customer/visitor of Infinite Island you will be asked to provide some basic information and contact details. The following information will be collected:
 

• the names of all customers or visitors, or if it is a group of people, the name of one member of the group

• a contact phone number for each customer or visitor, or for the lead member of a group of people

• date of visit and arrival time and departure time

​

The venue/establishment as the data controllers for the collection of your personal data, will be responsible for compliance with data protection legislation for the period of time it holds the information. When that information is requested by the NHS Test and Trace service, the service would at this point be responsible for compliance with data protection legislation for that period of time.

​

The NHS Test and Trace service as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from the venue/establishment, that it holds from loss, misuse, and unauthorised access, disclosure, alteration and destruction.

​

In addition, if you only interact with one member of staff during your visit, the name of the assigned staff member will be recorded alongside your information.

​

NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them.

​

For example, if another customer at the venue reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of customer details for a particular time period (for example, this may be all customers who visited on a particular day or time-band, or over a 2-day period).

​

We will require you to pre-book appointments for visits and scan a QR code on arrival.

​

Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will not be used for other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to do so by law (for example, as a result of receiving a court order).

​

In addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit.

​

However, the government guidance may also cover information that we would usually collect and hold onto as part of our ordinary dealings with you (perhaps, for example, your name, date of birth and phone number). Where this is the case, this information only will continue to be held after 21 days and we will use it as we usually would, unless and until you tell us not to.

​

Your information will always be stored and used in compliance with the relevant data protection legislation.

​

The use of your information is covered by the General Data Protection Regulations Article 6 (1) (c) – a legal obligation to which we as a venue/establishment are subject to. The legal obligation to which we’re subject, means that we’re mandated by law, by a set of new regulations from the government, to co-operate with the NHS Test and Trace service, in order to help maintain a safe operating environment and to help fight any local outbreak of coronavirus.

​

Infinite Island will not transfer this data collected for the NHS Test and Trace outside the UK or the EU.

​

By law, you have a number of rights as a data subject, such as the right to be informed, the right to access information held about you and the right to rectification of any inaccurate data that we hold about you.

​

You have the right to request that we erase personal data about you that we hold (although this is not an absolute right).

​

You have the right to request that we restrict processing of personal data about you that we hold in certain circumstances.

​

You have the right to object to processing of personal data about you on grounds relating to your particular situation (also again this right is not absolute).

​

If you are unhappy or wish to complain about how your information is used, you should contact a member of staff in the first instance to resolve your issue.

​

If you are still not satisfied, you can complain to the Information Commissioner’s Office. Their website address is www.ico.org.uk.

​

You can also email hello@infiniteisland.co if you want to speak about any concern you may have about your data.

We keep our privacy notice under regular review, and we will make new versions available on our privacy notice page on https://www.infiniteisland.co/privacy-policy/. 

 

Review of this Policy

We may update the terms of our Privacy Policy in order to comply with the most recent data protection laws and in order to guarantee the safety of your information at all times.

​

Please note that by using our website, you accept these terms and conditions which shall be binding upon you.

This privacy notice was last updated on 1st October 2022.

​

​

 

​