privacy policy
last updated: 3 August 2026
We’re Zeal, a lighting and visual production company in Basingstoke. This explains what personal information we collect, why we collect it, and what you can do about it.
We’ve tried to write it in plain English rather than legal boilerplate. If anything here isn’t clear, ask us and we’ll explain it properly.
who we are
Zeal Events Ltd is the data controller for the information described here.
- Registered in England and Wales, company number 07953229
- Unit 1 Trident Centre, Armstrong Road, Basingstoke, RG24 8NU
- Registered with the Information Commissioner’s Office, reference ZA545046
For anything about your personal information, including any of the rights below, email gdpr@wearezeal.co. That reaches our Managing Director directly.
For anything else, hello@wearezeal.co or 01256 359264.
what this covers
This policy covers people outside Zeal: anyone who visits our website, gets in touch, works with us as a client or supplier, asks about working here, or signs up for our updates.
If you work for Zeal, or with us as a freelancer, the information we hold about you is covered by a separate notice which you’ll have been given directly.
what we collect, and why
when you get in touch
Our contact form asks for your name, your email address, and your message. Our used equipment form also asks for a phone number if you’d like a call back, and which item you’re asking about.
We use this to answer you, and to keep a record of the conversation so nothing gets lost between people here.
when you ask for our catalogue
We ask for your name and email address so we can send you the rental catalogue, and, if you agree, keep you posted about new stock.
when you ask about careers
We ask for your name, email address, what you do, what sort of opportunity interests you, and anything you’d like to tell us. You can include a link to a portfolio or CV if you want to.
We don’t accept file uploads through the website. If we want to see a CV, we’ll ask you to email it.
when you sign up for updates
We ask for your name, email address, and which topics you’d like to hear about.
when you work with us
If you become a client or a supplier, we’ll hold the contact details, project information and financial records needed to do the work and account for it properly.
when you visit the website
Our site is protected by Cloudflare Turnstile, which checks that submissions come from a person rather than an automated script. To do that, and to stop our forms being flooded, we record the IP address a submission comes from.
We don’t use tracking cookies or advertising cookies. Cloudflare may set cookies that are strictly necessary for security, which don’t require your consent.
Our fonts are served by Adobe Fonts, so your browser makes a request to Adobe when a page loads.
recording your consent
When you tick a box to agree to marketing, we store the exact wording you were shown along with your answer and the time. That way, if you ever ask what you agreed to, we can tell you precisely rather than approximately.
why we’re allowed to hold it
Data protection law requires us to have a lawful basis for using your information. Ours are:
Legitimate interests. For answering enquiries, considering people who get in touch about careers, and protecting our website from abuse. We’ve considered whether this is fair to you, and we think responding to someone who contacted us, and keeping our systems working, is what you’d reasonably expect.
Contract. For work we’re doing for you, or that you’re doing for us.
Consent. For marketing emails, and only for marketing emails. You gave it by ticking a box, and you can take it back whenever you like.
Legal obligation. For financial records we’re required to keep.
who else sees it
We don’t sell your information, and we don’t share it for anyone else’s marketing.
We use a small number of suppliers who process information on our behalf, under contract, and only on our instructions. They fall into four categories:
| Category | What they do |
|---|---|
| Website hosting and security | Serve this website, protect it, run the bot check on our forms, and serve the fonts you are reading |
| Our database and business systems | Store the enquiry you send, and run our email and internal systems |
| Email marketing and the catalogue | Send our catalogue and our newsletter, and only to people who asked for them |
| Background processing | Run scheduled tasks behind the scenes, such as sending internal notifications |
If you would like to know which specific providers sit behind any of these categories, ask us and we will tell you.
We’ll also share information where we’re legally required to.
information leaving the UK
Enquiries you submit through our website are stored in Ireland, which is covered by a UK adequacy decision, so no additional safeguards are needed.
Our email marketing provider is based in the United States. Where your information reaches them, the transfer is covered by the UK Extension to the EU-US Data Privacy Framework, or by the International Data Transfer Addendum to the European Commission’s standard contractual clauses.
Some of our hosting and business-systems providers may also process information outside the UK, under the same kinds of safeguards.
how long we keep it
| What | How long |
|---|---|
| Enquiries that don’t go anywhere | Up to 12 months |
| Careers enquiries | 12 months, unless you ask us to keep them longer |
| Spam and blocked submissions | A short period, so we can tell whether our filtering is working |
| Client and supplier records | For the length of the relationship, then as long as we need them for legal and accounting purposes |
| Financial records | Six years, as UK tax law requires |
| Marketing subscriptions | Until you unsubscribe, and then a minimal record that you did |
If an enquiry turns into a project, we keep it as part of that project’s history, because it’s the start of the story.
your rights
You can ask us to:
- Tell you what we hold about you, and give you a copy
- Correct it if it’s wrong
- Delete it, where we don’t have a good reason to keep it
- Restrict what we do with it while something’s being sorted out
- Send it to you or someone else in a portable format
- Stop using it, where we’re relying on legitimate interests
You can also withdraw your consent to marketing at any time. Every marketing email has an unsubscribe link, or just email us. Withdrawing consent doesn’t affect anything we did before you withdrew it, and it won’t stop us replying if you contact us about work.
Email gdpr@wearezeal.co and we’ll respond within one month. There’s no charge.
keeping it safe
Our systems require individual accounts and multi-factor sign-in, and access to personal information is limited to the people whose job needs it. Our website forms are protected against automated abuse, and information sent through them is encrypted in transit.
We keep records of who has access to what, and review it.
if you’re not happy
Tell us first, at gdpr@wearezeal.co. We’d rather fix it.
You also have the right to complain to the Information Commissioner’s Office at any time.
- ico.org.uk/make-a-complaint
- 0303 123 1113
- Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
changes
If we change how we use personal information, we’ll update this page and change the date at the top. If the change is significant, we’ll tell the people it affects rather than expecting them to notice.