Privacy Policy

Most of this comes from you directly. Business contact data for prospecting comes from public and commercial sources. Guest data comes from our client. Some technical data is collected automatically through cookies.

Enquiry and contact data: name, email, company, role and message when you contact us, book a call (Calendly) or leave your email on the site.

Business contact data for prospecting: name, job title, employer, work email address and public LinkedIn profile of people in roles our service is relevant to. See clause 2.

Client and booking data: contact, billing and contract details to run a Night. Payment is handled by our provider and we do not store full card details.

Guest data, for a client: where a client asks us to run RSVPs, Guest names, work emails and dietary or access needs. The minimum only, deleted after the Night.

Technical and usage data: IP, device and browser, site usage via cookies and analytics.

Marketing data: your preferences if you ask for updates.

If you received an email or a LinkedIn message from us and you have never contacted us, this is the clause that applies to you. We are telling you this under Article 14 of the UK GDPR, which covers personal data we obtained from somewhere other than you.

What we hold: your name, job title, employer, work email address and public LinkedIn profile. Nothing else.

Where we got it: LinkedIn and LinkedIn Sales Navigator, the business contact databases Apollo and Wiza, your employer's own website, and public company records. We do not buy consumer lists and we do not collect personal email addresses.

Why we hold it: to contact you at work about a business service relevant to the job you do.

Our lawful basis: legitimate interests, being our interest in marketing a business service to the corporate roles it is built for. We have carried out and recorded a legitimate interests assessment, available on request.

PECR, plainly: under the Privacy and Electronic Communications Regulations we may email a corporate subscriber, meaning a limited company, LLP or plc, without prior consent, provided we identify ourselves and offer an easy way out. We do not cold-email sole traders or unincorporated partnerships, who count as individual subscribers, without their consent.

LinkedIn: we send connection requests through LinkedIn's own tools. We do not scrape LinkedIn or store data behind its login beyond the details listed above.

Your right to object: reply with no thanks, or email charlie@connectthevibe.com, and we will remove you and keep only the minimum record needed to make sure we never contact you again. You do not have to give a reason and we will not ask for one.

Respond to enquiries and provide services: contract plus legitimate interests. Manage bookings, payments and records: contract plus legal obligation for tax and accounting. Prospecting and business-to-business marketing: legitimate interests as set out in clause 2, with an unsubscribe or opt-out in every message. Run a Night including Guest logistics: legitimate interests, and for Guest data as our client's processor. Updates and marketing to people who asked for them: consent, withdrawable at any time. Operate, secure and improve the site and analytics: consent for non-essential cookies plus legitimate interests.

Suppliers, the venue and our delivery lead, to deliver a Night. Service providers and processors acting on our instructions: scheduling such as Calendly, the website and form backend, email and outbound tooling, analytics, hosting, and our accounting software. Professional advisers. Authorities where required by law or to defend claims. We do not sell your data.

Where we process Guest personal data to run a Night for a client, the client is the controller and we act as their processor. We use it only to deliver the Night, keep it secure, do not use it for our own marketing, and delete it after the Night.

As processor we act only on the client's documented instructions, keep the data confidential, engage sub-processors only under equivalent terms, help the client respond to data-subject requests and any personal data breach, and delete or return the data after the Night.

We use essential cookies only. They make the site work and need no consent.

Our analytics is our own and it is cookieless. It records page views and clicks on our two calls to action, straight into our own database. It sets no cookie and uses no browser storage. It runs only if you click Accept on our banner, and nothing is recorded before you do, in line with PECR as amended by the Data (Use and Access) Act 2025. We also log technical failures of our own forms, so a lost enquiry doesn't go unnoticed. That log records only which form failed, the page and the error code, never anything you typed, and it happens whatever your cookie choice.

We do not record your IP address, we do not use any identifier that survives beyond the browser tab, we do not profile you, and no third party is involved.

You can change your choice at any time using the "Cookie settings" link in the footer.

Where providers process data outside the UK, we rely on an adequacy decision or appropriate safeguards (e.g. the UK International Data Transfer Agreement or Addendum).

Prospect and business contact data: up to 12 months from the last engagement, then deleted. If you opt out we keep only a suppression record so we do not contact you again.

Enquiry and unconverted data: up to 24 months. Booking, contract and financial records: up to 7 years, for tax and legal reasons. Guest data: deleted after the Night. Marketing data: until you unsubscribe.

Reasonable technical and organisational measures to protect data against loss, misuse and unauthorised access, including access controls, encrypted transfer and vetted processors. If a personal data breach puts your rights at risk we will tell the ICO within 72 hours and tell you without undue delay.

We do not make decisions about you by solely automated means, and we do not carry out profiling.

Access, correction, erasure, restriction, objection, portability, and where we rely on consent, withdrawal at any time. Where we rely on legitimate interests you have an absolute right to object to direct marketing, and we will stop. Email charlie@connectthevibe.com. We respond within the statutory time limit, usually one month, and it is free.

If unhappy with how we handle your data, contact us first at charlie@connectthevibe.com. We operate a data protection complaints process and respond within 30 days. You may also complain to the ICO at ico.org.uk, 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Our services and site are aimed at businesses and adults. We do not knowingly collect children's data.

We may update this policy; the version in force is the one published here, with the effective date shown.