SocialDay Privacy Notice
Last updated May 2025
1. Who we are
Controller: Skills of the Future Ltd (trading as “SocialDay”)
Company number: 14653448
Registered office: 86-90 Paul Street, London, EC2A 4NE, United Kingdom
Data-protection lead: privacy@socialday.co.uk
2. Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Identity | Name, job title, organisation | Ticket forms |
| Contact | Email, phone (optional), social handles | Ticket forms, networking app |
| Transaction | Ticket purchases, invoices, discount codes | TicketTailor, Stripe |
| Technical | IP address, browser, device identifiers, cookies | Website & ticketing pages |
| Engagement | Session choices, surveys, event photos & video | You; photographer |
| Marketing prefs | Opt-in/out status, email interactions | You; Mailchimp; Constant Contact; Squarespace Email |
Special-category data: We process dietary/access requirements only when you choose to provide them (Art. 9 (2)(a) explicit consent).
3. How & why we use your data
- Ticket processing & entry – Contract (Art 6 (1)(b))
- Event delivery & CPD certificates – Legitimate interest
- Post-event follow-up – Legitimate interest
- One-to-one sponsor follow-up (named sponsors only) – Legitimate interest (opt-out anytime)
- Email newsletters & promos – Consent (checkbox/double-opt-in via Mailchimp / Constant Contact / Squarespace Email)
- Legal & tax compliance – Legal obligation
4. Data sharing
We share personal data only with:
- Named event sponsors/speakers – under a Limited-Use Data Agreement that forbids bulk email, resale, or further disclosure.
- Service providers – TicketTailor (registration), Stripe (payments), Mailchimp, Constant Contact & Squarespace Email (mailings), Typeform (surveys), venue & AV suppliers.
- Regulators / law enforcement – where legally required.
We do not sell or rent your data.
5. International transfers
Mailchimp (US), Constant Contact (US) and Typeform (EU) may store data outside the UK/EU. Transfers rely on UK/EU Standard Contractual Clauses plus supplementary security measures.
6. Retention periods
- Finance records → 7 years
- Sponsor delegate lists → 90 days after release, then deleted/anonymised
- Marketing list → until you unsubscribe or 24 months of inactivity
- Event photos/video → 5 years (unless you object)
- Cookie data → per banner settings (analytics max 13 months)
7. Your rights
You may access, correct, delete, restrict, object to processing, request portability, or withdraw consent at any time. Email privacy@socialday.co.uk. We respond within one month. Complaints may be raised with the UK ICO (ico.org.uk).
8. Cookies
Our cookie banner lets you manage analytics and marketing cookies. Essential cookies required for checkout/login are always active.
9. Security
- TLS encryption on all web traffic
- Multi-factor authentication for all SaaS accounts
- Role-based access & least privilege controls
- Annual penetration tests & staff GDPR training
- Sponsor lists shared via password-protected links that expire after 7 days
10. Updates
We may amend this notice to reflect legal or service changes. The latest version will always appear on this page; material changes will be emailed to registered users.