Privacy Policy
Last updated: December 2024
Contents
1. Who We Are
tim (Trade Show Impact Management) is a service operated by Pie Factory London Limited ("PIE", "we", "us", or "our"), the data controller responsible for your personal data.
Company Details:
- Company Name: Pie Factory London Limited
- Company Number: 14653998 (registered in England and Wales)
- Registered Address: 36 Fifth Avenue, Havant, Hampshire, PO9 2PL, United Kingdom
- Email: hello@wearepie.com
- Website: tradeshowtim.com
This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the tim platform and related services.
2. Data We Collect
We collect various types of information when you use our Service:
Account Data
- Name and email address
- Company/organization name and details
- Job title and role
- Password and authentication credentials
- Profile information you choose to provide
Uploaded Content
- Photographs and images of trade show booths
- Materials data and specifications
- Booth designs, layouts, and dimensions
- Vendor and supplier information
- Event and exhibition details
- Any other content you upload to the platform
Usage Data
- Log data (IP address, browser type, pages visited, time spent)
- Feature usage and interaction patterns
- Search queries and filter preferences
- Reports generated and analyses performed
Device & Technical Data
- Device type, operating system, and browser information
- Unique device identifiers
- Geolocation data (with your consent)
- Mobile device information when using our mobile features
Third-Party Data
- Information from authentication providers (e.g., Google, Microsoft)
- Publicly available company information
- Data from partners and service providers
3. How We Use Your Data
We use your data for the following purposes:
Providing the Service
- Operating and maintaining your account
- Processing and analyzing uploaded content
- Generating ESG scores, carbon calculations, and reports
- Providing customer support
Improving and Developing the Service
- Training and improving our AI and machine learning models using all uploaded content, including photographs
- Developing new features and functionality
- Analyzing usage patterns to enhance user experience
- Conducting research and development
Benchmarking and Industry Insights
- Creating aggregated industry benchmarks and reports
- Developing sustainability standards for the trade show industry
- Publishing anonymized industry research and insights
- Providing comparative analysis across events and regions
Marketing and Communications
- Sending service updates and announcements
- Marketing our products and services
- Sharing industry news and insights
- Promoting events and webinars
Business Operations
- Sharing data with business partners and affiliates
- Monetizing aggregated and anonymized datasets
- Fulfilling legal and regulatory obligations
- Protecting our rights and preventing fraud
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: Processing necessary to provide the Service you have requested, including account management and core functionality.
- Legitimate Interests: Processing for our legitimate business interests, including improving our services, AI training, creating benchmarks, marketing, and fraud prevention. We have conducted balancing tests and believe our interests do not override your rights.
- Consent: Where required, we will obtain your consent for specific processing activities, such as marketing communications or location tracking.
- Legal Obligation: Processing necessary to comply with applicable laws and regulations.
5. Data Sharing
We may share your data with the following categories of recipients:
PIE Group Companies
We share data within the PIE group of companies for business operations, service delivery, and administrative purposes.
Service Providers
We engage third-party service providers to perform functions on our behalf, including:
- Cloud hosting and infrastructure (Amazon Web Services)
- Analytics and performance monitoring
- Email and communication services
- Payment processing
- Customer support tools
Business Partners
We share data with business partners, including:
- Industry associations and standards bodies
- Event organizers and venue operators
- Sustainability consultants and auditors
- Research institutions and academic partners
Aggregated and Anonymized Data
We freely share aggregated, anonymized, and de-identified data with third parties, including:
- Industry benchmark reports and publications
- Academic research and publications
- Media and press inquiries
- Commercial data products and services
This aggregated data cannot reasonably be used to identify you.
Legal and Regulatory
We may disclose your data when required by law, court order, or government request, or when necessary to protect our rights, property, or safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
6. International Data Transfers
Your data may be transferred to, stored, and processed in countries outside the European Economic Area (EEA) and the United Kingdom, including the United States.
When we transfer data internationally, we implement appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission
- Data processing agreements with recipients
- Transfers to countries with adequacy decisions
By using the Service, you consent to your data being transferred internationally as described in this policy.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:
- Account Data: Retained for the duration of your account and for a reasonable period thereafter for legal and business purposes.
- Uploaded Content: Retained indefinitely for AI training, benchmarking, and research purposes, even after account termination.
- Generated Content: Retained indefinitely as part of our intellectual property and benchmarking database.
- Usage Data: Retained for analytical purposes and to improve our services.
- Aggregated Data: Retained indefinitely in anonymized form.
We may retain certain data as required by law or for legitimate business purposes, including dispute resolution, fraud prevention, and enforcing our agreements.
9. Your Rights
Under applicable data protection laws, you may have certain rights regarding your personal data. These rights are subject to limitations and exceptions under applicable law.
Right of Access
You may request a copy of the personal data we hold about you. We may require verification of your identity before processing such requests.
Right to Rectification
You may request that we correct inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data. However, this right is limited. We may refuse deletion requests where:
- Data is required for compliance with legal obligations
- Data is necessary for our legitimate interests, including research and benchmarking
- Data has been anonymized and incorporated into aggregated datasets
- Data is needed for the establishment, exercise, or defense of legal claims
Deletion requests will be evaluated on a case-by-case basis.
Right to Restrict Processing
You may request that we restrict processing of your data in certain circumstances.
Right to Data Portability
You may request to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing of your personal data based on legitimate interests. However, we may continue processing if we demonstrate compelling legitimate grounds.
Automated Decision-Making
Our Service uses automated processing to generate ESG scores and analysis. These automated processes are integral to the Service functionality. We do not provide an opt-out for automated decision-making as it is essential to the service we provide.
Exercising Your Rights
To exercise any of these rights, please contact us at hello@wearepie.com. We will respond to your request within the timeframes required by applicable law.
10. Security
We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Access controls and authentication requirements
- Regular security assessments and monitoring
- Employee training on data protection
However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.
11. Children
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at hello@wearepie.com.
12. Changes to This Policy
We may update this Privacy Policy at any time. Changes will be effective immediately upon posting to the Service. We are not obligated to notify you of changes.
Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.
13. Contact & Complaints
If you have any questions about this Privacy Policy or our data practices, please contact us:
Pie Factory London Limited
36 Fifth Avenue
Havant, Hampshire
PO9 2PL
United Kingdom
Email: hello@wearepie.com
Supervisory Authority
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF
United Kingdom
Website: ico.org.uk
Helpline: 0303 123 1113