Charte de confidentialité

Studio B01 Limited exerçant sous le nom de The Flash Pack

Mise à jour : juin 2025

1. Présentation de l’entreprise

We are a content experience and technology provider trading as The Flash Pack. Our services include:

Content capture (photo/video), processing and sharing
Events and brand activations
Software development for interactive installations
Photobooth installations at venues, including revenue-share models

2. Données collectées

Depending on your interaction with us, we may collect:

From participants:

Photo or video content of you
Email address or contact details
Marketing consent (if given)
Location, timestamp and interaction data
Occasionally, images of children if they participate.

From paid-to-use photobooth users:

Payment data (via PCI-compliant third-party processors)
Device and usage data
Photo or video content of you
Email address or contact details (if given)
Marketing consent (if given)
Location, timestamp and interaction data
Occasionally, images of children when family photos are taken

From clients and suppliers:

Business contact details (name, email, phone, role)
Billing and contract information

From website users:

IP address, browser type, usage metrics.
Cookie and tracking data, including analytics ad third-party tags (e.g. Google Analytics)

3. Remarque spéciale concernant les enfants

Our photobooths and content capture experiences are designed for a general audience and may be used by children, particularly in public or family-friendly venues. We do not actively target our services to children under the age of 13 and we do not knowingly collect personal data directly from children without the involvement or consent of a parent or guardian.

However, due to the self-service nature of our photobooths, we may inadvertently capture images or video content that includes children. Where this occurs, we treat such content as personal data and apply the same high standards of security and retention. Where appropriate, we may take additional steps (such as restricted access or deletion) if we are made aware that data has been collected from or about a child without appropriate consent.

We do not knowingly collect marketing consents from users under the age of 13 and any marketing data collected without valid consent will be deleted upon request.

If you are a parent or guardian and believe your child has interacted with our services without your consent, please contact us at hello@itstheflashpack.com to request removal or further information.

4. Utilisation des données collectées

We use your data only where lawful. Purposes include:

Delivering photo/video experiences — Consent
Sending your image/video to your email/device — Consent
Providing our services to clients — Contract
Processing payments via third-party processors — Contract
Communicating with clients — Legitimate interests
Marketing (only with opt-in) — Consent
Legal/regulatory compliance — Legal obligation
Business transfers or restructuring — Legitimate interests

5. Notre rôle en tant que contrôleur ou gestionnaire de données

In the case of data capture in one of our photo booths or experiences, you will always be notified within the capture screens who the data controller is. A link will also be provided to the relevant privacy policy for that experience so you can review how your personal data will be used before continuing.

In general;

We are the controller when we collect data directly from participants and this is not shared with our client (e.g. for entertainment-only content).
We are a processor when we deliver experiences on behalf of a client and share data with them. In such cases, the client is the controller, and their privacy policy applies.

6. Sécurité des données

We are committed to ensuring that your personal data is secure. To prevent unauthorised access, accidental loss, or disclosure, we have put in place appropriate technical and organisational measures, including:

Secure encrypted transmission of data where applicable (e.g., SSL/TLS)
Access controls and authentication for internal systems
Use of ISO 27001-compliant third-party hosting where applicable
Regular software updates and patching of security vulnerabilities
Encrypted storage for content (photo/video) where appropriate

Data beach protocol: In the event of a suspected data breach, we will assess the impact and notify the relevant supervisory authority (e.g. ICO) and affected individuals where legally required.

7. Traitement des paiements

Si nos photomatons acceptent les paiements par carte, ces derniers sont gérés par des gestionnaires conformes à la norme PCI DSS (AIB Merchant Services). Nous ne stockons pas les informations complètes de votre carte. Les données relatives aux paiements sont traitées de manière sécurisée, conformément aux normes de l’industrie.

8. Partage de vos données

We may share your personal data with:

Clients (only where explicitly disclosed during content capture)
IT, analytics and hosting providers (AWS, Google Workspace)
Payment processors (e.g. AIB Merchant Services)
Legal, tax, and professional advisers
Regulatory authorities

All third parties are contractually required to protect your data and use it only as instructed by us.

9. Transferts internationaux

We operate globally and some of our providers are outside the UK/EEA. Where we transfer data internationally, we use appropriate safeguards such as:

UK adequacy decisions
Standard Contractual Clauses (SCCs)
Binding corporate rules or equivalent mechanisms

10. Politique en matière de cookies

We use cookies and similar technologies to:

Ensure the website functions correctly
Analyse site usage and performance
Personalise your experience

Types of cookies:

Necessary cookies — essential for basic site operation
Analytics cookies — e.g. Google Analytics
Functionality cookies — e.g. remembering preferences

You can manage or disable cookies through your browser. Blocking some cookies may impact your experience.

11. Data Retention

Participant content: retained for up to 6 months
Client and contract data: retained for up to 7 years
Marketing data: retained until opt-out
Payment logs: as required by law

12. Vos droits

You have rights under data protection law, including:

Access to your personal data
Rectification of inaccurate data
Erasure of data (in some cases)
Restriction or objection to processing
Data portability (where applicable)
Withdrawal of consent (where consent was given)

To exercise any of these rights, email: hello@itstheflashpack.com Or write to: Studio B01 Limited, B01 Parkhall, 40 Martell Road, London, SE21 8EN

13. Modification de la présente charte

We may update this Charte de confidentialité from time to time. The latest version will always be available on our website, with a note of the last revision date.

14. Coordonnées de l’ICO pour réclamation

Si vous jugez notre utilisation de vos données personnelles insatisfaisante, vous pouvez porter réclamation auprès de l’ICO (Information Commissioner’s Office), à savoir le bureau chargé de la protection des données au Royaume-Uni.

Website: https://ico.org.uk

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Phone: 0303 123 1113