Project on your mind?Let’s Talk
Last updated 14 August 2026
1.1 This Privacy Notice explains how The Place Beyond Ltd, a company incorporated in England and Wales with company number 14276518, whose registered office is at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ (The Place Beyond, we, us or our), collects, uses, shares and protects personal data.
1.2 For the purposes of UK data-protection law, The Place Beyond Ltd is the controller of the personal data described in this Privacy Notice. This means that we determine why and how that personal data is processed.
1.3 This Privacy Notice applies when you:
1.4 This Privacy Notice does not govern personal data that we process solely on a client's documented instructions while delivering services as that client's processor. That processing is governed by the relevant client agreement and, where required, separate data-processing terms.
1.5 In this Privacy Notice, personal data means information relating to an identified or identifiable individual. Processing includes collecting, recording, organising, storing, using, sharing, altering, retrieving and deleting personal data.
2.1 Questions about this Privacy Notice or our use of personal data, and requests to exercise data-protection rights, should be sent to:
Email: hello@theplacebeyond.com
Post: The Place Beyond Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ
2.2 We have not appointed a statutory data protection officer. Privacy matters are handled by the person responsible for data protection at The Place Beyond, who may be contacted using the details above.
3.1 Depending on your relationship with us, we may collect the following categories of personal data:
3.2 Our Website enquiry form currently asks for a name or company name, email address, project budget range and project description. It may also collect a company name and telephone number where supplied. Mandatory fields are identified on the form. If you do not provide them, we may be unable to respond properly or assess your enquiry.
3.3 We do not intentionally request special-category personal data, such as information about health, race or ethnicity, political opinions, religion, trade-union membership, genetics, biometrics or sexual life or orientation, nor information about criminal convictions or offences. Please do not send such information unless it is necessary and we have agreed an appropriate method and lawful basis for handling it.
4.1 We obtain personal data:
4.2 If you provide personal data about another person, you must ensure that you are entitled to do so and, where appropriate, have made this Privacy Notice available to them.
5.1 UK data-protection law requires us to have a lawful basis for each purpose for which we process personal data. Depending on the circumstances, we rely on:
5.2 We use personal data for the purposes and on the lawful bases set out below.
| Purpose | Personal data typically used | Lawful basis |
|---|---|---|
| Responding to enquiries, understanding requirements, arranging calls and preparing proposals | Identity, contact, enquiry, project and communications information | Steps requested before entering a contract where you contract personally; otherwise our legitimate interests in developing our business and responding to enquiries |
| Entering into, administering and performing client and supplier relationships | Identity, contact, project, contract, transaction, content and communications information | Performance of a contract with you; our legitimate interests in managing relationships with corporate clients, suppliers and their personnel |
| Delivering creative, strategic, design, development, production and related services | Identity, contact, project, content and communications information | Performance of a contract with you; our legitimate interests and those of our client in delivering and managing the agreed project |
| Invoicing, collecting payment, accounting, audit and tax compliance | Identity, contact, contract and transaction information | Performance of a contract; compliance with legal obligations; our legitimate interests in being paid and keeping proper business records |
| Managing feedback, quality, complaints, disputes, insurance and legal rights | Identity, contact, project, contract, transaction and communications information | Our legitimate interests in managing our services and protecting legal rights; compliance with legal obligations; establishment, exercise or defence of legal claims |
| Operating, maintaining, troubleshooting and securing the Website and our systems | Technical, usage and security information | Our legitimate interests in providing a functional and secure Website, preventing abuse and protecting our systems and users; compliance with legal obligations where applicable |
| Measuring Website performance and understanding how visitors use it | Technical, usage, marketing and cookie information | Consent where required for analytics cookies or similar technologies; our legitimate interests in understanding aggregated service performance where the processing does not require consent |
| Measuring campaigns, attributing enquiries and delivering or assessing online advertising | Technical, usage, marketing and cookie information | Consent where required for advertising cookies, pixels or similar technologies; our legitimate interests where applicable and permitted by law |
| Sending relevant news, work, service information and business-development communications | Identity, business contact, marketing and communications information | Consent where required; otherwise our legitimate interests in marketing our business to relevant professional contacts, subject to direct-marketing law and your right to object |
| Managing job, freelance and contractor applications | Identity, contact, recruitment and communications information | Steps requested before entering a contract; our legitimate interests in recruitment and resourcing; legal obligations relating to recruitment and employment |
| Business administration, reporting, planning, corporate transactions and professional advice | Identity, contact, project, contract, transaction and communications information | Our legitimate interests in operating, evaluating and developing our business; compliance with legal obligations; establishment, exercise or defence of legal claims |
5.3 Where we rely on legitimate interests, those interests include responding to business enquiries, delivering and improving our services, maintaining business relationships, keeping appropriate records, securing our Website and systems, preventing fraud and misuse, promoting our work to relevant professional audiences, recovering debts and protecting our legal rights. We consider the nature of the information, the context in which it was obtained, your reasonable expectations and the likely effect on you before relying on this basis.
5.4 Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out lawfully before withdrawal. You can change cookie preferences through the Website's cookie controls and can withdraw other consent by contacting us.
5.5 We may use personal data for a new purpose that is compatible with the purpose for which it was collected. If the new purpose is not compatible, we will identify a separate lawful basis and provide additional privacy information where required.
6.1 We may send service-related and administrative messages where necessary to respond to an enquiry, manage a project, provide a requested service, notify you of a material issue or fulfil an Agreement. These are not marketing messages merely because they concern our services.
6.2 We may send relevant business-development communications to professional contacts where permitted by law. Where consent is required, we will ask for it. We may also rely on a lawful business-to-business marketing basis or, where applicable, the existing-customer exception under the Privacy and Electronic Communications Regulations.
6.3 You have an absolute right to object to the use of your personal data for direct marketing at any time. You can unsubscribe using the link in a marketing email, reply asking us to stop, or contact hello@theplacebeyond.com. We may retain a minimal suppression record so that we can respect your request in the future.
6.4 We do not sell personal data or provide contact lists to third parties for their independent marketing.
7.1 Cookies are small text files stored on your device. The Website may also use pixels, tags, local or session storage and similar technologies. They can enable the Website to function, remember choices, protect forms, measure use and support campaign attribution or advertising.
7.2 We use the following categories:
| Category | Purpose and examples | Basis |
|---|---|---|
| Strictly necessary | Operate essential Website functions, store your cookie choice, maintain security and detect automated or abusive enquiry submissions. This includes the consent preference record and technology supporting Vercel BotID. | Necessary for the Website or service requested by you; consent is not required for storage that is strictly necessary |
| Analytics and performance | Understand page views, navigation, referral sources, campaign parameters and interactions so that we can evaluate and improve the Website. Subject to the production configuration, this may include PostHog and analytics tags managed through Google Tag Manager. | Consent |
| Advertising and attribution | Measure advertising performance, attribute visits or enquiries and, if enabled, support remarketing. Subject to the production configuration, these tags may be supplied by Google, Microsoft or another advertising platform. | Consent |
7.3 We use Google Tag Manager to manage certain Website tags. Tag Manager is a tag-delivery system; the individual analytics or advertising services deployed through it may collect information in accordance with their own terms. The production tag configuration must be reflected accurately in this Privacy Notice and the Website's cookie controls.
7.4 Where enabled, PostHog records page and interaction events, referring pages, campaign identifiers and general device or browser information. The Website is configured to use PostHog's EU infrastructure and to create identified profiles only where an event is associated with an identified person. We do not intentionally include the free-text contents of your enquiry in analytics events; the selected project budget range may be recorded with a successful form-submission event.
7.5 Optional analytics and advertising technologies should not be activated until you choose to accept them. You may reject optional technologies and continue to use the core Website. You may also delete or block cookies using your browser, although doing so may affect functionality.
7.6 Your cookie choice itself is stored so that we can respect it. If you delete that record, change browser or use another device, the Website may ask again.
7.7 Cookies and provider configurations change over time. Before publication, the Company must complete and maintain a production cookie audit specifying each cookie or similar technology, its provider, purpose and duration. That audit should be made available through the Website's cookie controls or a separate cookie table.
8.1 We use automated security tools to help distinguish genuine users from bots and abusive traffic. An enquiry may be blocked automatically where the tool identifies it as automated. You may contact us directly if you believe a genuine enquiry has been blocked.
8.2 We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
9.1 We disclose personal data only where reasonably necessary for the purposes described in this Privacy Notice. Recipients may include:
9.2 Service providers evidenced by the Website's current implementation include:
9.3 Some of these organisations act as our processors and handle personal data on our instructions. Others may act as independent controllers for limited processing described in their own privacy information. The inclusion of a provider above does not mean that it receives identifiable information on every visit.
9.4 We do not disclose personal data merely because a third party requests it. We consider whether there is a lawful basis and, where applicable, require appropriate contractual, confidentiality and security protections.
10.1 Some service providers, group companies or support teams may be located outside the United Kingdom, or may allow personal data to be accessed from another country. This may constitute a restricted international transfer.
10.2 Where we make a restricted transfer, we will ensure that it is covered by a lawful transfer mechanism. Depending on the destination and recipient, this may include:
10.3 You may contact us for further information about the relevant transfer mechanism or to request a copy of applicable safeguards, subject to the redaction of confidential information.
11.1 We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, insurance and reporting requirements and to establish, exercise or defend legal claims.
11.2 The following periods describe our intended approach and must be confirmed against the Company's operational retention schedule before publication:
| Record | Intended retention period or criterion |
|---|---|
| Unsuccessful enquiries and proposal discussions | Normally up to 24 months after the last substantive contact, unless a continuing relationship or legal reason requires longer retention |
| Client, project and supplier records | For the relationship and normally up to seven years after completion or termination, taking account of limitation, tax, insurance and professional-record requirements |
| Contracts, invoices and accounting records | Normally six years after the end of the relevant financial year, or longer where required by law or an active dispute |
| Routine correspondence | For as long as relevant to the relationship, then deleted or archived under the applicable client, enquiry or legal-retention period |
| Marketing contacts | Until you object or unsubscribe, or until the information is no longer accurate or useful; suppression records may be retained to ensure that an objection continues to be respected |
| Recruitment records for unsuccessful applicants | Normally six months after the process ends; up to 12 months where you consent to consideration for future opportunities |
| Cookie and analytics information | For the period stated in the applicable cookie or provider setting and only for as long as needed for the relevant analytics or attribution purpose |
| Security and technical logs | For as long as reasonably necessary to operate and protect the Website, investigate incidents and meet legal obligations, with shorter periods used where practicable |
| Complaints, disputes and legal claims | Until the matter is resolved and for the applicable limitation period afterwards |
11.3 We consider the amount, nature and sensitivity of the personal data, the risk of harm from unauthorised use or disclosure, the purposes for which it is processed, whether those purposes can be achieved by other means and applicable legal requirements when setting retention periods.
11.4 At the end of the applicable period, we will delete or anonymise personal data unless continued retention is required or permitted by law. Information held in secure backups may remain until overwritten in the ordinary backup cycle and will not be restored except where necessary.
12.1 We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Depending on the context, these measures include access controls, authentication, encryption in transit, managed hosting, anti-abuse controls, backups, supplier due diligence and confidentiality obligations.
12.2 No internet transmission or storage system is completely secure. You should use appropriate care when sending sensitive or confidential information and contact us before sending it if a more secure transfer method may be required.
12.3 If a personal-data breach occurs, we will investigate it and notify the Information Commissioner's Office and affected individuals where required by law.
13.1 Depending on the circumstances and the lawful basis relied upon, you may have the right to:
13.2 These rights are not absolute. An exemption may apply, or we may be entitled or required to continue processing particular information. If we cannot fulfil a request, we will explain why, subject to any legal restriction.
13.3 To exercise a right, contact hello@theplacebeyond.com. We may ask for information reasonably necessary to confirm your identity and locate the relevant data. You will not ordinarily have to pay a fee, although the law permits a reasonable fee or refusal in limited circumstances, including where a request is manifestly unfounded or excessive.
13.4 We aim to respond within one month after receiving a valid request. Where permitted, we may extend that period by up to two further months because of complexity or the number of requests and will tell you if we do so.
14.1 We welcome the opportunity to resolve privacy concerns directly. Please contact us using the details in clause 2.
14.2 You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
14.3 If you live or work outside the UK, you may also have a right to complain to the data-protection authority in your country, subject to applicable law.
15.1 The Website and our services are intended for businesses and adult professional audiences. They are not directed at children, and we do not knowingly collect personal data from children through the Website.
15.2 If you believe that a child has provided personal data to us without appropriate authority, please contact us so that we can investigate and, where appropriate, delete it.
16.1 The Website may contain links to websites, social networks, embedded content or services controlled by third parties. Those third parties determine their own processing activities, and their privacy notices apply when you interact with them.
16.2 We are not responsible for a third party's privacy practices merely because the Website links to or displays its service. We encourage you to review the relevant privacy information before providing personal data.
17.1 We may update this Privacy Notice to reflect changes in law, regulatory guidance, our services, technology or the way we use personal data. The current version will be published on the Website and identified by its “Last updated” date.
17.2 If a change materially affects how we use personal data already collected, we will take reasonable steps to bring it to the attention of affected individuals and obtain consent where required by law.
Instagram
@the_place_beyond
© Beyond 2024
BEYOND