Privacy Policy

1. Who We Are

Projections On Walls Limited (referred to as “POW”, “we”, “us”, or “our”) is a projection mapping and experiential marketing studio. We are the data controller responsible for your personal data collected through this website.

Registered address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Company number: 14779249

Contact email: studio@pow.media

If you have any questions about this policy or how we handle your data, please contact us at the email above.

2. What This Policy Covers

This privacy policy explains how we collect, use, store, and share your personal data when you:

• Visit our website at pow.media
• Submit an enquiry or contact form
• Sign up to receive communications from us
• Otherwise interact with us online

It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU General Data Protection Regulation (EU GDPR).

3. Personal Data We Collect

3.1 Data you provide directly

When you contact us or submit an enquiry form, we may collect:

• Your name
• Your email address
• Your company name and job title
• Your telephone number
• The content of your message or enquiry

3.2 Data collected automatically

When you visit our website, we and our third-party tools may automatically collect:

• Your IP address and approximate location (country/region)
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation paths
• Referring website or search query
• Cookie identifiers (subject to your consent)

3.3 Data we do not collect

We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us immediately.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR Article 6 (and EU GDPR Article 6 where applicable):

Legitimate interests (Article 6(1)(f)): To respond to enquiries you initiate, and to analyse how our website is used in order to improve it. We have assessed that our legitimate interests are not overridden by your rights and freedoms.

Consent (Article 6(1)(a)): For non-essential cookies (including analytics and marketing pixels), and for any email marketing communications. You may withdraw consent at any time.

Contract (Article 6(1)(b)): Where you have engaged or are engaging us to provide services, to the extent necessary to fulfil that contract.

Legal obligation (Article 6(1)(c)): Where we are required to retain or process data to comply with applicable law.

5. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and communicate with you about potential projects
• To send you marketing communications where you have consented to receive them
• To analyse website traffic and user behaviour in order to improve our website and services
• To comply with legal and regulatory obligations
• To protect the security and integrity of our website

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Cookies and Tracking Technologies

6.1 What are cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your actions and preferences over time.

6.2 Cookies we use

Strictly necessary cookies: These are essential for the website to function and cannot be switched off. They do not require your consent.

Analytics cookies: We may use Google Analytics 4 (GA4) to understand how visitors use our website. These cookies are only placed after you have given your consent.

Marketing and pixel cookies: We may use tracking pixels (such as those from Meta or LinkedIn) to measure the effectiveness of our campaigns. These are only placed after you have given your consent.

Embedded content cookies: Our website may include embedded video content from third-party platforms such as Vimeo or YouTube. These platforms may set their own cookies. We use privacy-enhanced embed modes where available.

6.3 Managing your cookie preferences

When you first visit our website, you will be shown a cookie consent banner. You can accept or decline non-essential cookies at that point, and update your preferences at any time via the cookie settings link in our website footer.

You can also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the website.

7. Third Parties and Data Sharing

7.1 Service providers

• We share personal data with trusted third-party service providers who process data on our behalf, including:
• Google LLC – analytics (Google Analytics 4) and advertising, where applicable
• Email and CRM platform providers – for managing enquiries and communications, where applicable
• Website hosting provider – DigitalOcean LLC (London datacenter, UK). All website data is hosted within the United Kingdom.
• We use Cloudflare Turnstile to secure our website and protect against automated abuse and spam. Turnstile operates in invisible mode, analyzing technical telemetry (such as request headers, device attributes, and browser signals) to distinguish human users from automated bots without presenting interactive challenges.
• The processing of this data by Cloudflare is governed by the Cloudflare Turnstile Privacy Addendum and the main Cloudflare Privacy Policy.

All third-party processors are bound by data processing agreements and are only permitted to process your data in accordance with our instructions.

7.2 Other disclosures

We may also disclose your personal data:

• To comply with a legal obligation or court order
• To protect the rights, property, or safety of POW, our clients, or others
• In connection with a business sale, merger, or acquisition (where your data would transfer to the acquiring entity)

We do not sell your personal data to third parties.

8. International Data Transfers

Our website is hosted in the United Kingdom by DigitalOcean LLC (London datacenter). Website data does not leave the UK as a result of hosting.

Some of our other third-party service providers (such as Google LLC) may be based outside the UK and the European Economic Area (EEA). Where personal data is transferred to countries that do not provide an equivalent level of data protection, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO) or the European Commission
• Adequacy decisions where applicable

In particular, data transferred to the United States (for example via Google Analytics, where used) is governed by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

9. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by law. Our general retention periods are:

• Enquiry and contact form data: up to 2 years from the date of last contact, unless a client relationship is established
• Client and contract-related data: 7 years from the end of the contractual relationship, in line with standard accounting and legal requirements
• Analytics data: as determined by the retention settings of our analytics platform (typically 14 months for GA4)
• Cookie consent records: 3 years

When data is no longer required, it is securely deleted or anonymised.

10. Your Rights

Under UK GDPR (and EU GDPR where applicable), you have the following rights in relation to your personal data:

Right of access: To request a copy of the personal data we hold about you.

Right to rectification: To request correction of inaccurate or incomplete data.

Right to erasure: To request deletion of your personal data in certain circumstances.

Right to restriction: To request that we restrict processing of your data in certain circumstances.

Right to data portability: To receive your data in a structured, machine-readable format where processing is based on consent or contract.

Right to object: To object to processing based on legitimate interests or for direct marketing purposes.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Rights in relation to automated decision-making: We do not carry out solely automated decision-making with legal or significant effects.

To exercise any of these rights, please contact us at studio@pow.media. We will respond within one month. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the relevant supervisory authority:

• UK: Information Commissioner’s Office (ICO) – ico.org.uk
• EU: Your local EU data protection authority

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted data transmission (HTTPS/TLS)
• Access controls limiting who can view personal data
• Regular review of our security practices

No method of transmission over the internet is entirely secure. While we take reasonable precautions, we cannot guarantee the absolute security of data transmitted to our website.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The date at the top of this document indicates when it was last revised. We encourage you to review this policy periodically.

Where changes are material, we will take reasonable steps to notify you, such as displaying a notice on our website.

14. Contact Us

If you have any questions, concerns, or requests relating to this privacy policy or your personal data, please contact us:

Email: studio@pow.media

Post: Projections On Walls Limited, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ