SUPERMASSIVE Privacy Policy

Effective Date: 10th April 2025

This Privacy Policy describes how YesThing LTD (“we”, “us”, or “our”) collects, uses, and protects your personal data when you interact with SUPERMASSIVE, our immersive experience brand.


Who We Are

YesThing LTD is a limited company registered in England and Wales (Company No. 14663989) with registered offices at:

Flat 2, 26 Bankley Street, Manchester M19 3PP, UK

We are the data controller in respect of any personal data you submit to us or that we collect from or about you. This means we are responsible for deciding how we use and protect your data under the UK General Data Protection Regulation (UK GDPR) and other applicable laws.


What Information We Collect

We may collect the following personal data when you interact with us online, at our experiences, or via our partners:

We may also collect non-personally identifiable data such as IP addresses or cookie usage for analytics and advertising purposes.


Why We Collect Your Data

We collect and use your data to:


Audio and Speech Processing

During some SUPERMASSIVE experiences, we use third-party technologies to process voice and speech data. This includes:

This means that if you speak during an experience, your voice and the content of what you say may be transmitted to and processed by these third-party providers. These services help enable real-time interactions, dynamic experiences, and enhanced immersion.

By participating in an experience, you consent to the use of these technologies and the processing of your voice data.

If you would prefer not to have your voice captured or processed, please speak to a member of staff before participating.


Third-Party Services & International Data Transfers

We use trusted third-party service providers to process data on our behalf, including:

Some providers are based outside the European Economic Area (EEA). We ensure appropriate safeguards are in place for international data transfers, including the use of Standard Contractual Clauses.


Data Security

We take data security seriously and maintain technical and organizational measures to protect your personal information. These include:


Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Currently, we do not delete inactive users automatically, but we may reduce email frequency over time.

You may request deletion or modification of your data at any time.


Your Rights (UK & EU Residents)

Under GDPR, you have rights over your personal data, including:

You can exercise your rights by contacting:

privacy@supermassive.uk

If your concern isn’t resolved, you may contact the UK’s Information Commissioner’s Office (ICO):
https://www.ico.org.uk


Photography, Media, and Audio Capture

During our events, we may occasionally take photos, video recordings, or capture audio. These may be used for promotional purposes on our website or social media. Signage at events will indicate if recording or audio processing is taking place.


Cookies & Tracking

We use cookies and similar technologies to enhance your browsing experience and provide relevant ads. You can manage your cookie preferences via your browser settings.

We also use tools such as:


Communications & Opt-Out

You may receive marketing emails from us if you’ve signed up or purchased tickets. You can unsubscribe at any time using the link in any email or by contacting us.


Changes to This Policy

We may update this Privacy Policy occasionally. If changes are significant, we’ll notify you via email or on our website.


Contact Us

If you have questions or requests related to your personal data, please contact:

privacy@supermassive.uk