SUPERMASSIVE Privacy Policy
Effective Date: 10th April 2025
This Privacy Policy describes how YesThing LTD (“we”, “us”, or “our”) collects, uses, and protects your personal data when you interact with SUPERMASSIVE, our immersive experience brand.
Who We Are
YesThing LTD is a limited company registered in England and Wales (Company No. 14663989) with registered offices at:
Flat 2, 26 Bankley Street, Manchester M19 3PP, UK
We are the data controller in respect of any personal data you submit to us or that we collect from or about you. This means we are responsible for deciding how we use and protect your data under the UK General Data Protection Regulation (UK GDPR) and other applicable laws.
What Information We Collect
We may collect the following personal data when you interact with us online, at our experiences, or via our partners:
- Name (optional)
- Email address (required)
- Information about your engagement with our emails or website (via analytics)
We may also collect non-personally identifiable data such as IP addresses or cookie usage for analytics and advertising purposes.
Why We Collect Your Data
We collect and use your data to:
- Send marketing emails, newsletters, and offers (if you’ve opted in)
- Provide access to our immersive experiences
- Manage bookings and tickets (via Easol)
- Run referral campaigns (via Viral Loops)
- Measure site usage and campaign effectiveness (via Google Analytics, Facebook Ads, Google Ads)
Third-Party Services & International Data Transfers
We use third-party service providers to process data on our behalf, including:
- Mailchimp (email marketing)
- Viral Loops (referrals)
- Easol (ticketing and payments)
- Google Analytics, Facebook Ads, Google Ads (advertising and analytics)
Some of these providers are based outside the European Economic Area (EEA). Where we transfer your data internationally, we ensure it is protected through appropriate safeguards, including the Standard Contractual Clauses approved by the EU and UK.
Data Security
We take data security seriously and maintain technical and organizational measures to protect your personal information. These include:
- Secure devices and access controls
- Limited internal access
- Encrypted platforms via our partners
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
Currently, we do not delete inactive users automatically, but we may reduce email frequency over time.
You may request deletion or modification of your data at any time.
Your Rights (UK & EU Residents)
Under GDPR, you have rights over your personal data, including:
- Access to your data
- Rectification of incorrect or incomplete data
- Erasure of your data (“right to be forgotten”)
- Restriction or objection to certain processing
- Data portability to another service
- Withdrawal of consent (for marketing, etc.)
You can exercise your rights by contacting us at:
If your concern isn’t resolved, you may contact the UK’s Information Commissioner’s Office (ICO):
https://www.ico.org.uk
Photography & Media
During our events, we may occasionally take photos or video recordings. These may be used for promotional purposes on our website or social media. Signage at events will indicate if recording is taking place.
Cookies & Tracking
We use cookies and similar technologies to enhance your browsing experience and provide relevant ads. You can manage your cookie preferences via your browser settings.
We also use tools such as:
- Google Analytics
- Google Ads
- Facebook Pixel
- TikTok Pixel
Communications & Opt-Out
You may receive marketing emails from us if you’ve signed up or purchased tickets. You can unsubscribe at any time using the link in any email or by contacting us.
Changes to This Policy
We may update this Privacy Policy occasionally. If changes are significant, we’ll notify you via email or on our website.
Contact Us
If you have questions or requests related to your personal data, please contact: