Privacy notice
How VenTuhi uses personal information, and how to contact us about it.
Who we are
VENTUHI LTD, a limited company registered in England and Wales, company number 17399023. Registered office: Suite A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom. VenTuhi is our trading name. We are the controller for our own business enquiries, customer relationships and service administration. Contact hello@ventuhi.com for privacy questions or requests.
Two kinds of information
Our business information: VenTuhi is the controller for enquiries, customer relationships, account administration and service security. We decide how this information is used.
Your venue’s records: the venue normally decides why operational personal information is collected and used. VenTuhi normally acts as its processor, working on documented instructions under an agreed data processing agreement.
The public website accepts enquiries by email. Demos use fictional operational records, although real demo users’ account details, messages and security events can still be personal information.
Information and sources
We receive the contact details, organisation, role and message content you send us. An organisation arranging access may supply user details. Login and support interactions may involve email addresses, account identifiers and authentication events. Our hosting and service infrastructure processes technical information such as IP address, requested pages, browser details and security events. Please do not send passwords or unnecessary health or incident information in an enquiry.
Providing an email address and enough detail to understand your request allows us to respond. You do not have to send an enquiry or join a demonstration.
Purposes and lawful bases
| Purpose | Basis |
|---|---|
| Answer enquiries, discuss demonstrations and provide support | Legitimate interests in responding to requests and operating our business. |
| Administer business relationships and authorised access | Legitimate interests in providing and managing the service for organisations. Processing solely on a venue’s instructions is covered separately below. |
| Perform a contract directly with an individual, such as a sole trader | Contract, where processing is necessary for that individual’s agreement or requested pre-contract steps. |
| Protect accounts, investigate abuse and maintain service security | Legitimate interests in protecting users, information and systems. |
| Comply with applicable statutory record-keeping or disclosure requirements | Legal obligation, where the particular obligation applies. |
| Establish or defend legal claims | Legitimate interests in protecting legal rights. |
An organisation’s contract does not automatically provide a contractual lawful basis for all employee information. Enquiring about VenTuhi does not subscribe you to marketing. We will explain any optional marketing or new analytics processing before introducing it.
Information held for venues
A customer venue normally decides why its staff, guest and operational information is recorded. VenTuhi normally processes it on the venue’s behalf under an agreed data processing agreement. Relevant records can include staff profiles, checks, training, capacity, refusals, incidents, accidents, injuries and supporting photographs.
Health information and other special-category data require additional conditions. Criminal allegations and offence information have separate safeguards. The venue determines its lawful basis and relevant conditions, provides notices and sets access and retention instructions. VenTuhi also has direct processor obligations: we process on documented lawful instructions, protect the information with appropriate safeguards and assist the venue with rights requests and security incidents. Contact the venue about its records; if you contact us, we will help route the request appropriately. Fictional demos must not be used for real incident or accident records.
Retention
We keep enquiries and correspondence while needed to respond, manage the resulting relationship or deal with an outstanding issue. Account administration is retained while access or associated business records are needed. A justified legal obligation or claim may require restricted retention beyond that purpose. We review whether information remains necessary rather than treating an enquiry as permission to retain it indefinitely.
Venue records follow the venue’s documented instructions and agreed exit arrangements. See retention and deletion.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability, and object to processing. You may object to direct marketing at any time. Where consent is used, you can withdraw it without affecting earlier lawful processing. Rights have conditions and exceptions.
Contact hello@ventuhi.com. We may request proportionate identity verification and will respond without undue delay and normally within one month. Where the law allows an extension for complex or multiple requests, we may take up to a further two months and will explain the reason within the initial month. For venue-controlled records we normally assist the venue in responding. You can complain directly to the Information Commissioner’s Office.
Updates
We publish the version and update date below and will communicate significant changes through an appropriate channel. A new purpose must be assessed and explained before it starts.