Privacy Policy

Privacy Policy

Last updated: 15 July 2026

 

1. Who we are

MooMuu Experiential

In this Privacy Policy, “MooMuu”, “we”, “us” and “our” refer to MooMuu Experiential.

We provide luxury photo booths, photography-led event experiences, AI Sketch Bots, Mosaic Walls, digital graffiti experiences and associated event services throughout the United Kingdom.

For the purposes of UK data-protection law, we are normally the data controller of the personal information described in this Privacy Policy. This means that we decide why and how that information is used.

You can contact us about privacy or data protection using:

Email: info@moomuu.co.uk
Telephone: 0330 043 2970
Postal address: 33 Cunningham Road, Swindon, Wiltshire, SN2 1PR
Website: moomuu.co.uk

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect and use personal information when you:

• Visit our website;

• Contact us or request a brochure;

• Ask for a quotation;

• Book one of our services;

• Communicate with us about an event;

• Use one of our photo booths or event experiences;

• Enter your details to receive an image, portrait or other digital content;

• View or download photographs from an online gallery;

• Attend an event at which we are providing services;

• Subscribe to receive marketing from us;

• Work with us as a venue, agency, supplier or corporate client; or

• Make a complaint or exercise a data-protection right.

This Privacy Policy should be read alongside any event-specific privacy notice, consent statement, booking agreement, terms and conditions or cookie notice provided to you.

3. Our role at corporate events and brand activations

For our own booking administration, service delivery, website operation and business records, MooMuu will normally act as the data controller.

At some corporate events and brand activations, a client may ask us to collect guest information on its behalf for purposes determined by that client. In these circumstances, the corporate client may be the data controller and MooMuu may act as its data processor.

Where this applies, guests should be shown an event-specific privacy notice identifying:

• The organisation responsible for the data;

• The information being collected;

• Why it is being collected;

• Whether it will be used for marketing;

• How long it will be retained; and

• How guests can exercise their rights.

Any event-specific notice will apply in addition to this Privacy Policy.

4. Personal information we collect

The information we collect depends on your relationship with us and the service being provided.

4.1 Enquiry and client information

When you contact us, request a quote or make a booking, we may collect:

• Your name;

• Email address;

• Telephone number;

• Postal or billing address;

• Company or organisation name;

• Job title;

• Event date, time and location;

• Venue and access details;

• Type of event;

• Guest numbers;

• Services and package preferences;

• Correspondence, enquiries and special instructions;

• Contract and booking information;

• Invoice and payment records;

• Marketing preferences; and

• Any other information you choose to provide.

Where you make a card payment, your full card information will normally be collected directly by the relevant payment provider. We may receive confirmation of the payment, transaction reference, amount and limited payment information, but we do not ordinarily store complete card details.

4.2 Event guest information

When guests use one of our experiences, we may collect:

• Photographs and video recordings;

• AI-generated illustrations, sketches and other creative outputs;

• Mosaic Wall photo tiles;

• Digital graffiti artwork;

• Guest names or identifiers where required;

• Email addresses or mobile telephone numbers entered to receive digital images;

• Responses to optional surveys, competitions or data-capture forms;

• Marketing preferences and consent records;

• Date, time and location of image capture; and

• Technical information generated by the equipment or software.

Guests are not normally required to provide an email address or telephone number unless they wish to receive digital content or participate in an optional data-capture activity.

Where a guest enters an email address or mobile number solely to receive an image, we will use it for that purpose and not for unrelated marketing unless the guest has separately opted in or another lawful basis applies.

4.3 Website and technical information

When you visit our website or use our online services, we may collect:

• Internet Protocol address;

• Browser type and version;

• Device type and operating system;

• Approximate location derived from an IP address;

• Pages visited and interactions with the website;

• Referring website or search engine;

• Date, time and duration of visits;

• Cookie identifiers;

• Form submissions; and

• Security, diagnostic and error information.

More information is provided in the Cookies and similar technologies section below.

4.4 Information obtained from other sources

We may receive personal information from:

• A wedding couple or event organiser;

• A corporate client, agency or venue;

• Someone making a booking on behalf of another person;

• Our booking and client-management platform;

• Payment providers;

• Gallery and image-delivery platforms;

• Social-media platforms where you contact or interact with us;

• Publicly available business directories; and suppliers or professional advisers involved in delivering an event.

Where someone gives us information about another person, they should ensure that they have permission to do so and that the other person is made aware of this Privacy Policy where appropriate.

5. Photographs, videos and AI-generated content

Photographs and videos in which a person can be identified are personal information.

Our services may involve:

• Taking and printing photographs;

• Recording short video clips or animated images;

• Uploading images to a private or public gallery;

• Sending images by email, SMS or another delivery method;

• Converting photographs into AI-generated artwork;

• Creating robotic sketches;

• Incorporating photographs into a Mosaic Wall;

• Applying visual effects, templates or branded designs; and

• Supplying event media to the person or organisation that booked us.

AI processing

Some MooMuu experiences use artificial intelligence or automated image-processing technology to transform a guest photograph into an artistic image or illustration.

We do not use event photographs for facial recognition or to establish or verify a person’s identity. We do not intentionally create biometric identification profiles from guest photographs.

The AI processing used in our experiences does not make decisions that produce legal or similarly significant effects about individuals.

Images may be transmitted securely to specialist cloud or AI-processing providers so that the requested output can be generated.

We require providers acting on our behalf to process personal information only for authorised purposes and subject to appropriate contractual and security arrangements.

6. Special-category information

We do not intentionally ask event guests to provide special-category personal information, such as information about health, ethnicity, religion, political opinions or sexual orientation. However, photographs may incidentally reveal characteristics that could fall within these categories.

We do not use event images to infer, categorise or make decisions based on those characteristics.

Please do not submit sensitive information through our website forms unless it is genuinely necessary for us to provide the requested service. Where health, accessibility or dietary information is required for an event, we will use it only to make the necessary arrangements and will limit access to those who need it.

7. How and why we use personal information

We use personal information only where we have a lawful basis to do so.

7.1 Responding to enquiries and preparing quotations

We use contact and event information to:

• Respond to questions;

• Check availability;

• Recommend suitable services;

• Prepare quotations and proposals; and

• Take steps towards a possible booking.

Our lawful bases are taking steps at your request before entering into a contract and our legitimate interest in responding to genuine enquiries and developing our business.

7.2 Managing bookings and delivering services

We use client and event information to:

• Confirm and administer bookings;

• Plan access, setup and event logistics;

• Personalise prints, screens, artwork and branded materials;

• Communicate with clients, venues and suppliers;

• Operate our equipment at the event;

• Deliver photographs, galleries and other agreed outputs; and

• Provide post-event support.

Our lawful bases are performance of a contract, taking steps before entering into a contract and our legitimate interests in delivering an effective and professionally managed event service.

7.3 Providing services to event guests

We use guest photographs and associated information to:

• Operate the experience selected by the event organiser;

• Produce prints, sketches, mosaics and digital artwork;

• Deliver requested images to guests;

• Maintain event galleries;

• Troubleshoot technical issues; and

• Provide the client with the agreed event content.

Our lawful basis will normally be our legitimate interest, and that of the event organiser, in providing the event experience that guests choose to use.

Where consent is more appropriate, such as for an optional marketing activity or certain types of data capture, we will ask for it separately.

7.4 Payments, accounting and business administration

We use booking, transaction and financial information to:

• Take and reconcile payments;

• Issue invoices and receipts;

• Maintain accounting and tax records;

• Recover money owed to us; and

• Manage insurance and business administration.

Our lawful bases are performance of a contract, compliance with legal obligations and our legitimate interest in managing our business and protecting our financial position.

7.5 Safety, security and fraud prevention

We may use personal information to:

• Protect our guests, staff and equipment;

• Detect fraudulent or suspicious bookings;

• Secure our website, systems and client accounts;

• Investigate misuse or technical incidents;

• Establish, exercise or defend legal claims; and

• Cooperate with insurers, law-enforcement bodies or regulators.

Our lawful bases are our legitimate interests, compliance with legal obligations and, where relevant, the establishment, exercise or defence of legal claims.

7.6 Service improvement and analytics

We may analyse enquiries, booking patterns, website activity and service feedback to:

• Understand how people use our website;

• Improve our services and customer experience;

• Measure the effectiveness of our content;

• Identify technical problems; and

• Develop new event experiences.

We use aggregated or anonymised information where reasonably possible.

Our lawful bases are consent where non-essential cookies or similar technologies are used, and our legitimate interests in improving and developing our services.

7.7 Portfolio, website and social-media use

We may wish to use selected photographs or videos to demonstrate our work through:

• Our website and portfolio;

• Social-media accounts;

• Brochures and proposals;

• Awards and industry submissions;

• Advertising and promotional campaigns; and

• Case studies.

We will use identifiable event media for these purposes only where we have an appropriate lawful basis. Depending on the circumstances, this may be consent or our legitimate interests in promoting our work, balanced against the privacy rights and reasonable expectations of the people shown.

We will honour reasonable objections to the use of identifiable images. We will not knowingly use a clearly identifiable image of a child for our own marketing without permission from a parent or guardian.

Clients should tell us before the event if photography is sensitive, confidential or subject to restrictions. Guests may also speak to a MooMuu attendant at the event or contact us afterwards if they do not want a particular image used.

8. Direct marketing

We may send information about MooMuu services, event inspiration, new experiences or relevant offers where:

• You have specifically consented;

• The electronic-marketing “soft opt-in” applies to an existing customer or someone who has negotiated to purchase a similar service, and we gave them a clear opportunity to opt out; or

• We contact an appropriate business contact in circumstances permitted by law.

Marketing consent is optional and is not a condition of receiving a quotation, brochure, photograph or booked service.

You can unsubscribe at any time by:

• Using the unsubscribe option in a marketing message;

• Replying to the message;

• Emailing info@moomuu.co.uk; or

• Calling 0330 043 2970.

We may retain limited information on a suppression list after you unsubscribe. This enables us to record your preference and avoid sending further marketing.

9. Who we share personal information with

We do not sell personal information to advertisers or data brokers.

We may share personal information where necessary with:

• CheckCherry or another booking, contract and client-management provider;

• Payment-processing providers;

• Website hosting and website-management providers;

• Email, SMS and communications providers;

• Online gallery and digital-delivery platforms;

• Cloud-storage and backup providers;

• AI and image-processing providers;

• Software and technical-support providers;

• Analytics and cookie-management providers;

• Printers, designers and production suppliers involved in a booking;

• The client, event organiser, agency or venue responsible for the event;

• Subcontractors and freelance event staff working under our instructions;

• Accountants, insurers, solicitors and other professional advisers;

• Banks and payment-recovery providers;

• Regulators, courts, law-enforcement bodies or public authorities where required; and

• A purchaser or successor if our business or assets are sold, reorganised or transferred.

Service providers acting as our data processors are required to use personal information only for authorised purposes, protect it appropriately and comply with applicable data-protection requirements.

At certain corporate events, data may be supplied to the corporate client where this has been clearly explained to guests through an event-specific privacy notice or consent statement.

10. International transfers

Some of our technology and service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal transfer mechanism is in place.

Depending on the destination and provider, this may include:

• UK adequacy regulations;

• The UK International Data Transfer Agreement;

• The UK Addendum to approved standard contractual clauses; or

• Another safeguard permitted by UK data-protection law.

You may contact us for more information about the safeguards relevant to your personal information.

11. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and dispute-resolution requirements.

Our usual retention periods are:

Enquiries that do not result in a booking

Normally up to 12 months after our last meaningful contact, unless there is a good reason to retain the information for longer.

Booking, contract and financial records

Normally six years after the event or transaction, where required for accounting, tax, insurance or legal purposes.

Event photographs, videos and guest data

Normally up to 12 months from the event date, unless:

• A shorter period has been agreed;

• The client asks us to delete the information earlier and we are legally able to do so;

• A longer period is required because of a complaint, dispute or legal obligation; or

• Separate permission has been given for selected media to be retained for portfolio, archival or marketing purposes.

Online galleries

Online event galleries are normally available for approximately three months. The exact expiry date may be stated in the gallery or delivery email.

Clients and guests should download and securely save any photographs they wish to keep before the gallery expires.

AI-processing files

Temporary source images and generated files held by an AI or image-processing service will be retained only for the time reasonably required to provide the service, subject to the provider’s technical deletion and backup cycle.

Marketing records

Marketing contact information is retained until you unsubscribe, withdraw consent or the information is no longer reasonably required. We periodically review inactive marketing records.

Suppression records

Minimal information recording an unsubscribe or objection may be retained for as long as necessary to ensure that the preference continues to be respected.

Complaints and data-rights requests

Records relating to complaints, disputes or data-protection requests may normally be retained for up to six years after the matter is closed, where reasonably required to demonstrate how the matter was handled or to deal with legal claims.

When a retention period expires, information will be securely deleted, anonymised or overwritten in accordance with our systems and backup arrangements.

12. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or destruction.

These measures may include:

• Password protection and access controls;

• Multi-factor authentication where available;

• Encryption in transit and, where supported, at rest;

• Secure cloud systems and controlled backups;

• Antivirus, firewall and system-monitoring measures;

• Limited staff and contractor access;

• Confidentiality obligations;

• Supplier due diligence and data-processing agreements;

• Secure deletion procedures; and

• Staff awareness and incident-response procedures.

No website, email service or electronic storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will assess it and notify the Information Commissioner’s Office and affected individuals where required by law.

13. Cookies and similar technologies

Our website may use cookies, pixels, local storage and similar technologies.

These may include:

Strictly necessary cookies

These are required for essential website functions, security, forms, bookings, cookie preferences and related services.

Analytics cookies

These help us understand how visitors use our website and identify areas for improvement.

Functional cookies

These remember choices and support enhanced features, such as embedded media.

Advertising and social-media cookies

These may be used to measure campaigns, personalise advertising or support content embedded from social-media platforms.

We will request consent before placing non-essential cookies or similar technologies where required.

You can manage your choices through our cookie banner or browser settings. Withdrawing consent will not affect the lawfulness of any processing that occurred before withdrawal.

Further details about the cookies used on our website should be provided in our Cookie Policy or cookie-preference centre.

14. Embedded content and links

Our website may contain embedded videos, social-media content, booking tools, galleries or links to third-party websites.

When you interact with third-party content or follow an external link, that organisation may collect information directly from you and apply its own privacy policy. We are not responsible for the privacy practices of independent third-party websites.

We encourage you to read the relevant privacy information before submitting personal information to another organisation.

15. Children

Our services may be used at weddings, parties, family celebrations and corporate events attended by children.

A parent, guardian or responsible adult should supervise a child’s use of our equipment.

We do not knowingly use a child’s contact details for direct marketing without appropriate permission. We will not knowingly use a clearly identifiable photograph of a child for our own promotional purposes without permission from a parent or guardian.

A parent or guardian may contact us to request access to, restriction of or deletion of a child’s image, subject to applicable legal requirements and the circumstances of the event.

16. Your data-protection rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

• Ask for confirmation that we process your personal information;

• Request a copy of personal information we hold about you;

• Ask us to correct inaccurate or incomplete information;

• Ask us to delete personal information;

• Ask us to restrict how personal information is used;

• Object to processing based on legitimate interests;

• Object to direct marketing at any time;

• Request transfer of information you provided to us in a structured, commonly used and machine-readable format;

• Withdraw consent at any time where consent is the lawful basis; and

• Complain about our handling of your personal information.

These rights are not absolute and may be subject to exemptions or limitations. For example, we may need to retain information to comply with a legal obligation, establish or defend a legal claim, or protect the rights of another person.

To exercise a right, email info@moomuu.co.uk with the subject line Data Protection Request.

We may ask for information needed to confirm your identity and locate the relevant records. We will respond within the period required by data-protection law.

Withdrawing consent does not affect processing that was lawful before consent was withdrawn.

17. Your right to object

You have the right to object at any time to our use of your personal information for direct marketing.

You may also object where we rely on legitimate interests. If you object, we will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

To object, email info@moomuu.co.uk.

18. Data-protection complaints

You may raise a complaint if you are concerned about how we have collected, used, disclosed, retained or protected your personal information, or how we have handled a data-protection request.

Please send the complaint to:

Email: info@moomuu.co.uk
Subject: Data Protection Complaint
Telephone: 0330 043 2970
Postal address: 33 Cunningham Road, Swindon, Wiltshire, SN2 1PR

We will:

• Provide a clear way for you to raise the complaint;

• Acknowledge the complaint within 30 days of receiving it;

• Take appropriate steps to investigate without undue delay;

• Keep you informed about the progress of the investigation where appropriate;

• Inform you of the outcome and any action taken.

Please include enough information for us to understand the issue, identify the relevant records and contact you about the complaint.

19. Complaining to the Information Commissioner’s Office

We hope that we can resolve any privacy concern directly.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator responsible for data protection.

Information about making a complaint is available on the Information Commissioner’s Office website.

We would appreciate the opportunity to address your concern before you contact the regulator, but you are not required to contact us first.

20. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology, suppliers, business practices or legal obligations.

The latest version will be published on our website and identified by the “last updated” date at the top of the policy.

Where a change is significant, we may also bring it to the attention of affected clients or users through an appropriate communication.

21. Contact us

Questions about this Privacy Policy or our use of personal information should be sent to:

MooMuu Experiential
Legal entity: MooMuu Experiential
Address: 33 Cunningham Road, Swindon, Wiltshire, SN2 1PR
Email: info@moomuu.co.uk
Telephone: 0330 043 2970