1 Privacy Policy

Last updated: 11.06.2026

1.1 Introduction

This Privacy Policy explains how Global Expo Support, the trading name of Iuliia Bochkareva (“Global Expo Support”, “we”, “us” or “our”), collects, uses, stores, shares and protects personal data when you visit our website at https://globalexposupport.com (the “Website”), contact us, request a quote, or engage our services.

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”) and, where applicable to clients and website visitors located in the European Economic Area (“EEA”), the EU General Data Protection Regulation (“EU GDPR”).

1.2 Who Is the Data Controller

The data controller responsible for your personal data is Iuliia Bochkareva, trading as Global Expo Support, of S417GW, Chesterfield, the United Kingdom. You can contact us about any privacy matter at contact@globalexposupport.com. Upon incorporation of the business as a limited company, the data controller will become the incorporated company, and this Policy will be updated accordingly.

1.3 Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity and contact data: your name, job title, company name, email address, telephone number, business address, and country of location, provided when you complete a contact form, request a quote, email us, or engage our services.
• Project and commercial data: information about your exhibition or event requirements, budgets, supplier preferences, shipping details, and other information you provide in connection with a quote or project. Where this information identifies individuals (for example, names of your staff attending an event), it constitutes personal data.
• Communications data: records of correspondence between you and us, including emails, messages, call notes, and meeting records.
• Technical and usage data: your IP address, browser type and version, device type, operating system, pages visited, time spent on pages, referral source, and similar analytics information collected through cookies and similar technologies (see our Cookie Policy).
• Marketing preference data: your preferences for receiving marketing communications from us, and records of consent given or withdrawn.

We do not intentionally collect special category data (such as health, religious or political information) or data relating to criminal convictions. Please do not send us such information unless it is strictly necessary, in which case we will agree on an appropriate basis for processing it with you.

Our services are directed at businesses. The Website is not intended for children, and we do not knowingly collect personal data from anyone under the age of 18.

1.4 How We Collect Your Data

We collect personal data: (a) directly from you, when you complete forms on the Website, email or call us, or work with us on a project; (b) automatically, through cookies and analytics tools when you use the Website; and (c) from third parties, such as your colleagues who refer you to us, suppliers involved in your project, or publicly available business sources such as company websites and professional networking platforms.

1.5 Purposes and Lawful Bases for Processing

We process personal data only where we have a lawful basis under Article 6 of the UK GDPR. The table below summarises our purposes and lawful bases.

• Responding to enquiries and quote requests – lawful basis: legitimate interests (responding to business enquiries directed to us) and/or steps taken at your request prior to entering into a contract.
• Providing our services and managing client projects – lawful basis: performance of a contract with you, or with the business you represent (in which case our basis is legitimate interests in performing that contract).
• Communicating with suppliers, venues, freight forwarders and other third parties on your behalf – lawful basis: performance of a contract and legitimate interests in delivering the coordination services you have engaged us for.
• Invoicing, accounting, tax and record-keeping – lawful basis: compliance with legal obligations, including obligations under UK tax law.
• Sending marketing communications – lawful basis: consent, or, for existing clients, legitimate interests under the “soft opt-in” rules in PECR (see section 3 below). You may opt out at any time.
• Operating, securing and improving the Website – lawful basis: legitimate interests in maintaining a functional, secure website; consent where required for non-essential cookies.
• Establishing, exercising or defending legal claims – lawful basis: legitimate interests in protecting our legal position.

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms and concluded that our processing does not unfairly prejudice you. You may request details of our balancing assessments by contacting us.

1.6 Who We Share Your Data With

We may share your personal data with:

• Third-party suppliers and service providers engaged on your project, such as stand builders, freight forwarders, printers, merchandise producers, designers, venue operators and event organisers, in any country where your event or suppliers are located, solely to the extent necessary to deliver the services.
• Our service providers, including website hosting providers, email and productivity platforms, analytics providers, customer relationship management tools, accounting software providers, and (in future) payment processors. These providers act on our instructions under contracts that include data protection obligations.
• Professional advisers, such as accountants, insurers, and legal advisers, where reasonably necessary.
• Authorities and regulators, including HM Revenue & Customs, the ICO, courts and law enforcement bodies, where we are legally required to do so.
• A successor business, if the business is incorporated, sold, or restructured, in which case personal data will be transferred to the new legal entity on terms that protect it consistently with this Policy.

We do not sell personal data, and we do not share personal data with third parties for their own marketing purposes.

1.7 International Transfers

Because we serve clients internationally and coordinate suppliers in multiple countries, your personal data may be transferred to, and processed in, countries outside the United Kingdom and the EEA, including countries that do not have data protection laws equivalent to those of the UK.

Where we transfer personal data outside the UK, we will ensure an appropriate safeguard is in place, such as: (a) a UK adequacy regulation recognising the destination country as providing adequate protection; (b) the UK International Data Transfer Agreement (“IDTA”) or the UK Addendum to the EU Standard Contractual Clauses; or (c) where no other safeguard is available, a derogation permitted by Article 49 UK GDPR, such as the transfer being necessary for the performance of your contract with us (for example, sending your contact details to a stand builder in the country where your exhibition takes place). For transfers from the EEA, equivalent EU GDPR mechanisms are applied. You may request further information about transfer safeguards by contacting us.

1.8 How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes described in this Policy:

• Enquiry and quote data where no contract results: up to 24 months from last contact.
• Client project and contract data: for the duration of the project and for 6 years thereafter, reflecting limitation periods for contractual claims in England and Wales.
• Accounting and tax records: at least 6 years, as required by UK law.
• Marketing data: until you opt out or withdraw consent, after which we retain only a suppression record of your decision.
• Website analytics data: in line with the retention settings of our analytics tools, as described in our Cookie Policy.

When data is no longer required, it is securely deleted or anonymised.

1.9 How We Protect Your Data

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) on the Website, access controls and password protection on systems holding personal data, use of reputable service providers, and limiting access to personal data to those who need it. No system can be guaranteed completely secure; if we become aware of a personal data breach likely to result in a risk to your rights, we will notify the ICO and, where required, affected individuals, in accordance with the UK GDPR.

1.10 Your Rights

Subject to certain conditions and exemptions, you have the following rights in relation to your personal data:

• the right to be informed about how your data is used (this Policy);
• the right of access to your personal data (a “subject access request”);
• the right to rectification of inaccurate or incomplete data;
• the right to erasure (“right to be forgotten”) in certain circumstances;
• the right to restrict processing in certain circumstances;
• the right to data portability for data you provided to us that we process by automated means on the basis of consent or contract;
• the right to object to processing based on legitimate interests, and an absolute right to object to direct marketing;
• the right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal; and
• rights in relation to automated decision-making. We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects.

To exercise any right, contact us at contact@globalexposupport.com. We will respond within one month, which may be extended by up to two further months for complex requests. We will not charge a fee unless a request is manifestly unfounded or excessive.

1.11 Complaints

If you have a concern about our handling of your personal data, please contact us first so that we may resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, website https://ico.org.uk. If you are located in the EEA, you may complain to your local data protection supervisory authority.

1.12 Third-Party Links

The Website may contain links to third-party websites, including supplier, venue and event organiser websites. We are not responsible for the privacy practices of those websites. Please review their privacy policies before providing them with personal data.

1.13 Changes to This Policy

We may update this Privacy Policy from time to time, including upon incorporation of the business, the introduction of online payments, or changes in law. The “Last updated” date at the top of this Policy shows when it was last revised. Significant changes will be highlighted on the Website or notified to active clients by email.

2 Data Protection Notice

Last updated: 11.06.2026

This Notice supplements our Privacy Policy and summarises, in short form, how Global Expo Support handles personal data in the course of providing services. In the event of any inconsistency, the Privacy Policy prevails.

2.1 Controller

Iuliia Bochkareva, trading as Global Expo Support, of S417GW, Chesterfield, the United Kingdom, is the controller of personal data processed in connection with the Website and our services. Contact: contact@globalexposupport.com. Upon incorporation, the controller will become the incorporated company and this Notice will be updated.

2.2 What We Process and Why

In delivering exhibition support projects we typically process the business contact details of client personnel, Supplier personnel, venue and organiser contacts, and event attendees nominated by the client (for example, for badge registration or access lists). We process this data to perform the contract, to coordinate Suppliers and venues, to meet legal obligations (such as tax record-keeping), and for our legitimate interests in running and promoting our business.

2.3 Sharing and International Transfers

Project-related personal data is shared with the Suppliers, venues and organisers involved in the project, in the countries where the event and Suppliers are located, and with our service providers (hosting, email, productivity, accounting and analytics tools). Transfers outside the UK and EEA are protected by adequacy regulations, the UK International Data Transfer Agreement or Addendum, or contract-performance derogations, as described in section 1.7 of the Privacy Policy.

2.4 Client Responsibilities

Where a client provides us with personal data relating to its staff, contractors or guests, the client confirms that it has the right to share that data with us and with project Suppliers, and that it has informed the relevant individuals of this processing. Each of the client and Global Expo Support acts as an independent controller of the personal data it processes for its own purposes, unless a separate data processing agreement is put in place designating us as processor for a specific activity.

2.5 Security, Retention and Rights

We apply appropriate technical and organisational security measures, retain personal data in line with the retention periods in the Privacy Policy, and honour the data subject rights described there. Individuals may contact contact@globalexposupport.com to exercise their rights, and may complain to the ICO (https://ico.org.uk) or, in the EEA, their local supervisory authority.

3 Marketing Communications and Consent Notice

Last updated: 11.06.2026

3.1 Our Approach

We send marketing communications, such as service updates, event-season reminders, insights and newsletters, only in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR), and equivalent laws applying to recipients in other countries.

3.2 When We Send Marketing

• With your consent. Where you opt in to marketing, for example by ticking an unticked box on a contact or quote form, we will send you the communications you have agreed to receive. Consent is specific, informed and freely given; we never use pre-ticked boxes, and submitting an enquiry form does not in itself constitute consent to marketing.
• Existing clients (“soft opt-in”). Where you have engaged our services or actively negotiated with us about them, we may send you marketing about our similar services to the contact details you provided, provided you were given a clear opportunity to opt out when your details were collected and in every message since.
• Corporate subscribers. Where permitted by PECR, we may send business-to-business marketing to corporate email addresses; we nevertheless apply the same opt-out standards to all recipients, and we honour all opt-out requests regardless of recipient type.

3.3 Opting Out

Every marketing email we send includes a clear unsubscribe link. You can also opt out at any time by emailing contact@globalexposupport.com with the word “unsubscribe”. Opt-outs are actioned promptly and in any event within 7 days. After you opt out, we keep a minimal suppression record (your email address and the date of your request) to ensure we do not contact you again; this is processed on the basis of our legal obligation and legitimate interest in respecting your preferences. Opting out of marketing does not affect service communications, such as project updates, invoices and responses to your enquiries, which we will continue to send as needed.

3.4 Records of Consent

We keep records of when and how consent was given, what the individual was told, and any subsequent changes or withdrawals, in line with UK GDPR accountability requirements.

3.5 Third Parties

We do not sell or share your contact details with third parties for their own marketing purposes. If we ever wish to run joint marketing with a partner, we will only do so with your prior consent and will name the partner at the point consent is requested.