Privacy policy

Who we are

Future Pathways is a post-16 options event for students, parents and carers, delivered in partnership with Bedford Borough Council. This website is operated by WHP Creative Ltd, the “data controller” responsible for personal data collected here.

Registered address: 5 Manor Farm Court, Milton Keynes, MK12 5NN. Data protection contact: hello@future-pathways.live.

Our commitment to young people

By design, this website collects no personal data about the students, parents, carers and other visitors it is aimed at — there is no visitor or student sign-up here. Event tickets are handled separately by Eventbrite under their own privacy policy.

What we collect

We do not collect personal data about visitors, students, parents or carers who browse this site. The only personal data we hold is some basic exhibitor information:

• Exhibitor details. When an organisation registers interest or applies to exhibit, we keep what they enter — organisation name, a contact name and job title, email address, phone number, organisation type, website and address — and whether they opted in to marketing email.
• Administrator accounts. The email addresses of the staff who manage the site.

If you use a contact form, your message is emailed to our team to respond to and is not stored on this website. Event tickets are handled entirely by Eventbrite under their own privacy policy — we don’t receive attendee information.

How we use it and our legal basis

Under UK GDPR we rely on the following bases:

• Legitimate interests — to assess and manage exhibitor applications, respond to enquiries, display approved organisations in the public directory, and keep the site secure.
• Consent — to send marketing email, only where you have explicitly opted in. You can withdraw consent at any time.
• Legal obligation — where we must retain records to comply with the law.

Cookies and analytics

The site uses a minimal set of cookies needed to operate securely. Where analytics is enabled, we use Google Analytics to understand site usage in aggregate. Exhibitor pages may embed a Google Map, which is loaded from Google and subject to Google’s terms. We use Vercel BotID to help prevent automated spam on our forms.

Who we share it with

We do not sell personal data. We share it only with service providers who process it on our behalf, under contract:

• Vercel — website hosting
• Supabase — database, authentication and file storage
• SendGrid — sending transactional and (opt-in) marketing email to exhibitors
• Google — analytics and map embeds
• Eventbrite — event ticketing (a separate, independent controller)

We may also disclose data where required by law or to protect our rights.

International transfers

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep exhibitor and enquiry data only for as long as necessary for the purposes above, and review it after each event cycle. Marketing contacts are kept until you unsubscribe or ask us to remove you.

Your rights

You have the right to access, correct, delete or restrict your personal data, to object to processing, to data portability, and to withdraw consent. To exercise any of these, contact us at hello@future-pathways.live. You also have the right to complain to the ICO at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.