Food+Beverage Engineering 2027 exhibition is owned and organised by Curious Heads Media Ltd (registered in England and Wales under company registration number 15198499). It takes place on 23 June 2027 at Derby Arena, co-located with Sustainable Food Factory 2027 and Food+Beverage Logistics 2027.
By visiting our website, registering for or attending the event in 2027, or otherwise providing us with your personal information, it will be processed as described below.
This privacy policy explains how we collect, use, share and retain your personal data. We want you to understand your rights under UK data protection law (the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations) and our obligations towards you.
1. Our Legal Basis for Processing Your Personal Data
We process your personal data under the following legal bases:
- Contractual Necessity: This processing is essential to fulfil our agreement with you. This includes using your details to issue your event pass, send essential operational event updates (e.g. timings, content programmes, venue changes) and grant you access to the exhibition and its co-located events. It also covers managing exhibitor, sponsor and speaker bookings, contracts and invoices.
- Legitimate Interests: This applies to processing necessary for our business activities, provided your rights are not overridden.
Our legitimate interests include:
- Marketing our own services: Sending you communications about our future exhibitions, conferences and industry publications as a professional in the industry, and showing you adverts for our events on LinkedIn, Facebook, Instagram and Google using matched audiences (see Section 4).
- Internal Administration: Checking and approving registrations, improving our events and website and protecting against fraud.
- Event Photography and Video: Reporting on and promoting our events.
- Suppression: Keeping a record of people who have opted out, so we do not contact them again.
- Consent: We will only share your data with exhibitors or sponsors for their marketing purposes where you have given clear, specific and ticked consent via the registration form. We also rely on your consent for analytics and advertising cookies on our website (see our Cookie Policy), and for marketing to personal email addresses where the law requires it.
- Legal Obligation: Keeping accounting and tax records, and responding to lawful requests.
Where we rely on legitimate interests, we have weighed our interests against yours. You can ask to see our assessment, and you have the right to object at any time.
2. Data Protection Officer and Contact Details
The Data Controller is Curious Heads Media Ltd, with a business address at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
Our Data Protection Officer (DPO) is Iain McLean. You can contact the DPO directly via email at data@
3. The Sources of Personal Data and Information We Collect
We collect professional personal data (such as name, job title/function, mobile number, company and company email) through the following methods:
- Directly from You: When you register for the event, book a stand or sponsorship, speak at the event, use our website chat, update your email preferences or otherwise interact with us.
- From Publicly Available Sources and Data Partners (Data Enrichment): We collect and enrich data from publicly available sources and from B2B data providers, to ensure we only contact highly relevant individuals for our B2B services (as detailed in Section 4). These sources include, but are not limited to, public professional platforms, such as LinkedIn - and official company websites.
- From Our Website and Advertising (Cookies and Similar Technologies): Our cookie banner asks for your permission before we use anything other than essential cookies on our website.
If you agree, we use:
- Google Analytics, to understand how visitors use our website (e.g. pages viewed, time spent, how you arrived).
- Advertising tags from Google, LinkedIn and Meta (Facebook and Instagram), to measure which of our adverts lead to registrations, exhibitor enquiries, brochure and floor plan downloads, contact form and newsletter sign-ups, and clicks on our email addresses and phone numbers, and to show our event adverts to people who have visited our website.
- Zoho SalesIQ, to understand how visitors interact with our content in real time. If you have previously provided us with your professional contact details (e.g. by clicking a link in an email we sent you), SalesIQ may link your website activity to your professional profile to help us provide more relevant information.
- Embedded YouTube videos, which only load YouTube cookies once you have accepted them.
You can accept or reject these at any time using the cookie settings icon on our website. Full details are in our Cookie Policy.
- From Our Emails: When you open or click a link in our emails, our email platform records this so we know which content is useful to you.
- From Advertising Platforms: If you fill in a form inside one of our adverts on LinkedIn, Facebook or Instagram (for example, to register or ask about exhibiting), the platform passes the details you entered to us.
- At the Event: Attendance records, badge scans and event photography and video (see Sections 5 and 6).
The data collected can include: your name, job title/function, company, company address, company email address, company phone number, mobile phone number, country and LinkedIn profile URL; the events you register for and attend; your marketing preferences and consents; contract, invoice and payment details for exhibitors and sponsors; and messages you send through our website chat.
We only collect personal data that is necessary for the purposes stated in this policy, in adherence to the principle of data minimisation. We do not ask for sensitive personal data. If you tell us about dietary or accessibility needs for the event, we use that information only to meet those needs and delete it after the event.
4. How We Use and Share Your Personal Data
We use and share your data for the following purposes.
Event Fulfilment and Communication (Contractual Necessity)
We use your data to check and approve your registration, issue your event pass, and ensure your successful participation in the event. Food+Beverage Engineering 2027 is a trade-only event, so we review each registration and may decline those that do not meet our entry criteria. One registration gives you access to all three co-located events: Food+Beverage Engineering 2027, Sustainable Food Factory 2027 and Food+Beverage Logistics 2027. We send essential operational communications about the event you registered for (such as timings, content programmes, and venue changes), even if you have opted out of marketing.
Direct Marketing and Data Profiling (Our Legitimate Interest)
We use your data to send you relevant information about our own future B2B exhibitions, conferences, and industry publications. To ensure the content you receive is highly relevant, we conduct Data Enrichment and Profiling. This involves using public sources or professional third-party data partners to verify the accuracy of your information, enrich your profile, and categorise your professional interests by job title, function and company. This decides which of our event communications you receive. We send marketing to work email addresses on the basis of legitimate interests. We only send marketing to personal email addresses (e.g. Gmail or Hotmail) if you asked to receive it, or registered for one of our events and did not opt out when you did. Every email lets you choose your topics or unsubscribe from all. You have the right to object to this processing at any time.
Online Advertising (Consent and Legitimate Interests)
If you accept advertising cookies, we may show you adverts for our events on Google (including YouTube), LinkedIn, Facebook and Instagram, measure which adverts lead to registrations, and build advertising audiences of our website visitors. Our marketing agency runs these campaigns on our behalf. We also use matched audiences, on the basis of our legitimate interests: we upload the email addresses of contacts in our database (such as past visitors, registrants and prospects) to LinkedIn, Meta (Facebook and Instagram) and Google, so that we can show our event adverts to those contacts and to similar professionals. Email addresses are scrambled (hashed) before upload. The platform uses them only to find matching accounts, and does not keep details it cannot match. We never upload the details of anyone who has opted out of our marketing. You can object to this at any time by unsubscribing from our emails or contacting data@
Sharing Data with Exhibitors and Sponsors (Requires Explicit Consent)
We will only share your contact details with our exhibitors and sponsors if you have actively and optionally checked the corresponding consent box(es) on the registration form. We share only with companies exhibiting at or sponsoring that event, and we keep a record of what we shared, with whom and when; you can ask us at any time which companies have received your details. Exhibitors and sponsors use your details as separate data controllers, under their own privacy policies, and must tell you where they got your details and give you a way to unsubscribe. You can withdraw this consent at any time by emailing data@
Other Data Sharing
We do not sell your personal data. We share it only with:
- Service Providers: Companies that process data on our behalf, under contracts that protect it. These include Zoho (CRM, email marketing, registration forms and pages, e-signature, invoicing, file storage, website chat and analytics), Google (website analytics and tag management), Silktide (cookie consent banner), B2B data providers, an email verification service, our marketing agency, our web designers and hosting providers, and our accountants and payment providers.
- Advertising Platforms: Google, LinkedIn and Meta (Facebook and Instagram) receive data about your visit if you accept advertising cookies, and scrambled email addresses for our matched audiences (see above). They use cookie data partly for their own purposes, as explained in their privacy policies.
- Event Suppliers: Suppliers who help us deliver the event, such as badge printing.
- Legal or Regulatory Bodies and Advisers: Where we are required to comply with a legal obligation or court order, to our professional advisers, or to a buyer if our business is sold.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
5. Badge Scanning at the Event
Your visitor badge may contain the information you provided on registration.
When you allow your badge to be scanned by an exhibitor or sponsor on their stand, you are providing your contact details directly to them.
The exhibitor is the data controller for the information they collect via the badge scan and is responsible for complying with data protection laws for their own marketing follow-up.
You are advised to request a copy of the exhibitor’s or sponsor’s privacy policy from them prior to having your badge scanned.
6. Photographic and Audiovisual Material
We may capture photographs and/or audiovisual material at the event, including seminar presentations, panel debates and exhibitor interviews. Signs at the event explain this.
Your image, voice, and other personal data (including name, job title and company) may appear in internal or external releases, including media (print, video), our websites, our YouTube channel and social media pages, and other marketing materials. If you do not wish to be featured, please tell our team on the day or let the DPO know (please see Section 2).
7. Your Rights and Complaints
At any point while we are processing your personal data, you have the following rights: Right of access, Right of rectification, Right to be forgotten, Right to restrict processing, Right of portability, and the Right to object to processing (including direct marketing, which we will always stop).
Withdrawal of Consent: You may withdraw any consent at any time, including consent for third-party marketing and for cookies. This will not affect the lawfulness of processing before the withdrawal.
To exercise these rights, you may contact our Data Protection Officer, Iain McLean, directly via email at data@
Complaints: In the event you wish to make a complaint, please contact our Data Protection Officer (see above) in the first instance. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.
You also have the right to lodge a complaint directly with the Information Commissioner’s Office (ICO) via their website at www.ico.org.uk or on 0303 123 1113.
8. Data Retention, International Transfer and Security
8.1 Retention period for specific purposes
Your Personal Data will be retained for the following retention periods unless longer retention is required by law or where we have a legitimate and lawful purpose to do so:
- Prospects: Stored for a period of five (5) years starting from integration into the database. This period restarts if you interact with us (e.g. register, reply or ask a question).
- Exhibitors – Visitors – Delegates – Speakers: Data processed as part of the execution of a contract is kept for as long as is necessary for the contract, then for six (6) years, the limitation period for contractual claims in England and Wales.
- Marketing Subscribers (Consent-based): Stored for an initial period of five (5) years from the date of consent. We will periodically review your engagement and may seek to renew your consent. Data will be deleted if consent is withdrawn or if there is no interaction after the 5-year period.
- Marketing Subscribers (Soft Opt-in): Stored for a maximum period of five (5) years from your last registration or relevant interaction.
- Record of Consents and Opt-outs: Records of consents are kept for as long as we rely on the consent, then for six (6) years. Your email address is kept on a suppression list indefinitely after you unsubscribe, so we can keep honouring your choice.
- Dietary and Accessibility Information: Deleted after the event.
- Website and Advertising Data: Kept for the periods set out in our Cookie Policy.
8.2 General Retention Rules and Exceptions
Right to Erasure: The retention periods mentioned above do not apply if you exercise your Right to Erasure prior to the expiry of the relevant retention period (except that we keep the minimum needed on our suppression list).
Suspension for Legal Proceedings: All retention periods mentioned in point 8.1 may be suspended in the event of administrative or legal proceedings, until such proceedings are completed.
Legal Compliance: Accounting and tax records are kept for six (6) years after the end of the financial year they relate to.
Anonymised Data: We may keep an anonymised form of your Personal Data which will no longer refer to you, for statistical purposes without time limits.
8.3 International Transfer
Some of our service providers and advertising platforms store or access data outside the UK, including in the EEA and the United States. Where a country is not covered by UK adequacy regulations, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, or the UK–US Data Bridge for certified US companies. You can ask us for details.
8.4 Security
Access to our systems is limited to staff and providers who need it, protected by individual logins and two-step verification where available. Our providers are bound by confidentiality and security terms.
9. Policy Updates
We update this policy when our practices change. If a change materially affects you, we will tell you by email or on our website.
This version was last updated on 27th October 2026.