Harry Potter: The Exhibition Privacy Policy

This Privacy Policy was last modified on November 8, 2023.



Harry Potter: The Exhibition Privacy Policy

This Privacy Policy was last modified on July 15, 2022.



This Privacy Policy (the “Policy”) governs the “Harry Potter: The Exhibition” websites (each a “Site” and collectively the “Sites”), mobile applications/apps (each an “App” and collectively the “Apps”) and also the exhibitions operated by HPX LLC Exhibitions, Inc. HPX LLC acts as the data controller for the processing of personal data (”HPX LLC”, ”we”, “us” or “our”). The Sites and the Apps, along with the related content, applications, technology and services that that we offer through them, are referred to collectively as the “Platform”.






This Policy applies only to information we collect on or through the Platform. This Policy DOES NOT apply to information that we collect offline, or that you provide to or is collected by any third party, which may have their own privacy policies that we encourage you to read before providing your information on or through them (see “Third-Party Information Collection” below).




This Policy may change from time to time (see “Changes to Our Privacy Policy” below). Your continued use of the Platform after we revise this Policy means you accept those changes, so please check this Policy periodically for updates.




How We Collect Information





Information You Provide Directly to Us



Information by which you may be personally identified, including but not limited to, your name, postal address, email address, and telephone number (“personal information”).




Filling in forms on the Platform. This includes information that you may provide when downloading, registering with, accessing, or using any aspect of the Platform, when requesting further services, and when reporting problems with the Platform.

Contacting us. This includes information you may provide when you correspond with us, including, but not limited to, email addresses and phone numbers.

Participating in surveys. This includes information you may provide when you respond to surveys that we might ask you to complete for research purposes.

Carrying out transactions. Details of transactions you carry out through the Platform and of the fulfillment of your orders. You may be required to provide financial information before placing an order through the Platform.

Searching within the Platform. This includes information you may provide when you perform search queries on the Platform.

If you provide information for publication or display (“Posted”) on public areas of the Platform or websites you access through the Platform (collectively “User Contributions”), then your User Contributions are Posted and transmitted to others at your own risk. Additionally, we cannot control the actions of third parties with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.


Automatic Information Collection and Tracking



Usage Details. When you access and use the Platform, we may automatically collect certain details of your access to and use of the Platform, including traffic data, location data, logs, and other communication data and the resources that you access and use on or through the Platform.

Device Information. We may collect information about your mobile device and internet connection, including the device’s unique device identifier, IP address, operating system, browser type, mobile network information, and the device’s telephone number.

Stored Information and Files. The Platform may also access metadata and other information associated with other files stored on your device. This may include, for example, photographs, audio and video clips, personal contacts, and address book information.

If you do not want us to collect any of the above information, then you may decide not to use the Platform or not to download the mobile application, or delete the mobile application from your device. For more information, see “Your Choices About Our Collection, Use, and Disclosure of Your Information” below.





Cookies (or mobile cookies). A cookie is a small file placed on your smartphone. It may be possible to refuse to accept mobile cookies by activating the appropriate setting on your smartphone. However, if you select this setting you may be unable to access certain parts of our App.

Web Beacons. The Platform and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that we permit, for example, to count users who have visited those pages or opened an email and for other related app statistics (for example, recording the popularity of certain app content and verifying system and server integrity).













We use a tool called “Google Analytics” to collect information about use of this site. Google Analytics collects information such as how often users visit or use the Platform, what pages users visit when they do so, and what other sites user used prior to coming to the Platform. For more information regarding how Google uses such information, please visit the following website: https://www.google.com/policies/privacy/partners/.


We use the information we get from Google Analytics to improve the Platform. Google’s ability to use and share information collected by Google Analytics about your visits to this the Platform is restricted by the Google Analytics Terms of Use (https://marketingplatform.google.com/about/analytics/terms/us/) and the Google Privacy Policy (https://policies.google.com/privacy). You can prevent Google Analytics from recognizing you on return visits to the Platform by disabling cookies on your browser. For more information on disabling cookies on your browser, see “Your Choices About Our Collection, Use, and Disclosure of Your Information” below.















We may also use your information to contact you about goods and services that may be of interest to you, including our own good and services or the goods and services of third parties. For more information, see “Your Choices About Our Collection, Use, and Disclosure of Your Information” below.









To our subsidiaries and affiliates.


To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information we hold about the Platform’s users is among the assets transferred.





If we believe disclosure is necessary or appropriate to protect the rights, property, our safety, our customers, or others.




Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies or block the use of other tracking technologies, some parts of the Platform may then be inaccessible or not function properly.

Promotion by HPX LLC. You can opt-out of receiving promotional materials by logging into the Platform and adjusting your user preferences in your account profile or by selecting “unsubscribe” in emails we send to you.






You may also send us an email at [email protected] to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.









The Platform is intended for use by persons aged 13 or older, and by your use of this Platform you affirm that you are at least 13 years of age. We do not knowingly collect personal information from children under the age of 13. If we discover or are made aware that we have received personal information from an individual who indicates that he or she is, or whom we otherwise have reason to believe is, under the age of 13, we will delete such information from our systems. If you are a parent or guardian of a child under the age of 13 and believe that your child has disclosed personal information to us we welcome you contacting us as provided below so that we can address such matter.




From time to time there may be instances when we collect information through the Platform about children under the age of 13 but we will only do this when such information is provided to us by that child’s parent or guardian. In all cases where we’ve collected information about a child under the age of 13, the parent or guardian may contact us as provided below to review and request deletion of such child’s personal information as well as to prohibit the further use of such information by us.




California residents under 18 years of age may have additional rights regarding the collection and sale of their personal information. Please see “Your California Privacy Rights” below for more information.









To ask questions or comment about this Policy and our privacy practices, contact us via email at [email protected], or via regular mail at HPX LLC, 2870 Peachtree Road, Suite 418, Atlanta, GA 30305.





The following additional privacy notices for California residents (the “California Notice”) supplement the information contained in the other portions of this Policy and apply solely to individuals who reside in the State of California (“California consumer” or “you”). HPX LLC adopts this California Notice to comply with the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and their related regulations (collectively the “California Privacy Law” or the “CPL”) and other applicable California laws.


Overview of Consumer Rights Under the CPL


Under the CPL, California consumers have certain rights regarding their personal information, including:


The right to know the categories of personal information that HPX LLC has collected and the categories of sources from which we obtained such information.

The right to know HPX LLC’s business purposes for sharing personal information.

The right to know the categories of third parties with whom HPX LLC shared personal information.



The right to know if we sold or disclosed your personal information for a business purpose, comprising two separate lists disclosing:

any sales, which list identifies the personal information categories that each category of recipient purchased (note that at present we do not sell personal information that we collect); and

any disclosures for a business purpose, which list identifies the personal information categories that each category of recipient obtained.

The right to access the specific pieces of personal information that HPX LLC has collected

The right to correct personal information that HPX LLC has collected.

The right to delete your personal information.

The right to not be discriminated against if a California consumer exercise their rights under the CPL.

The provisions below of this California Notice provide further details about these and other rights and certain details about the exercise of such rights.








Information excluded from the CPL’s scope, including:







Category Examples

Identifiers An individual’s name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number or other similar identifiers

Personal information categories described in Cal. Civ. Code § 1798.80(e) A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information

Commercial information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

Internet or other similar network activity Browsing history, search history, information on a California consumer’s interaction with our website, application, or advertisement and any social media sites from which user information is linked, connected or obtained

Inferences drawn from other personal information Examples include a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes

Geolocation data Physical location or movements (Note: Certain precise geolocation data may be considered to be sensitive personal information under the CPL and, to the extent such data is considered to be sensitive, personal information, you have the right to limit the use and disclosure of such data.)







Directly From You. For example, from forms you complete or products and services you purchase or from communications with you such as when you contact HPX LLC (whether in person, by mail, by phone, online, via electronic communication or by other means) including our customer support service.

Indirectly From You. For example, from observing your actions on our Platform or from products or services that you have purchased from HPX LLC, if you have enabled such functionality, such as telemetry services.

From Others.

From third party service providers. For example, if you choose to make an electronic payment directly to HPX LLC, or through a linked website or mobile application, or through an affiliate of ours, HPX LLC may receive personal information about you from third parties such as payment services providers, for the purposes of that payment.


From Public Sources. For example, we may collect information from public records.

















As described to you when collecting your personal information or as otherwise set forth in the CPL or applicable law.



To perform services on behalf of a CPL-covered business or its service provider, such as customer service, order fulfillment, payment processing, financing and advertising, marketing, or analytic services.










In the preceding twelve (12) months, HPX LLC has disclosed the following categories of personal information for a business purpose:



《加州民法典》§ 1798.80(e)中描述的個人信息類別








來自 Cookie 的數據接收者



HPX LLC does not sell personal information to third parties.


Exercising Your CPL Rights and Choices


The sections below describe how you may exercise your rights under the CPL.


Access to Specific Information and Data Portability Rights. You have the right to request that we disclose certain information to you about our collection and use of your personal information. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability and Deletion Rights” below), we will disclose to you:









As allowed by the CPL, we do not provide these access and data portability rights (i) for business-to-business personal information or (ii), if applicable, as to personal information collected from HPX LLC’s California-based employees, job applicants or contractors when provided or collected in such employee, job applicant or contractor capacities.


Deletion and Correction Request Rights. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability and Deletion Rights” below), we will delete (and direct our service providers to delete) your personal information from our (and service provider) records, unless an exception applies.








遵守《加州電子通信隱私法》(加州刑法典 § 1546 及以下各條)。





As allowed by the CPL, we do not provide these deletion rights (i) for business-to-business personal information or (ii) if applicable, as to personal information collected from HPX LLC’s California-based employees, job applicants or contractors when provided or collected in such employee, job applicant or contractor capacities.


In addition, if you provide us with a verifiable consumer request to correct inaccurate personal information that we maintain about you, we will use commercially reasonable efforts to correct such information in accordance with your instructions


Exercising Access, Data Portability, Deletion and Correction Rights. To exercise the access, data portability, deletion and correction rights described above, you should submit a verifiable consumer request to us by one of the following methods:


Emailing us at [email protected]

By postal mail at: HPX LLC Exhibitions, 2870 Peachtree Road, Suite 418, Atlanta, GA 30305

Accessing your online account that you maintain with us

By calling us toll-free at 844-622-8724



在十二 (12) 個月內,您只能對訪問或數據可移植性提出兩次可驗證的消費者請求。可驗證的消費者請求必須提供足夠的資訊,使我們能夠合理地驗證您是我們收集個人資訊的人或授權代表,其中可能包括:














我們努力在收到可驗證的消費者請求后四十五 (45) 天內回復該請求。如果我們需要更多時間,我們將以書面形式通知您原因和延長期限。




If we’re unable to comply with your request, the response we provide will also explain the reasons we cannot comply with the request. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.






We will not discriminate against you for exercising any of your CPL rights. Unless permitted by the CPL or other applicable law, we will not as a result of you exercising any of your rights under the CPL:






However, we may offer you certain financial incentives permitted by the CPL that can result in different prices, rates, or quality levels. Any CPL-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.


Retention of Personal Information


Our policy is to retain personal information only for as long as is necessary to fulfill the reason for which the personal information was collected and as necessary to process such personal information. 

In addition to the above, we will retain your personal information for the purposes of satisfying any professional, legal, accounting or reporting requirements to which we are subject.

 To determine the appropriate retention period for personal information, we consider the scope, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of the personal information, the purposes for which we collected and processed your personal information and whether we can reasonably achieve those purposes through other means, as well as any applicable legal and professional requirements




Sharing Personal Information for Direct Marketing Purposes. Before sharing personal information of California consumers with third parties for direct marketing purposes we will obtain opt-in consent from the applicable California consumers or provide such California consumers with a cost-free method to opt out.


California Do-Not-Track Disclosure. At this time, the Platform is not set up to honor web browser do-not-track settings. Do-not-track is a privacy preference that users can set in their web browsers. When a user activates the do-not-track settings in browsers that offer this setting, the browser sends a message to websites or applications requesting them not to track the user. For more information about do-not-track matters, please visit www.allaboutdnt.org.


Information on Marketing Disclosures. California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us once a year, free of charge, information about the personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us at: [email protected] or HPX LLC Exhibitions, 2870 Peachtree Road, Suite 418, Atlanta, GA 30305.


Content Removal Requests for Platform Users Under 18 Years Old. If you are a Platform user under 18 years of age and reside in California, you may request and obtain removal of, content or information that you have posted on the Platform. You may send us any such requests by one of the following methods: (i) by email (writing “Privacy Policy/Removal Request” in the subject line) at [email protected]; or (ii) by writing to us at HPX LLC Exhibitions, 2870 Peachtree Road, Suite 418, Atlanta, GA 30305. We will review the request and respond promptly. You should be aware that a request to remove content or information posted by you on the Platform does not ensure or require complete or comprehensive removal of such content or information from our databases.




If you have any complaint about use of the Platform, you may contact us by email at [email protected], or by postal mail at HPX LLC Exhibitions, 2870 Peachtree Road, Suite 418, Atlanta, GA 30305. In accordance with California Civil Code Section 1789.3, California residents may also file complaints with the Complaint Assistance Unit, Division of Consumer Services, California Department of Consumer Affairs by postal mail at 1625 North Market Road, Suite N112, Sacramento, CA 95834 or by telephone at 800-952-5210.









Persons who are residents of the member countries of the European Union (“EU”) or other data subjects covered by the EU’s General Data Protection Regulation, (EU) 2016/679 (the “GDPR”), have certain additional privacy rights under applicable law. The following provisions of this Privacy Policy provide an overview of these additional rights.




When processing your personal information, HPX LLC may rely on one or more of the following legal bases (or other available legal grounds), depending on the circumstances:



Legitimate Interests. We may process your personal information where HPX LLC has a legitimate interest in such processing for managing, operating or promoting our business, and that legitimate interest is not overridden by your interests, fundamental rights or freedoms.

We may process your personal information where HPX LLC has obtained your consent to the processing.

Contractual Necessity. We may process your personal information where such processing is necessary in connection with any contract that HPX LLC has with you.

Legal Requirements. We may process your personal information where such processing is required by applicable law.



Your personal information will not be disclosed to third parties except for where it is necessary for fulfillment of HPX LLC’s obligations to you or where HPX LLC is obliged or permitted to do so by law (including, without limitation, through the terms of any agreement HPX LLC may have with you), or where HPX LLC makes disclosures that are otherwise consistent with the uses described in this Policy.


HPX LLC may also disclose any information (including personal information) relating to you to law enforcement authorities or any regulatory or government authority in response to any request including requests in connection with the investigation of any suspected illegal activities.


HPX LLC reserves the right to transfer any personal information HPX LLC has about you in the event HPX LLC sells or transfers all or a portion of our business or assets, or merges with another organization. Should such a sale, transfer or merger occur, HPX LLC will use reasonable efforts seeking to require that the transferee uses personal information you have provided to HPX LLC in a manner that is consistent with this Policy.


We will not sell, resell or lease your personal information to any third parties but HPX LLC may, if required for the purpose(s) for which your personal information was collected and processed, share it with HPX LLC partners and/or service providers to enable them to provide their services to HPX LLC or to you, as applicable. The foregoing are in addition to the other uses described elsewhere in this Policy.




HPX LLC has policies and technical and organizational measures in place which are intended to safeguard and protect your personal information against unauthorized access, accidental loss, improper use and disclosure. However, you should be aware that information transmitted over the internet is not completely secure because of the nature of the internet and that systems and measures used to secure information are not flawless. For these reasons, although HPX LLC will use reasonable efforts to protect your personal information, HPX LLC does not warrant the security of personal information transmitted to HPX LLC or stored by HPX LLC, and personal information that is transmitted to HPX LLC by you electronically is done at your own risk.




Our policy is to retain your personal information only for as long as is necessary to fulfill the purposes for which HPX LLC collected such personal information, including for the purposes of satisfying any professional, legal, accounting or reporting requirements to which HPX LLC is subject. 

The visitors’ personal data are stored as long as the accounts remain active. In the event of prolonged inactivity, this data will be kept for a period of 3 years from the date of their visit to the exhibition. If visitors choose to unsubscribe, their data are archived and no longer processed. The data are archived, to meet our legal, regulatory, or other obligations. 

The photographs of visitors are associated with the visitor’s account and are kept for as long as the account remains active. If the account is closed, the account data will be deleted within 30 days and a written confirmation will be sent when completed; otherwise, the account data will be archived after 3 years of inactivity. 



You have a number of rights concerning your personal information that HPX LLC holds and uses, including the following:



Right of Access. You have the right to be informed about what personal information HPX LLC holds about you and to a copy of this personal information.

Right to Rectification. You have the right to have any inaccurate personal information which HPX LLC holds about you updated or corrected.

Right to Erasure. In certain circumstances you may request that HPX LLC delete the personal information that HPX LLC holds about you.

Right to Complain. You have the right to lodge a complaint regarding the processing of your personal information to an applicable governmental or supervisory authority in your country.

Right to Withdraw Consent. Where processing of personal information is based on your consent, you have the right to withdraw such consent at any time.

Right to Object. Where HPX LLC relies on our legitimate interests to process your personal information, you have the right to object to such use and HPX LLC is required to discontinue such processing unless HPX LLC can demonstrate an overriding legitimate interest in such processing.

Right to Restriction. You have the right to request that HPX LLC stop using your personal information in certain circumstances including if you believe that the personal information HPX LLC holds about you is inaccurate or that HPX LLC’s use of your personal information is unlawful. If you validly exercise this right, HPX LLC will store your personal information and will not carry out any other processing until the issue is resolved.

Right to Data Portability. Where you have provided personal information to us based on consent or for us to perform a contract with you or where the processing is performed by automated means, then in such circumstance you have the right to obtain personal information that you’ve provided to us to be made available to you in a structured, commonly used and machine-readable format so that you can use it elsewhere.

You may exercise any of the above rights and/or request that HPX LLC stop using your personal information for marketing purposes at any time by writing to HPX LLC via email at [email protected], or via regular mail at HPX LLC Exhibitions, 2870 Peachtree Road, Suite 418, Atlanta, GA 30305.