The event organiser, Kushya Guide, has the legal responsibility to tell ticket buyers and event attendees how their personal information will be collected and used. You can find their Privacy Policy below or contact them to request it.
Privacy Notice — Homer Exhibition (Ware) and the Kushya Guide AI audio guide
Last updated: 17/08/2026
This notice explains what happens to your personal information when you book a ticket for, or visit, the in-person Homer exhibition, and when you use the Kushya Guide AI audio guide on your phone.
The AI guide is part of the exhibition rather than an optional extra, so this notice matters to everyone who books.
In short: we do not record or store your conversation with the guide. The details are below.
1. Who is responsible for your information
The data controller is:
David Erik Stig von Huth, trading as Kushya Guide Email: davidvonhuth@gmail.com
Kushya Guide is a trading name. It is not a registered company — it is one person, operating as a sole trader, who is personally responsible for the decisions described in this notice and for answering to you about them.
If you have any question about this notice, or want to exercise any of the rights in section 7, email the address above. If you need a postal address, ask and we will give you one.
2. What we collect
When you book a ticket
- Your first name and last name
- Your email address
- Your booking reference and the date and time of your visit
- The amount you paid, the date of payment, and the transaction reference
- The type of card used and its last four digits, or your PayPal account email if you pay that way
- Your billing address or postcode, where the payment processor requires it to check the payment
- A record that you gave the consent described in section 3, and when you gave it
Tickets are paid. We never see or hold your full card number, expiry date or security code. Those go straight from you to the payment processor, and are never passed to us.
When you use the AI guide
- Your speech. When you talk to the guide, your voice is streamed live to our AI provider so it can understand you and reply. This is what makes the guide work.
- Your phone's IP address, which is necessarily visible to the services carrying the audio between your phone and the guide.
- Basic technical information about your browser and device, needed to deliver a working audio session.
- Your microphone — but only with your permission. Your browser will ask you before the guide can hear anything, and you can withdraw that permission at any time.
We do not ask your name during a guide session, and guide sessions are not linked to your ticket booking or to your payment.
When you visit kushyaguide.com
- Standard web server information, including your IP address.
- Basic usage statistics: how many people visited, which site you arrived from (for example a link on Facebook or LinkedIn), and which buttons were pressed.
We do not use cookies for advertising or tracking. Our ticketing and payment providers may set cookies that are strictly necessary to complete a purchase securely — for example to keep your basket intact and to detect fraud. We cannot identify you from our own website statistics.
The visitor survey
The survey at the end of your visit is completely anonymous. It asks for no name, no email, and nothing else that could identify you. We have no way of connecting an answer to a person.
3. Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Issue your ticket, send your confirmation, admit you on the day | To provide the ticket you asked for | Contract — Art. 6(1)(b) |
| Take payment for your ticket | To provide the ticket you asked for | Contract — Art. 6(1)(b) |
| Issue refunds, and deal with cancellations, failed payments and chargebacks | To provide the ticket you asked for, and to defend a claim | Contract — Art. 6(1)(b); Legitimate interests — Art. 6(1)(f) |
| Keep a record of the sale | Because tax and accounting law requires us to | Legal obligation — Art. 6(1)(c) |
| Allow our payment providers to run fraud and anti-money-laundering checks | To keep the sale secure, and because the law requires them to | Legal obligation — Art. 6(1)(c); Legitimate interests — Art. 6(1)(f) |
| Email you if the exhibition is cancelled, moved or changed | To provide the ticket you asked for | Contract — Art. 6(1)(b) |
| Process your speech in real time so the guide can hear you and reply | The guide is the exhibition. It cannot work without hearing you. | Contract — Art. 6(1)(b) |
| Handle anything personal you happen to mention in passing — your health, beliefs, background or ethnicity | We do not want it and never ask for it, but a conversation cannot be filtered before it happens | Explicit consent — Art. 9(2)(a), given when you booked. See below. |
| Handle your IP address and device information to carry the audio | Technically necessary to deliver the audio session | Legitimate interests — Art. 6(1)(f) |
| Collect basic website usage statistics | To understand whether people are finding the exhibition | Legitimate interests — Art. 6(1)(f) |
You have the right to object to any processing based on legitimate interests. See section 7.
What you agreed to when you booked
Some kinds of information get special protection in law: your health, your religious or philosophical beliefs, your ethnic or racial background, your sexual orientation, your political opinions, your trade union membership, and genetic or biometric data.
The guide will never ask you about any of these. It is built to talk about Homer's Epic Poems, and it is designed not to invite that kind of conversation. But it is a conversation, and people sometimes mention personal things in passing.
If that happens, what you said goes to OpenAI along with everything else you say. OpenAI holds it for up to 30 days on servers in the United States, purely to check that their service is not being misused, and then deletes it. They do not use it to train their models. We do not store it at any point.
Because we cannot filter a conversation before it happens, we asked you to agree to this specifically when you booked your ticket, with a separate tick-box. That agreement is your explicit consent under Article 9(2)(a), and it is what allows us to run the guide at all.
You can withdraw it at any time. Simply do not start a guide session, or close it partway through — and because nothing is kept on our side, withdrawing leaves nothing behind to delete. If you would prefer to tell us in writing, email davidvonhuth@gmail.com.
Our honest advice: keep the conversation to the exhibition topic. The guide is more interesting that way, and there is then nothing personal to protect.
4. Who your information is shared with
We use the following providers. Each one acts on our instructions, under a written data protection agreement, except where marked otherwise. We do not sell your information, and we do not share it with anyone else unless legally required to. The venue, Ware Drill Hall, receives nothing.
| Provider | What they handle | Where |
|---|---|---|
| Zimma Ltd, trading as Ticket Tailor | Your booking: name, email, ticket and payment details | European Union (Ireland) |
| [Stripe Payments Europe, Limited / PayPal (Europe) S.à r.l. et Cie, S.C.A.] | Takes your card or account payment, and runs the fraud and anti-money-laundering checks the law requires. Acts as an independent controller for those checks — see their own privacy notice. | European Union, with onward transfers to the United States |
| LiveKit Incorporated | Carries the live audio between your phone and the guide; sees your IP address | United States |
| OpenAI | Understands your speech and generates the guide's replies | United States |
| Qdrant Solutions GmbH | Searches the exhibition's content so the guide knows what to tell you about each object | United States |
| Base44, Inc. | Hosts kushyaguide.com | United States |
We may also have to disclose payment records to HM Revenue & Customs, and to an accountant or bookkeeper if we engage one, in connection with our tax obligations.
Transfers outside the UK
LiveKit, OpenAI, Qdrant and Base44 all process information in the United States, and our payment processor may transfer information there too. Every one of these transfers is covered by an approved safeguard — the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, and in some cases the EU–US Data Privacy Framework — which forms part of our written contract with each provider. These are the safeguards UK law requires before personal information may be sent abroad. You can ask us for more detail at any time.
5. How long it is kept — and what happens to your conversation
Your conversation with the guide
We do not record it. We do not store it. We keep no transcript.
Our systems are deliberately configured so that your speech is used to generate a reply and then discarded. Session recording and transcript logging are switched off.
Two things you should know:
- LiveKit, which carries the audio, deletes it after delivery. Nothing is retained.
- OpenAI, which generates the replies, keeps API data for up to 30 days in order to check for misuse of their service, and then deletes it. They do not use it to train their models. This is the retention you consented to when you booked, described in section 3. We have applied to OpenAI for their zero-retention option, which would remove this window entirely; if that is granted we will update this notice.
So: your conversation is not stored by us at all, and is held briefly by our AI provider purely as an anti-abuse measure.
Everything else
| Information | Kept until |
|---|---|
| Your booking details used to run the exhibition (booking reference, visit date and time, admission status) | [13/10/2026], then deleted |
| Your name, email, and the record of your payment | Until [31 January 2033], then deleted. Sole traders must keep the records behind a Self Assessment tax return for five years after the 31 January filing deadline for that tax year. Your ticket falls in the [2026/27] tax year, whose return is due on [31 January 2028]. |
| The record that you gave your consent, and when | Kept alongside your booking, because the law requires us to be able to show that consent was given |
| Website usage statistics | Retained by our website host for as long as necessary for the purpose; they are aggregate and do not identify you |
| Survey responses | Kept indefinitely — but they are anonymous, and are not personal information |
Because tickets are now paid, HMRC requires us to keep a record of each sale for several years. This is the one part of your information we cannot delete on request during that period.
6. Automated decision-making
The guide generates its replies automatically, using an AI model. It does not make any decision about you that produces a legal effect, or any similarly significant effect. It talks about paintings.
Our payment processor runs automated fraud checks on transactions, which can result in a payment being declined. If that happens to you, contact us and we will look into it, and you can ask the payment processor to review the decision.
7. Your rights
Under UK data protection law you have the right to:
- Access the personal information we hold about you
- Correct it if it is wrong
- Erase it
- Restrict how we use it
- Object to our use of it, including any use based on legitimate interests
- Data portability — receive your information in a machine-readable format
- Withdraw consent at any time. We rely on your consent for one thing only — anything personal you mention to the guide, described in section 3. Withdrawing is as easy as giving: do not start a session, or close the one you are in.
Email davidvonhuth@gmail.com and we will respond within one month.
Two honest notes:
- Because we do not record or store your conversation with the guide, there is generally nothing for us to give you, or to delete, in relation to it. That is the point of designing it this way.
- We cannot erase your sales record before the tax retention period in section 5 has run out. We can still correct it, and we will not use it for anything else.
8. Complaints
If you are unhappy with how we have used your personal information, you have the right to complain to us directly. Email davidvonhuth@gmail.com with "Complaint" in the subject line. We will acknowledge your complaint and tell you the outcome within 30 days.
If you are not satisfied with our response, you can complain to the UK's data protection regulator:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 · ico.org.uk/make-a-complaint
9. Age
The AI guide is intended for visitors aged 18 and over.
10. Changes to this notice
We may update this notice. The date at the top shows when it last changed.