Who we are

Town Hall Limited (“we”, “us”, “our”) is an events venue and cultural space based in London that also provides hospitality services, including restaurants and membership facilities. We are committed to protecting and respecting your privacy. This notice explains how we collect, use, store and share your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Where we process data of individuals in the European Economic Area (EEA), the EU GDPR may also apply.

Data Controller

Town Hall Limited
Bidborough Street, London WC1H 9AU, United Kingdom
Email: dpo@townhall.co.uk

Personal data we collect

• Information you provide: name, postal address, email, phone number, payment details, personal description, photograph, dietary requirements, accessibility needs, membership preferences and restaurant-booking details (supplied when registering, booking events, joining our cultural programme, applying for membership or making restaurant reservations).
• Technical information: IP address, browser type/version, time-zone setting, plug-ins, operating system and platform (collected automatically during site visits).
• Usage data: URLs visited, click-stream data, page response times, download errors, length of visits, interaction data and exit methods.
• Information from other sources: data from partner sites, service providers, analytics tools, advertising networks and credit-reference agencies.

How we use your data and lawful bases

We use your personal data for the purposes and lawful bases set out below:

• To process event bookings, cultural-programme registrations, membership applications and restaurant reservations – performance of a contract.
• To provide customer service, administer memberships, manage our cultural programme, coordinate with event partners, improve our services, ensure security and prevent fraud – legitimate interests.
• To meet legal or regulatory requirements (e.g. accounting, tax, health & safety) – legal obligation.
• To send existing customers information about similar goods, services or events – legitimate interests.
• To send marketing communications to new customers or to share data with selected third parties for their marketing – consent (which may be withdrawn at any time).

We do not use your personal data for purposes that are incompatible with those listed above.

Cookies

We use cookies and similar technologies to distinguish you from other users, enhance your browsing experience and analyse site performance. Full details are available in our Cookie Policy.

Sharing your data

We may share your data with:

• Group companies and subsidiaries (as defined in s.1159 of the Companies Act 2006).
• Service providers who need access to data to perform contracted services: – Pixl Evolution (audio-visual and production services). – Rhubarb Hospitality (catering and restaurant services).
• Third-party providers of IT hosting, CRM, payment processing, analytics or marketing systems acting as data processors under written contracts.
• Prospective buyers or sellers in the event of a business sale or merger (under appropriate confidentiality measures).
• Regulators, courts or law-enforcement agencies where disclosure is legally required.

We do not sell your personal data.

International transfers

When personal data is transferred outside the UK/EEA, we implement appropriate safeguards—such as the UK International Data Transfer Addendum or the EU/UK Standard Contractual Clauses—supplemented by transfer risk assessments, to ensure an equivalent level of protection.

Data security

We employ appropriate technical and organisational measures, including secure servers, encryption (e.g. SSL/TLS for payment transactions) and strict access controls. All third-party processors are contractually obliged to apply comparable security standards.

Data retention

Data is retained only as long as necessary for the purposes stated above, in accordance with our Data Retention and Cleansing Policy (available on request). Membership records are kept for the duration of membership plus a reasonable period thereafter. When no longer required, data is securely deleted or anonymised.

Automated decision-making

We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects on you. If this changes, we will notify you and update this notice.

Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict our processing.
• Request data portability to another party.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise these rights, email dpo@townhall.co.uk.

ICO Contact

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Third-party links

Our website may contain links to third-party sites. We are not responsible for their privacy practices; please review their policies before providing personal data.

Changes to this policy

We may update this notice from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email. Please check back regularly for updates.

Complaints

If you have concerns about our data-processing activities, contact our Data Protection Officer at dpo@townhall.co.uk. You may also raise concerns with the ICO using the details above.

Contact

Data protection officer

Town Hall Limited, Bidborough Street, London WC1H 9AU, United Kingdom

Email: dpo@townhall.co.uk