Privacy Policy

At The Purple Owl, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, booking our services, or visiting our venue, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Data Controller: The Purple Owl

Address: Unit 1 Delta Business Park, 10 Smugglers Way, London, SW18 1EG

Email: info@thepurpleowl.co.uk

Website: www.thepurpleowl.co.uk

2. What Personal Data We Collect

We may collect and process the following types of personal data:

• • Contact Information: Name, email address, phone number, postal address
• • Booking Information: Session preferences, date and time of bookings, group size, special requirements
• • Payment Information: Payment card details (processed securely by our third-party payment processor)
• • Communication Data: Any correspondence you send us via email, contact forms, or social media
• • Marketing Preferences: Your consent to receive marketing communications and newsletters
• • Technical Data: IP address, browser type, device information, cookies, and website usage data
• • CCTV Footage: Images captured by security cameras on our premises for safety and security purposes

3. How We Collect Your Data

We collect personal data through the following methods:

• • Online Booking System: When you book creative sessions or lounge reservations through our Design My Night booking widget
• • Contact Forms: When you submit enquiries through our Contact or Partnerships pages
• • Email Communications: When you email us directly at info@thepurpleowl.co.uk
• • In-Person: When you visit our venue and provide information at reception or during your visit
• • Website Cookies: Automatically collected when you browse our website (see Cookies section below)
• • CCTV: Automatically recorded when you enter our premises
• • Newsletter Sign-ups: When you opt in to receive marketing communications

4. How We Use Your Data

We use your personal data for the following purposes:

• • Service Delivery: To process and manage your bookings, reservations, and event attendance
• • Communication: To respond to your enquiries, provide customer support, and send booking confirmations
• • Payment Processing: To process payments for bookings and purchases
• • Marketing: To send you promotional materials, newsletters, and updates (only with your consent)
• • Website Improvement: To analyze website usage and improve user experience
• • Security: To ensure the safety and security of our premises, staff, and visitors through CCTV monitoring
• • Legal Compliance: To comply with legal obligations and protect our legal rights

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• • Contract Performance: Processing necessary to fulfill our contract with you (e.g., booking confirmations, service delivery)
• • Consent: Where you have given explicit consent (e.g., marketing communications, newsletter subscriptions)
• • Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g., website analytics, fraud prevention, security)
• • Legal Obligation: Where we are required by law to process your data (e.g., tax records, health and safety compliance)

6. How We Store Your Data

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

Data Retention Periods:

• • Booking Data: Retained for 7 years for accounting and tax purposes
• • Marketing Data: Retained until you withdraw consent or unsubscribe
• • CCTV Footage: Retained for 30 days unless required for investigation or legal purposes
• • Website Analytics: Anonymized data retained for 26 months
• • Email Correspondence: Retained for 3 years or as long as necessary for business purposes

Your data is stored securely on servers located within the UK and European Economic Area (EEA). We do not transfer your data outside the UK/EEA without appropriate safeguards.

7. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

• • Right to Access: You can request a copy of the personal data we hold about you
• • Right to Rectification: You can request that we correct any inaccurate or incomplete data
• • Right to Erasure: You can request that we delete your personal data (subject to legal obligations)
• • Right to Restriction: You can request that we restrict the processing of your data in certain circumstances
• • Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• • Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes
• • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at info@thepurpleowl.co.uk. We will respond to your request within one month.

8. Third-Party Services and Data Sharing

We may share your personal data with trusted third-party service providers who assist us in operating our business. These include:

• • Design My Night: Our booking system provider for managing creative session and lounge reservations
• • Payment Processors: Secure payment gateway providers for processing card payments
• • Email Service Providers: For sending booking confirmations and marketing communications (with your consent)
• • Website Analytics: Tools such as Google Analytics to understand website usage (anonymized data)
• • Hosting Providers: For secure website hosting and data storage

All third-party providers are carefully selected and required to comply with UK GDPR and maintain appropriate security measures. We do not sell your personal data to third parties.

We may also disclose your data if required by law, to protect our legal rights, or in connection with a business transfer or sale.

9. Cookies Policy

Our website uses cookies to enhance your browsing experience and analyze website traffic. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• • Essential Cookies: Required for the website to function properly (e.g., session management, security)
• • Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics)
• • Functional Cookies: Remember your preferences and settings
• • Marketing Cookies: Used to deliver relevant advertisements (only with your consent)

Managing Cookies:

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. Most browsers allow you to:

• • View and delete cookies
• • Block third-party cookies
• • Block cookies from specific websites
• • Block all cookies
• • Delete all cookies when you close your browser

For more information about cookies, visit www.allaboutcookies.org.

10. Links to Other Websites

Our website may contain links to third-party websites (e.g., social media platforms, booking systems). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 without parental consent. If you believe we have collected data from a child under 13, please contact us immediately so we can delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

13. How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us: