Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Northbridge Rehearsal Studios Ltd collects, uses, stores, shares, and protects personal data when you use our services, visit our premises, contact us, or otherwise interact with us. We operate as a rehearsal studio business and provide rehearsal room bookings, related studio services, customer support, and communications.
Data controller: Northbridge Rehearsal Studios Ltd
Trading address: Northbridge Rehearsal Studios, Unit 4, 18-22 Brick Lane, London E1 6RF, UK
Email: [email protected]
Phone: +44 20 7265 4839
This policy is intended to provide clear information about our processing practices and your rights in relation to personal data.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on how you interact with us:
- Identity and contact details: name, email address, telephone number, postal address, and organisation or band name.
- Booking and service information: rehearsal room bookings, dates, times, attendance details, preferences, special requirements, and service history.
- Payment and transaction information: payment status, billing details, and transaction references. We may use third-party payment providers and may not store full card details ourselves.
- Communication records: emails, phone calls, messages, enquiries, complaints, and feedback.
- Technical and usage information: IP address, device information, browser type, log data, and website interaction data where applicable.
- Security and access information: CCTV images, entry records, and other security-related information where our premises security systems are in use.
- Marketing preferences: your communication preferences and consent choices, where relevant.
We generally collect personal data directly from you, but we may also receive information from booking platforms, payment processors, service providers, or other third parties involved in providing our services.
3. Purpose of data processing
We process personal data for the following purposes:
- to manage enquiries, bookings, cancellations, and customer accounts;
- to provide rehearsal studio services and related support;
- to process payments, issue invoices, and handle refunds;
- to communicate with you about bookings, service updates, and customer support matters;
- to maintain business records and manage our relationship with customers and suppliers;
- to monitor and improve our website, premises operations, and customer experience;
- to protect our premises, staff, customers, equipment, and property, including fraud prevention and security monitoring;
- to comply with legal and regulatory obligations;
- to send marketing communications where permitted by law and, where required, with your consent;
- to establish, exercise, or defend legal claims.
4. Legal basis for processing
We only process personal data where we have a valid legal basis to do so. Depending on the context, our legal bases may include:
- Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as managing a booking.
- Legal obligation: where processing is necessary to comply with applicable legal, tax, accounting, or regulatory obligations.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms, such as managing our studio operations, improving services, maintaining security, and preventing misuse or fraud.
- Consent: where you have given us clear consent, for example for certain marketing communications or optional processing activities.
Where we rely on legitimate interests, we assess whether the processing is necessary and balanced against your interests. Where we rely on consent, you may withdraw it at any time.
5. Data sharing and third parties
We may share personal data with trusted third parties only where necessary and in accordance with applicable law. These may include:
- Payment providers: to process transactions securely.
- Booking and software providers: to manage reservations, customer records, communications, and operational systems.
- IT, hosting, and cloud service providers: to store and maintain systems and data.
- Professional advisers: such as accountants, lawyers, insurers, and auditors.
- Public authorities and regulators: where disclosure is required by law or to respond to lawful requests.
- Security providers: where necessary for premises security, monitoring, or incident response.
We require third parties processing personal data on our behalf to protect it appropriately and to use it only for authorised purposes.
6. Data transfer to third countries
Some of our service providers may process personal data outside the UK, including in countries that may not provide the same level of data protection as the UK. Where this occurs, we take appropriate safeguards to protect your personal data, which may include standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms.
Where relevant, we will ensure that any international transfer is carried out in compliance with applicable data protection requirements and that appropriate technical and organisational protections are in place.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, reporting, operational, and security requirements. The retention period may depend on the nature of the data and the reason for processing.
- Booking and customer records: retained for as long as needed to manage the relationship and for a reasonable period afterwards.
- Financial and accounting records: retained for the period required by applicable tax and accounting laws.
- Security records: retained for a limited period unless needed for incident investigation or legal claims.
- Marketing data: retained until you unsubscribe, object, or withdraw consent, subject to any legal retention requirements.
When personal data is no longer required, we will delete it or anonymise it securely.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request limitation of processing in certain situations.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transferred to another controller.
- Objection: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. In some cases, we may be entitled or required to refuse a request in whole or in part where permitted by law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
If you withdraw consent, we may not be able to provide certain optional services or communications. To withdraw consent, please contact us at [email protected] or use any unsubscribe mechanism included in our communications, where available.
10. Right to complain
If you have concerns about how we process your personal data, we encourage you to contact us first so we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection authority. In the UK, this is the Information Commissioner's Office (ICO). We recommend contacting the ICO or your local supervisory authority if you believe your data protection rights have been infringed.
11. Data security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, secure storage, staff confidentiality obligations, system monitoring, and contractual protections with service providers.
However, no system can be guaranteed to be completely secure. You are responsible for taking reasonable precautions when communicating with us electronically, such as using secure networks and keeping your devices protected.
12. Contact information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Northbridge Rehearsal Studios Ltd
Northbridge Rehearsal Studios, Unit 4, 18-22 Brick Lane, London E1 6RF, UK
Email: [email protected]
Phone: +44 20 7265 4839
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. Any updated version will be effective when posted on our website or otherwise made available to you, unless stated otherwise.
We encourage you to review this Privacy Policy periodically to stay informed about how Northbridge Rehearsal Studios Ltd processes personal data.