Data Controller

The data controller responsible for your personal data is:

Information We Collect

We may collect the following types of personal information:

• Contact details — name, email address, telephone number
• Event details — type of event, preferred date, number of guests
• Communication records — enquiries submitted via our website, email or WhatsApp
• Technical data — IP address, browser type, pages visited (via cookies and analytics tools)
• Marketing preferences — whether you have opted in to receive communications from us

How We Use Your Information

We use your personal data for the following purposes:

• To respond to your event enquiries and provide venue hire quotations
• To manage bookings and coordinate your event
• To send you relevant information about our services (with your consent)
• To improve our website and marketing through analytics
• To comply with our legal obligations

Our Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

• Legitimate interests — to respond to enquiries and manage bookings
• Consent — for marketing communications and non-essential cookies
• Contract — to fulfil our obligations when you book our venue
• Legal obligation — where required by law

Who We Share Your Data With

We do not sell your personal data. We may share it with trusted third parties only where necessary:

• Shopify — our website and e-commerce platform
• Google — analytics and advertising services
• Meta (Facebook/Instagram) — social media advertising
• Email and communication providers — for sending enquiry responses

All third parties are required to handle your data securely and in accordance with applicable data protection law.

How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. Enquiry data is typically retained for up to 3 years. Booking records may be retained for up to 7 years for accounting and legal purposes.

Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests or for marketing
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at info@cocosstanmore.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

Our website uses cookies to improve your experience and analyse site traffic. For full details, please read our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised date. We encourage you to review this policy periodically.