1. Introduction
Kerb Social Club Limited (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains what information we collect, how we use it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to:
- Visitors to our website
- Individuals who sign up for our newsletters or marketing communications
- Customers who purchase tickets, attend our events, or visit our venues and food halls
- Individuals who interact with guest wifi at our venues, QR codes or promotions
- Food vendors and traders who work with us
- Individuals who submit enquiries or applications to trade at Kerb
- Freelancers and contractors who work with us
If you have questions about this policy, contact us:
Email: privacy@kerbfood.com
Post: Kerb Group Limited, 1st Floor, 4 Tabernacle St, London, EC2A 4LU FAO: Head of IT
2. Who We Are
Kerb Social Club Limited is the data controller responsible for your personal data.
Company registration number: 16005932
Registered address: Kerb Social Club, 1st Floor, 4 Tabernacle St, London, EC2A 4LU
If you have concerns about how we handle your data, you can also contact the Information Commissioner’s Office (ICO): www.ico.org.uk.
3. What Data We Collect
We may collect, use, and store the following types of personal information:
- Identity data: name, username, social media handle, gender, age
- Contact data: email address, phone number, postal address
- Profile data: interests, preferences, event attendance history
- CCTV and security data: Some Kerb venues or event spaces may use CCTV systems for safety and security purposes. Where CCTV operates, we may collect video recordings of individuals present in those areas
- Transaction data: event ticket purchases and payment confirmations. Payment details are processed securely by third-party providers and we do not store full payment card information
- Technical data: IP address, browser type, device information, cookie identifiers
- Usage data: how you use our website, pages visited, links clicked
- Marketing & communications data: your preferences in receiving marketing from us
- Trader and vendor information: If you apply to trade with Kerb or operate at our events or venues, we may collect information relating to you and your business, such as business contact details, application information, product descriptions, and relevant compliance documentation
- Vendor staff information: For operational and safety purposes at events and venues, we may collect limited information relating to trader staff working on site, such as staff names and staffing numbers
4. How We Collect Your Data
We collect data through:
- Direct interactions (e.g. forms, ticket purchases, newsletter sign-ups, guest wifi, QR codes, participation in Kerb Plus schemes, or applying to work with Kerb)
- Automated technologies such as cookies and analytics tools
- Third-party partners (e.g. event platforms, payment processors, marketing services)
5. How We Use Your Data
We use your personal data to:
- Provide and improve our services, venues, food halls and events
- Manage ticket sales and event attendance
- Process trader applications and manage relationships with food vendors
- Coordinate operational requirements for traders and vendor staff working at events or venues
- Respond to enquiries or applications
- Send you marketing communications where you have opted in
- Deliver personalised content, offers, or promotions
- Conduct market research and website analytics
- Support venue operations such as guest Wi-Fi access or digital engagement tools
- Maintain the safety and security of our venues, events, and visitors, including through the use of CCTV where applicable
- Comply with our legal and regulatory obligations
6. Lawful Bases for Processing
We are required to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal grounds:
- Performance of a contract with you: Where processing is necessary for us to fulfil a contract, such as providing event tickets or managing vendor agreements
- Legitimate interests: We may process personal data where it is necessary to operate our business and improve our services, including by way of example managing events and venues, CCTV for safety and security, coordinating trader participation, analysing customer engagement, and maintaining the security of our systems. We carefully balance these interests with your rights and freedoms
- Legal obligation: Where we are required to process personal data to comply with legal or regulatory obligations
- Consent: Where you have given clear permission, for example when subscribing to a newsletter or consenting to certain cookies
7. Marketing & Communication Preferences
You can opt in or out of marketing communications at any time by:
- Clicking “unsubscribe” in any marketing email
- Emailing us at privacy@kerbfood.com
- Writing to us at the address above
We will not sell, rent, or trade your data with third parties for marketing purposes without your express consent.
8. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and analyse site usage.
We use:
- Essential cookies – necessary for the site to function
- Analytics cookies – to measure website traffic and understand how users interact with our site
- Marketing cookies – to support advertising and promotional activity on platforms such as Facebook or Instagram
You will be presented with a cookie consent banner when you first visit our site, allowing you to accept or manage your preferences.
9. Data Sharing & Transfers
We may share your data with trusted third parties who help us deliver our services, such as:
- Events venue partners or hosts
- Event ticketing and payment processors
- Marketing and analytics providers
- Email and hosting services
- Technology providers supporting venue operations or digital engagement tools
These providers only process your data according to our instructions and are bound by data protection obligations.
If data is transferred outside the UK, we ensure it is protected by UK-approved safeguards, such as Standard Contractual Clauses.
10. Data Retention
We retain personal data only as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. We retain the following data:
- Marketing data: until you withdraw consent or after 3 years of inactivity
- Membership Enquiries: until you withdraw consent or after 3 years of inactivity
- Transactional data: up to 6 years for tax and legal compliance purposes
Operational data relating to events or venues may be retained for limited periods where required for operational, safety, or compliance reasons. CCTV footage is typically retained for a limited period (for example 30–90 days) unless required for investigation or legal purposes.
After these periods, data is securely deleted or anonymised.
11. Your Rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict processing
- Withdraw consent at any time
- Request data portability (transfer to another provider)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, please contact us at privacy@kerbfood.com.
12. Security
We take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access.
Access to personal data is limited to employees, agents, contractors and other third parties who have a legitimate business need to know. They are required to process personal data only on our instructions and are subject to confidentiality obligations.
Our security measures include secure systems, access controls, and appropriate safeguards for storing and handling personal data.
13. Links to Other Websites
Our website may include links to external sites. We are not responsible for the content or privacy practices of other websites. We recommend you read their privacy policies before submitting personal information.
14. Children
We do not knowingly solicit personal data from, or market to, children. If as a parent or guardian you become aware that your child has provided us with personal data, you should contact us on the contract details provided in this privacy notice.
15. Photography and Videography at Events
We may take photographs or record video at our events for marketing, promotional, and documentation purposes. These images may be used on our website, social media channels, and in other promotional materials.
Where photography or filming is taking place, signage will be displayed at the venue. If you do not wish to appear in photographs or videos, please inform a member of our team and we will make reasonable efforts to accommodate your request.
16. Updates to This Policy
We may update this Privacy Policy from time to time to reflect legal or operational changes. Any updates will be posted on this page, and significant changes will be notified to you via email or website notice.
Kerb Social Club Limited
1st Floor, 4 Tabernacle St, London, EC2A 4LU
Email: privacy@kerbfood.com