Privacy Policy & GDPR Disclosure

1. Who we are

Nash Dom CIC ("we", "us", "our") is a Community Interest Company registered in England and Wales. We are the data controller for the personal information you provide to us through this website and when you book or enquire about hiring our venue. Our registered address is Sun Street, Walsall, WS1 4AL, United Kingdom.

2. What personal data we collect

We collect the following categories of personal data when you make an enquiry or booking:

• •Contact details: full name, email address, mobile/telephone number and postal address.
• •Event details: event type, date, guest numbers, spaces required and any special requirements.
• •Hirer / designated person details: name, address, email and phone (as set out in our Venue Hire Agreement).
• •Organisation details (if applicable): organisation name and role.
• •Marketing preference: whether you have asked to receive news and offers from us.
• •Agreement records: your typed signature name, the date you signed, and the terms you accepted.
• •Communication records: copies of messages and emails exchanged between us about your enquiry or booking.
• •Usage data: basic analytics about how you use this website (pages visited, approximate location, device type).

3. Lawful basis for processing

Under the UK GDPR we rely on the following lawful bases to process your personal data:

• •Performance of a contract — to process your booking, prepare your hire agreement and provide the venue hire service you have requested.
• •Legal obligation — to meet our statutory and regulatory responsibilities (for example health and safety, tax and safeguarding records).
• •Legitimate interests — to respond to your enquiry, prevent double-bookings, manage our venue calendar, and keep our community informed about events we run.
• •Consent — for any marketing communications and for recording your typed signature on the hire agreement. You can withdraw consent at any time.

4. How we use your data

We use your personal data to:

• •Respond to your enquiry and provide quotes or availability checks.
• •Create and manage your booking, including setup, refreshments and equipment.
• •Prepare and store your Venue Hire Agreement and signature.
• •Send you booking confirmations, reminders and follow-ups about your event.
• •Process cash payments and deposits taken at the venue.
• •Communicate with you about your event and any changes.
• •Keep records for health and safety, safeguarding and accounting.
• •Send marketing information only where you have given us consent.

5. Who we share your data with

We do not sell your personal data. We may share it only where necessary with:

• •Our own staff and volunteers who need it to manage your booking or event.
• •Service providers we use to run this website and our booking system (for example our hosting and email providers), who act as data processors under contract.
• •Public authorities where we are legally required to do so (for example HMRC, environmental health or the police).
• •No third party will use your data for their own marketing purposes.

6. International transfers

Your data is stored and processed primarily within the United Kingdom and the European Economic Area. Where any provider processes data outside the UK/EEA, we ensure appropriate safeguards (such as UK International Data Transfer Agreements or adequacy decisions) are in place to protect your data.

7. How long we keep your data

We keep your personal data only for as long as necessary. Booking and agreement records are retained for the duration of your event plus a reasonable period afterwards for accounting, legal and safeguarding purposes (typically up to 7 years). Marketing preferences are kept until you withdraw consent or ask us to delete them.

8. Your rights under UK GDPR

You have the following rights over your personal data:

• •Right of access — to ask what data we hold about you and receive a copy.
• •Right to rectification — to correct any inaccurate or incomplete data.
• •Right to erasure — to ask us to delete your data where there is no lawful reason to keep it.
• •Right to restrict processing — to ask us to limit how we use your data.
• •Right to data portability — to receive your data in a reusable format and transfer it to another provider.
• •Right to object — to object to processing based on legitimate interests or for marketing.
• •Right to withdraw consent — at any time, where we rely on consent.
• •Right to complain — to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

9. Cookies and website analytics

This website may use basic cookies and analytics to understand how visitors use our pages so we can improve them. We do not use cookies to identify you personally or to sell your data. You can control cookies through your browser settings at any time.

10. Marketing

We will only send you marketing communications (for example news about upcoming community events) if you have given us consent. You can opt out at any time by clicking 'unsubscribe' in any email we send or by contacting us using the details below.

11. Children's data

Our venue hosts children's events, but we do not knowingly collect personal data directly from children. All bookings and enquiries are made by an adult (parent, carer or organiser), and the personal data we hold relates to that responsible adult. We hold safeguarding records only as required by law and our safeguarding policy.

12. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure, including access controls, encrypted storage and secure communication with our service providers.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The updated version will be posted on this page with the revised date.