Privacy and GDPR

Townhouse Wirral Ltd is the data controller responsible for Townhouse membership, booking, attendance and safety records. Your personal data is securely held and used only for legitimate operational purposes, including membership administration, identity validation, event bookings, venue safety, safeguarding, compliance with licensing conditions, and communication relating to your use of the venue.

Your data is protected by strict access controls, encryption standards, annual staff training, and legal safeguards.

Your rights under UK GDPR include the right to request access, correction, erasure, restriction, portability, and to raise any concerns about how your information is processed.

Any requests relating to your data should be directed to Townhouse Wirral Ltd at info@townhouseswingers.com, which is responsible as the data controller.

Each year, prior to renewing our license, Wirral Borough Council review our data protection policy and only grant a license renewal if the policy is found to be satisfactory. On top of this, we have taken the extra precaution of registering with the Information Commissioner’s Office.

Our membership data is stored off-site in a cloud storage data centre. The information is encrypted at rest, which means that if someone were able to clone the cloud storage, they would still not be able to access the data without the separately secured keys. Any data transmitted over the internet is done using HTTPS to ensure the data is encrypted in transit, this is the industry standard to protect against ‘man in the middle’ attacks. Access to the membership system is restricted to managers only, and all are trained annually to ensure they fully understand the responsibility they hold with regards to other people’s personal data.

We keep your data for the duration of your membership plus two years, and it is automatically deleted after this period, except where there is a legitimate reason to keep your data, such as in the interests of the safety of our guests.

As with any data stored by a business, GDPR does apply, which means any individual has the following rights:

• Right to be informed - all members and guests are informed their personal information will be stored and the purpose of its use

• Right of Access - you can request access to the data we store about you

• Right to Rectification - you can request the data we store about you is corrected

• Right to Erasure - when the information is no longer required you can request for it to be erased

• Right to Restrict Processing - you can ask us to limit how we use your data in certain circumstances, for example while a query about its accuracy is being resolved

• Right to Data Portability - we will provide your personal data in a secure format if you wish for it to be used in another system

• Right to Object - you can object to processing that is based on our legitimate interests

• Rights in relation to automated decision making and profiling - we do not use data for automated decision making or profiling

All GDPR requests will be responded to within one month of receipt of the request.