1. Who we are and the scope of this policy

Social Sticks is the controller of personal information covered by this policy. It explains how we collect, use and protect information when you visit our website, join a venue waitlist, make or manage a booking, buy a gift card, contact us, submit an event enquiry, visit one of our venues or receive marketing from us.

2. Information we collect

The information we collect depends on how you interact with us. Please do not provide health or other sensitive information unless it is necessary for us to make a reasonable adjustment or safely deliver your booking.

• Identity and contact details, such as your name, email address, telephone number and any organisation you represent.
• Booking and enquiry details, including venue, date, time, group size, activity choices, event requirements, messages, waitlist entries and related correspondence.
• Transaction and technical information, such as payment status and reference, gift-card activity, IP address, device and browser information, cookie choices and website usage data. Payment-card details are handled by our payment providers rather than stored in full by Social Sticks.

3. How and why we use your information

We use personal information only where we have a lawful basis. We do not sell personal information and we do not use it for solely automated decisions that produce legal or similarly significant effects.

Our main purposes and lawful bases are:

• Contract: to provide quotes, take and manage bookings, process payments or refunds, deliver memberships and gift cards, and communicate essential service information.
• Legitimate interests: to answer enquiries, operate and improve our venues and website, prevent fraud, keep records, understand demand, protect our business and handle complaints, where those interests are not overridden by your rights.
• Consent and legal obligation: to send marketing or use non-essential cookies where consent is required, and to meet tax, accounting, licensing, safety, fraud-prevention or other legal duties. You can withdraw consent at any time.

4. Sharing information and international transfers

We share information only where necessary with trusted providers that support our website, forms, booking and payment systems, gift cards, email and marketing, analytics, IT, professional advice and venue operations. Those providers may process information only for agreed purposes and must protect it appropriately.

We may also disclose information:

• To banks, payment providers and fraud-prevention services to complete and protect transactions.
• To public authorities, regulators, insurers, professional advisers or law-enforcement bodies where required or permitted by law.
• As part of a business sale, restructuring or transfer. If information is processed outside the UK, we use an approved safeguard or rely on an adequacy decision where required.

5. Cookies, analytics, security and retention

Our website uses essential technologies needed for security and basic operation. With your choice, it may also use analytics or marketing technologies to understand visits and improve the site. Where consent is required, non-essential technologies should not be used before you opt in, and you can change your choice through the cookie controls. We use proportionate technical and organisational safeguards, but no online system is completely secure. We retain information only for as long as reasonably necessary for the purpose collected, including providing services, resolving enquiries or disputes, preventing fraud and meeting legal, tax and accounting obligations; we then delete or anonymise it.

6. Your rights and marketing choices

Depending on the circumstances, UK data protection law may give you rights over your personal information. These rights are not absolute and we may need to verify your identity before acting on a request.

You may ask us to:

• Provide access to your information, correct inaccurate information, or complete information that is incomplete.
• Erase or restrict information in certain circumstances, object to processing based on legitimate interests, or receive certain information in a portable format.
• Stop direct marketing at any time and withdraw consent without affecting earlier lawful processing. Use an unsubscribe link where available or email contact@socialsticks.co.uk.

7. Children and changes to this policy

Our website and booking services are not directed at children, and we do not knowingly collect children’s information except where an adult supplies limited details needed for a booking, safety or reasonable adjustment. We may update this policy when our services, suppliers or legal duties change. The latest version and date will always appear on this page.

8. Contact us and complaints

For questions or to exercise a data protection right, contact Social Sticks using the details below. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, although we would appreciate the opportunity to address your concern first.

Email: contact@socialsticks.co.uk
Address: Social Sticks, Unit 2 Station Street, Bromsgrove, B60 2BS
This policy applies across Social Sticks venues and online services.