Privacy Policy
How we collect, use, and protect your data
1. Data Controller
The data controller responsible for your personal data is Brixton Alchemist Ltd, registered at 17A Electric Lane, London SW9 8LA. For any data protection enquiries, please contact us at accounts@brixtonalchemist.com.
2. Data We Collect
We collect and process the following categories of personal data in connection with your membership:
- Full name and contact details (email address, phone number).
- Payment information processed securely via Stripe. We do not store your full card details.
- Visit history, including dates and times of attendance.
- Drink preferences and order history to personalise your experience.
- Communications between you and BCC Bar (including WhatsApp messages and email).
- Any information you provide in your membership application or profile.
3. Legal Basis for Processing
We process your personal data on the following legal grounds under UK GDPR:
- Contract performance: processing necessary to fulfil your membership agreement, manage bookings, and provide our services.
- Legitimate interests: improving our services, personalising your experience, preventing fraud, and maintaining the safety of the premises.
- Consent: where you have opted in to receive marketing communications or agreed to specific data uses. You may withdraw consent at any time.
4. Third-Party Service Providers
We share your data with the following trusted third parties, solely for the purposes of operating BCC Bar and delivering our services:
Stripe
Secure payment processing. Stripe handles all card transactions and stores payment details on our behalf. Stripe is PCI DSS Level 1 compliant.
Supabase
Cloud database hosting. Your membership data and account information are securely stored using Supabase infrastructure.
Beehiiv
Email communications. Used to send membership updates, newsletters, and event notifications.
Twilio
WhatsApp and SMS messaging. Used for booking confirmations, event reminders, and direct member communications.
We do not sell your personal data to any third party. Data shared with the providers above is strictly limited to what is necessary for the stated purposes.
5. Data Retention
We retain your personal data for as long as your membership remains active, plus a period of two years following cancellation or expiry. This allows us to fulfil any outstanding obligations, resolve disputes, and comply with legal requirements. After this retention period, your data will be securely deleted or anonymised.
6. Your Rights
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your data where there is no compelling reason for continued processing.
- Right to restriction: request that we limit how we process your data in certain circumstances.
- Right to data portability: receive your data in a structured, commonly used format and transfer it to another controller.
- Right to object: object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, please contact us at accounts@brixtonalchemist.com. We will respond to your request within one month.
7. Cookies & Analytics
Our website uses essential cookies to maintain your session and provide core functionality. We may also use analytics tools to understand how members use our platform. No tracking cookies are used for advertising purposes.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections and stored securely using industry-standard practices.
9. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the opportunity to address your concerns directly before you contact the ICO.
10. Changes to This Policy
We may update this privacy policy from time to time. Any material changes will be communicated to you by email. The latest version will always be available on this page.
Contact
Brixton Alchemist Ltd
17A Electric Lane, London SW9 8LA
accounts@brixtonalchemist.com