Privacy Policy
Last updated: 1 October 2026
Craft Lincoln Limited (“Craft”, “we”, “our” or “us”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit Craft, use our website, make a booking, purchase our products or services, contact us, interact with us online, connect to our guest Wi-Fi or otherwise engage with us.
This Privacy Policy applies to personal information collected both online and offline.
We process personal information in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and the Data (Use and Access) Act 2025, as applicable.
For the purposes of applicable data protection legislation, Craft Lincoln Limited is the Data Controller of the personal information described in this Privacy Policy.
1. Who we are
Craft Lincoln Limited
Company number: 11109706
Registered office:
287 High Street
Lincoln
LN2 1AW
United Kingdom
For questions about this Privacy Policy or how we use your personal information, please contact:
Email: bookings@craftlincoln.co.uk
2. What is personal information?
Personal information is information that relates to an identified or identifiable individual.
This can include information that identifies you directly, such as your name or email address, as well as information that could identify you when combined with other information.
We may also collect information that does not identify you personally, such as aggregated statistics about how customers use our website. Where information has been genuinely anonymised so that you can no longer be identified, it is no longer personal information for data protection purposes.
3. Information we collect
Depending on how you interact with us, we may collect the following information.
Contact information
This may include:
Name
Email address
Telephone number
Postal address
Other contact details you choose to provide
Booking and transaction information
This may include:
Booking details
Event or activity information
Date and time of your visit
Products and services purchased
Transaction and payment information
Purchase history
Booking history
Refunds or cancellations
Customer service correspondence relating to bookings or purchases
Age and identification information
Where necessary, we may collect:
Date of birth
Age
Information contained within identification documents
Information required to verify age or identity
We may collect this information where necessary for age-restricted activities, licensing requirements, venue policies, competitions, promotions, bookings or other legitimate purposes.
We will only collect identification information where there is a reasonable need to do so.
Marketing and preferences
We may collect information about:
Whether you have opted in to receive marketing
Which types of marketing you have agreed to receive
Your communication preferences
Your interactions with our emails or other marketing communications
Offers, promotions or campaigns you have interacted with
Customer interactions
We may collect information you provide when you:
Contact us
Make an enquiry
Complete a form
Complete a survey
Leave feedback or a review
Enter a competition
Participate in a promotion
Contact us through social media
Communicate with our staff
Photographs and video
Photography and video recording may take place at Craft.
This may include CCTV and photographs or video taken during events, performances or other activities at the venue.
Further information is provided in section 13 of this Privacy Policy.
Technical and online information
When you use our website, we may collect information such as:
IP address
Device type
Browser type and version
Operating system
Approximate location derived from technical information
Pages visited
Links clicked
Website interactions
Referral information
Date and time of visits
Information about how you use our website
Some of this information may be collected using cookies and similar technologies. See section 12 for further information.
Guest Wi-Fi information
Where guest Wi-Fi is available at Craft, we may collect information when you register for or use the service.
Depending on how the Wi-Fi service is configured, this may include:
Name
Email address
Telephone number
Device information
IP address
Connection information
Usage information
Marketing preferences
The specific information collected will depend on the Wi-Fi service in use at the venue.
4. How we collect your information
We may collect personal information:
Directly from you when you provide it to us.
When you make a booking or purchase.
When you contact us.
When you register for guest Wi-Fi.
When you subscribe to marketing communications.
When you enter a competition or promotion.
When you complete a survey or provide feedback.
When you interact with our website.
Through cookies and similar technologies.
Through our social media channels.
Through booking, ticketing, payment or other service providers.
Through marketing and customer relationship management platforms.
Through CCTV, photography or video recording at our premises.
From other organisations where they are lawfully entitled to provide us with your information.
Where we obtain personal information from another organisation, we will take reasonable steps to ensure that the information has been obtained and provided to us lawfully.
Where required, we will provide you with privacy information when we first obtain your information or within the applicable legal timeframe.
5. How we use your personal information
We may use your personal information for the following purposes:
Providing our services
To:
Process bookings and enquiries.
Process purchases and payments.
Provide products and services.
Manage events and activities.
Communicate with you about your booking or purchase.
Process refunds, cancellations or amendments.
Provide customer support.
Operating and improving our business
To:
Improve our products and services.
Understand how customers use our venues and services.
Analyse customer behaviour and preferences.
Improve our website and digital services.
Monitor and improve customer experience.
Develop new products, services and events.
Conduct customer research and surveys.
Marketing
To:
Send marketing communications where we are legally permitted to do so.
Tell you about events, offers, promotions, products and services.
Understand the effectiveness of our marketing.
Tailor marketing communications where appropriate.
Manage your marketing preferences and unsubscribe requests.
Security and fraud prevention
To:
Protect customers, employees and visitors.
Operate CCTV and other security systems.
Prevent and detect fraud.
Prevent and investigate crime.
Protect our property and premises.
Enforce our venue policies and terms.
Investigate incidents or complaints.
Legal and regulatory purposes
To:
Comply with our legal and regulatory obligations.
Comply with licensing requirements.
Respond to lawful requests from authorities.
Establish, exercise or defend legal claims.
Maintain appropriate business records.
6. Our lawful bases for using your information
Under applicable data protection law, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on one or more of the following:
Contract
We may process your personal information where it is necessary to enter into or perform a contract with you.
For example, processing your details to manage a booking or provide a service you have purchased.
Legal obligation
We may process personal information where necessary to comply with a legal or regulatory obligation.
Legitimate interests
We may process personal information where it is necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
Operating and managing our business.
Improving our products and services.
Understanding customer behaviour.
Protecting our customers, staff and premises.
Preventing fraud and crime.
Managing customer relationships.
Measuring and improving our marketing.
Sending certain direct marketing communications where legally permitted.
Where we rely on legitimate interests, we consider the impact of the processing on your rights and ensure that our interests are not overridden by your interests or fundamental rights and freedoms.
Consent
We may rely on your consent where required by law.
For example, this may include certain marketing communications or the use of non-essential cookies and similar technologies.
Where we rely on consent, you can withdraw it at any time.
Withdrawing consent will not affect the lawfulness of processing that took place before you withdrew your consent.
Vital interests
In limited circumstances, we may process personal information where necessary to protect someone's vital interests.
7. Marketing communications
We may send you marketing communications about Craft, including information about:
Events
Offers
Promotions
Food and drink
Activities
Products and services
Competitions
Other news relating to Craft
Where required by law, we will obtain your consent before sending marketing communications by email, SMS or other electronic means.
In certain circumstances, we may be able to send marketing communications to existing customers without obtaining separate consent where the requirements of the applicable “soft opt-in” rules are satisfied. This includes providing a clear opportunity to opt out when collecting your details and in subsequent marketing communications.
We will not use purchased marketing lists to send electronic marketing unless we have established that the relevant legal requirements have been met, including that any required consent specifically covers marketing from Craft and the relevant method of communication.
You can unsubscribe from marketing communications at any time.
Every marketing email we send will include an unsubscribe mechanism.
You can also contact us at bookings@craftlincoln.co.uk to change your marketing preferences.
Please note that opting out of marketing does not prevent us from sending necessary service communications. For example, we may still contact you about an existing booking, purchase, payment or other service you have requested.
8. Profiling and personalised marketing
We may use information about your interactions with Craft to understand customer preferences and improve the relevance of our communications and advertising.
This may include analysing information such as:
Previous bookings or purchases.
Events attended.
Offers used.
Marketing interactions.
Website interactions.
General customer preferences.
Where we use profiling or similar processing for direct marketing, we will do so in accordance with applicable data protection law.
You have the right to object to the processing of your personal information for direct marketing purposes, including profiling related to direct marketing.
9. Who we share your information with
We may share your personal information with trusted third parties where necessary to operate our business and provide our services.
These may include:
Booking and ticketing providers
Where you make a booking or purchase through a third-party platform, your information may be shared with that provider so that the booking or transaction can be processed.
Payment providers
Payment and transaction information may be processed by third-party payment providers.
We do not generally have access to your full payment card details where these are processed directly by a payment provider.
Marketing and customer relationship management providers
We may use third-party platforms to manage customer information and send marketing communications.
These providers may process information such as your name, contact details, marketing preferences and interactions with our communications.
Guest Wi-Fi providers
Where you use guest Wi-Fi at Craft, your information may be processed by the provider operating the Wi-Fi service on our behalf.
Website and technology providers
We may use third-party providers for:
Website hosting
Website development
Analytics
IT support
Data storage
Cybersecurity
Digital marketing
Advertising
Professional advisers
We may share information with professional advisers such as:
Solicitors
Accountants
Insurers
Auditors
Other professional advisers
Authorities and law enforcement
We may disclose personal information where we are required or permitted to do so by law, including to:
Police
Licensing authorities
Regulators
Courts
Government agencies
Other authorised bodies
We do not sell your personal information to third parties.
Where third parties process personal information on our behalf, we will take appropriate steps to ensure that suitable contractual and security arrangements are in place.
10. Sharing information within our wider business
Where applicable, we may share personal information with other companies within our wider business group where there is a lawful basis for doing so.
For example, information may be shared for purposes such as:
IT and systems administration.
Business administration.
Security.
Customer service.
Financial administration.
Marketing, where legally permitted.
Where information is shared for direct marketing purposes, we will ensure that the relevant legal requirements are met and that you are provided with appropriate choices where required.
11. International transfers
Some of our third-party service providers may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK to a country that does not provide an adequate level of protection under UK data protection law, we will ensure that an appropriate legal safeguard is in place.
Depending on the circumstances, this may include:
A UK adequacy decision.
The UK International Data Transfer Agreement (IDTA).
The UK Addendum to the EU Standard Contractual Clauses.
Another lawful transfer mechanism permitted under applicable law.
We will take appropriate steps to ensure that your personal information remains protected when transferred internationally.
12. Cookies and similar technologies
Our website may use cookies and similar technologies.
Cookies are small files stored on your device which can allow a website to recognise your device and remember certain information.
We may use different categories of cookies, including:
Strictly necessary cookies
These are required for the website or a service you have requested to function properly.
These cookies generally do not require consent where they are strictly necessary to provide the service requested.
Functional cookies
These may remember choices or preferences and improve your experience.
Analytics cookies
These help us understand how visitors use our website, such as which pages are visited and how users interact with the site.
Analytics cookies are not automatically exempt from consent requirements simply because they are used for analytics.
Marketing and advertising cookies
These may be used to:
Measure advertising effectiveness.
Understand interactions with our advertising.
Deliver or personalise advertising.
Measure conversions.
Build audiences for advertising purposes.
Non-essential cookies and similar technologies will only be used where the required consent has been obtained.
You should be given a clear choice about whether to accept non-essential cookies. Continuing to browse the website does not, by itself, constitute valid consent.
You can change your cookie preferences at any time through our cookie consent mechanism, where available.
We may also use similar technologies such as tracking pixels or tags. These technologies are subject to the same applicable privacy requirements.
Our use of cookies may change from time to time as our website and services develop.
13. CCTV, photography and video
CCTV may operate at Craft for the purposes of safety, security, crime prevention and incident investigation.
CCTV footage may be accessed by authorised personnel and, where necessary, disclosed to law enforcement agencies, insurers, professional advisers or other authorised parties.
We may also take photographs and video footage at Craft, including during events.
Photography and video may be used for purposes including:
Venue promotion.
Social media.
Advertising.
Website content.
Marketing materials.
Event documentation.
Where photography or filming is being undertaken for a particular promotional purpose, we will take reasonable steps to make people aware where appropriate.
If you have a particular concern about being included in promotional photography or video, please speak to a member of the Craft team.
CCTV and other recordings will only be retained for as long as reasonably necessary for the purpose for which they were collected, subject to any legal, regulatory or evidential requirements.
14. Guest Wi-Fi
Where guest Wi-Fi is available, you may be asked to provide certain personal information before accessing the service.
We may use information collected through the Wi-Fi service to:
Provide access to the Wi-Fi service.
Maintain network security.
Monitor and troubleshoot the service.
Understand usage of the service.
Improve customer experience.
Send marketing communications where you have provided the appropriate consent or where another lawful basis applies.
The specific information collected and processing undertaken may depend on the Wi-Fi provider and configuration used at the venue.
Where a third-party provider processes your information on our behalf, appropriate contractual and data protection arrangements will be put in place.
15. Children
Craft is an adult-focused hospitality and entertainment venue and certain products, services, events and promotions may be subject to age restrictions.
We do not knowingly collect personal information from children for marketing purposes where doing so would be unlawful.
Where we need to verify age or identity, we may request appropriate information or identification.
If you believe that a child has provided us with personal information in circumstances where this was not appropriate, please contact us at bookings@craftlincoln.co.uk.
16. How long we retain personal information
We will not retain personal information for longer than is reasonably necessary for the purposes for which it was collected.
Different types of information may therefore be retained for different periods.
The retention period may depend on:
Why the information was collected.
Whether we have an ongoing relationship with you.
Legal and regulatory requirements.
Accounting and financial requirements.
Whether the information is required to establish, exercise or defend legal claims.
Fraud prevention requirements.
Our legitimate business needs.
When personal information is no longer required, we will securely delete, destroy or anonymise it where appropriate.
Where you unsubscribe from marketing, we may retain limited information necessary to record your preference and ensure that we do not send you unwanted marketing communications in the future.
17. Security
We take the security of your personal information seriously.
We use appropriate technical and organisational measures designed to protect personal information against:
Unauthorised access.
Accidental loss.
Destruction.
Misuse.
Alteration.
Unauthorised disclosure.
Access to personal information is limited to people who need it for legitimate business purposes.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
If we become aware of a personal data breach, we will assess it and take appropriate action in accordance with applicable data protection law.
18. Your data protection rights
Depending on the circumstances, you may have rights in relation to the personal information we hold about you.
These may include:
Right to be informed
You have the right to clear information about how and why your personal information is being used. This Privacy Policy is part of the information we provide for that purpose.
Right of access
You can ask us to confirm whether we process your personal information and request a copy of the information we hold about you.
Right to rectification
You can ask us to correct inaccurate personal information or complete information that is incomplete.
Right to erasure
In certain circumstances, you can ask us to delete your personal information.
This is sometimes known as the “right to be forgotten”.
This right is not absolute and does not apply where we have a lawful reason to retain or continue processing your information.
Right to restrict processing
In certain circumstances, you can ask us to restrict how we use your personal information.
Right to object
You may have the right to object to certain processing, including processing based on legitimate interests.
You have an absolute right to object to the processing of your personal information for direct marketing purposes, including profiling related to direct marketing.
Right to data portability
In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format, or ask us to transfer it to another organisation.
Rights relating to automated decision-making
You may have rights in relation to decisions made solely by automated processing, including profiling, where those decisions have legal or similarly significant effects.
Right to withdraw consent
Where we rely on your consent, you can withdraw your consent at any time.
To exercise any of your rights, please contact:
We may need to ask you for additional information to verify your identity before dealing with your request.
We will normally respond to a valid request within the applicable legal timeframe.
19. Our complaints procedure
If you have a concern about how we use your personal information, please contact us first:
Email: bookings@craftlincoln.co.uk
We will investigate your concern and aim to resolve it fairly and promptly.
You have the right to complain to the Information Commissioner's Office (ICO) if you are unhappy with how we have handled your personal information.
Further information about making a complaint is available from the ICO.
20. Third-party websites and services
Our website, emails, social media channels and other communications may contain links to third-party websites or services.
These websites and services are not controlled by Craft and are not covered by this Privacy Policy.
We recommend that you read the privacy policy of any third-party website or service you use.
We are not responsible for the privacy practices, content or security of third-party websites.
21. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
Changes to our business.
Changes to our services.
Changes to technology.
Changes to how we process personal information.
Changes to applicable laws or regulatory guidance.
When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.
Where appropriate, we will take additional steps to notify you of significant changes.
We recommend checking this page periodically to ensure that you are familiar with the latest version.
22. Contact us
If you have any questions about this Privacy Policy, want to exercise your data protection rights, or have a concern about how we use your personal information, please contact:
Craft Lincoln Limited
287 High Street
Lincoln
LN2 1AW
United Kingdom
Email: bookings@craftlincoln.co.uk
You also have the right to contact the:
Information Commissioner's Office (ICO)
The ICO is the UK's independent regulator for data protection and information rights.
Further information about your rights and how to make a complaint is available on the ICO's website.