Effective Date: April 2026
Data Controller: Steel Life (St Helens) Ltd (trading as The Foundry St Helens)
Registered Address: Chalon Way, St Helens, Merseyside WA10 1BF
Company Number: 13910720
ICO Registration: ZB825940
Contact: info@foundrysthelens.co.uk
1. Introduction
Steel Life (St Helens) Ltd (trading as "The Foundry St Helens") and its associated company Unity Events Ltd (Company No. 16682228) are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.foundrysthelens.co.uk), purchase tickets, make bookings, or interact with us in any other way. Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.
2. Information We Collect
2.1 Information You Provide Directly
- Name, email address, phone number, and postal address
- Payment information (processed securely via third-party payment processors — we do not store full card details)
- Booking and ticketing information
- Business and vendor application details
- Marketing preferences and communication opt-ins
- Any information submitted via contact forms, surveys, or competitions
2.2 Information Collected Automatically
- IP address and browser type
- Pages visited and time spent on site
- Referring URLs and search terms
- Device identifiers and operating system
- Cookie data (see our Cookie Policy for full details)
2.3 Information from Third Parties
- Ticketing platforms (e.g. Skiddle, Eventbrite)
- Social media platforms where you interact with our content
- Analytics providers
3. How We Use Your Information
- To process bookings, ticket purchases, and event registrations
- To communicate with you about your bookings, enquiries, or complaints
- To send you marketing communications where you have opted in
- To administer competitions, promotions, or surveys
- To improve our website, services, and customer experience
- To comply with legal and regulatory obligations
- To detect, prevent, and address fraud or security issues
- To manage vendor and business partner relationships
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases for processing your data:
- Contract performance — where processing is necessary to fulfil a booking or agreement with you
- Legitimate interests — where we have a genuine business reason to process your data, provided this is not outweighed by your rights
- Consent — where you have given us explicit permission, such as to receive marketing emails
- Legal obligation — where we are required by law to process your data
5. Data Sharing
We do not sell your personal data. We may share your information with:
- Ticketing and booking platform providers
- Payment processors (e.g. Stripe, PayPoint)
- Email marketing services (e.g. Mailchimp, Klaviyo)
- IT and hosting service providers
- Law enforcement or regulatory authorities where required by law
- Professional advisers (solicitors, accountants, insurers)
All third parties are required to process your data securely and in accordance with our instructions and applicable data protection law.
6. Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. Typical retention periods are:
- Booking and transaction records: 7 years (for accounting and tax purposes)
- Marketing consent records: Until you withdraw consent or 3 years of inactivity
- CCTV footage: 31 days unless retained for an ongoing incident
- Job applications: 6 months unless the candidate is hired
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure — to request deletion of your data in certain circumstances
- Right to restrict processing — to request we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or direct marketing
- Rights related to automated decision-making — we do not currently use automated decision-making that produces legal effects
To exercise any of these rights, please contact us at info@foundrysthelens.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no data transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. International Transfers
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
10. Children's Privacy
Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website. We encourage you to review it periodically.
12. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy, please contact:
Organisation: Steel Life (St Helens) Ltd t/a The Foundry St Helens
Address: Chalon Way, St Helens, Merseyside WA10 1BF
Email: info@foundrysthelens.co.uk
Website: www.foundrysthelens.co.uk