LEGAL, PRIVACY & DATA PROTECTION POLICY

Operated by: Crownway Trading (Trading as Canal Club)
Effective Date: February 2026
Applies To: Website users, customers, WiFi users and visitors to our venue

1. WHO WE ARE

Canal Club is operated by Crownway Trading.

Venue Address:
Unit 1 & 2, Little Neville St
Leeds
LS1 4ED
United Kingdom

Registered Address:
61 Bridge Street
Kington
HR5 3DJ
United Kingdom

Website: www.canalclub.co.uk

Contact:
Email: bookings@canalclub.co.uk
Phone: 07934 261159

Crownway Trading is the Data Controller for personal data collected through this website, our venue and our services.

2. OUR LEGAL RESPONSIBILITIES

We process personal data in accordance with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• Applicable UK telecommunications and licensing laws

3. WEBSITE USE & COPYRIGHT

Unless otherwise stated, all content on this website is owned or licensed by Crownway Trading.

This includes:

• Text
• Branding
• Images
• Layout
• Design
• Databases

You may view and print content for personal use only.

You must not reproduce, modify, distribute or use website content for commercial purposes without written permission.

4. WEBSITE DISCLAIMER

Information on this website is provided for general information only.

While we aim to keep information accurate and up to date, we do not guarantee that website content will always be complete, accurate or current.

5. LIMITATION OF LIABILITY

To the fullest extent permitted by law, Crownway Trading is not responsible for:

• Indirect or consequential losses
• Loss of data
• Loss of business or profits
• Website downtime
• Cyber incidents outside our reasonable control

Nothing in this policy excludes liability where it cannot legally be excluded, including death or personal injury caused by negligence or fraud.

PRIVACY POLICY

6. WHAT PERSONAL DATA WE COLLECT

Depending on how you interact with us, we may collect:

Identity Data

Name

Contact Data

Email address
Phone number

Technical Data

IP address
Device type
Browser type

WiFi & Network Data

Device identifiers
Connection times
Session data

Booking & Marketing Data

Booking details
Marketing preferences

7. HOW WE COLLECT DATA

We collect data when you:

• Use our website
• Make enquiries or bookings
• Sign into guest WiFi
• Sign up to marketing or promotions
• Contact us directly

8. WHY WE USE YOUR DATA

We use personal data to:

• Provide our services
• Operate guest WiFi
• Improve customer experience
• Send marketing communications (if you opt in)
• Prevent fraud or misuse
• Comply with legal obligations

9. LEGAL BASIS FOR PROCESSING

We rely on:

Legitimate Interests – running and protecting our business
Consent – marketing and non-essential cookies
Legal Obligations – regulatory or law enforcement requirements

COOKIE POLICY

10. WHAT ARE COOKIES

Cookies are small files stored on your device when you visit websites.

11. TYPES OF COOKIES WE USE

Essential Cookies

Required for website functionality.

Analytics Cookies

Help us understand how visitors use our website.

Marketing Cookies

Help measure advertising effectiveness.

Non-essential cookies are only used with your consent.

GUEST WIFI TERMS

12. WIFI DATA

When you use Canal Club guest WiFi, we may collect:

• Device identifiers
• IP address
• Connection session data

This helps us maintain network security and performance.

13. WIFI ACCEPTABLE USE

You must not use our WiFi for:

• Illegal activity
• Copyright infringement
• Hacking or security testing
• Distributing harmful software
• Harassment or abusive behaviour

We may restrict access where misuse is suspected.

14. WIFI SERVICE DISCLAIMER

Guest WiFi is provided free of charge and on an “as available” basis.
We do not guarantee uptime, speed or compatibility.

CCTV PRIVACY NOTICE

15. WHY WE USE CCTV

We operate CCTV for:

• Crime prevention
• Safety of staff and customers
• Incident investigation
• Licensing compliance

16. LEGAL BASIS FOR CCTV

We use CCTV under legitimate interests for safety and security.

17. CCTV DATA RETENTION

CCTV footage is normally kept for 14 to 31 days, unless required for investigation, legal claims or insurance purposes.

18. CCTV DATA SHARING

Footage may be shared with:

• Police
• Legal advisers
• Insurance providers

Where legally required.

DATA PROCESSING & THIRD PARTIES

19. THIRD PARTY SERVICE PROVIDERS

We may use trusted third-party providers including:

• WiFi providers (such as Wireless Social)
• Booking and CRM systems
• Marketing platforms
• Payment providers
• Cloud hosting providers

These providers are required to protect personal data in line with UK GDPR.

20. INTERNATIONAL DATA TRANSFERS

If data is processed outside the UK, we ensure appropriate legal safeguards are in place.

DATA SECURITY & RETENTION

21. SECURITY

We use appropriate technical and organisational measures to protect personal data.

22. DATA RETENTION

We only keep data for as long as necessary for:

• Business operations
• Legal obligations
• Fraud prevention
• Legal claims defence

STAFF DATA HANDLING COMMITMENT

23. HOW WE PROTECT CUSTOMER DATA INTERNALLY

We operate strict internal controls to ensure staff:

• Only access data required for their role
• Do not share data without authorisation
• Follow security and password policies
• Report suspected data breaches immediately

YOUR RIGHTS

24. YOUR DATA RIGHTS

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent

25. COMPLAINTS

You can complain to the UK regulator:

Information Commissioner’s Office
www.ico.org.uk

POLICY UPDATES

26. CHANGES TO THIS POLICY

We may update this policy from time to time.
The latest version will always be available on our website.

GOVERNING LAW

27. LEGAL JURISDICTION

This policy is governed by the laws of England and Wales.