Privacy Policy
Last updated: May 2026
Introduction
New Craven Hall Ltd (“we”, “our”, “us”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal data when you:
- Visit our website
- Submit an enquiry
- Book an event with us
- Attend an event at our venue
- Subscribe to our marketing communications
- Interact with us by email, phone, social media or in person
This policy applies to the website:
https://www.newcravenhall.co.uk
Who We Are
New Craven Hall Ltd
Unit 2 Fairfield House
New Craven Gate
Leeds
West Yorkshire
LS11 5NF
United Kingdom
Email: info@newcravenhall.co.uk
What Information We Collect
Depending on your interaction with us, we may collect:
Enquiry & Booking Information
- Name
- Email address
- Telephone number
- Postal address
- Event details
- Guest numbers
- Billing information
- Venue viewing information
- Event preferences and requirements
Marketing Information
- Marketing preferences
- Email engagement data, such as opens, clicks and unsubscribes
- Showcase or campaign registrations
Website Usage Information
- IP address
- Browser type
- Device information
- Website usage behaviour
- Cookie preferences
Accessibility or Special Requirement Information
Occasionally, customers may voluntarily provide information relating to accessibility or special event requirements, for example wheelchair access needs.
We only process this information where necessary to help deliver your event or respond to your request.
How We Collect Information
We collect data when you:
- Submit a form on our website
- Request a brochure
- Book or enquire about an event
- Subscribe to marketing communications
- Contact us by email, phone or social media
- Visit our website
- Attend a venue viewing or event
How We Use Your Information
We use your information to:
- Respond to enquiries
- Manage bookings and venue hire agreements
- Communicate regarding your event
- Process payments and invoices
- Send relevant marketing communications
- Improve our services and website
- Maintain internal business records
- Meet legal and accounting obligations
Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
Contract
Where processing is necessary to fulfil a booking, enquiry or agreement with you.
Legitimate Interests
For day-to-day business administration, customer service, venue operations, enquiry management and service improvement.
Consent
For marketing communications and certain website cookies.
You may withdraw consent at any time.
Legal Obligation
Where we are required to retain information for legal, taxation or accounting purposes.
Marketing Communications
We may send marketing emails relating to:
- Weddings
- Corporate events
- Private hire
- Showcase events
- Promotions
- Venue news and updates
Marketing campaigns are managed through Mailchimp.
You can unsubscribe at any time using the unsubscribe link within emails or by contacting us directly.
Third-Party Systems & Service Providers
We use carefully selected third-party providers to help operate our business and website.
These may include:
- Google Workspace / Gmail
- Mailchimp
- BridalLive CRM
- idotoo CRM
- Google Drive
- Adobe Sign
- CookieFirst
- Cloudflare
- Payment processing providers
- Website hosting and development providers
We only share information where reasonably necessary for business operations or event delivery.
Payments
Payments may be made by:
- Bank transfer
- Card payment
- Cash, where accepted
We do not store full payment card information on our website servers.
Data Retention
We aim to retain personal data only for as long as reasonably necessary.
Typically:
- Inactive enquiries may be archived or removed after a reasonable period
- Booking and financial records may be retained for up to 6 years to meet accounting and legal obligations
- Marketing records are retained until consent is withdrawn or unsubscribed
Printed contracts or operational documents may also be retained securely where necessary for business administration.
Cookies
Consent to the use of cookies
For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.
CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).
Data processing agreement
We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Server log files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
- Your consent status or the withdrawal of consent
- Your anonymised IP address
- Information about your Browser
- Information about your Device
- The date and time you have visited our website
- The webpage url where you saved or updated your consent preferences
- The approximate location of the user that saved their consent preference
- A universally unique identifier (UUID) of the website visitor that clicked the cookie banner
International Data Transfers
Some of our third-party providers may process data outside the United Kingdom.
Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Your Rights
Under UK data protection law, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate information
- Request erasure of your data
- Object to certain processing activities
- Restrict processing in certain circumstances
- Withdraw consent for marketing communications
- Lodge a complaint with the Information Commissioner’s Office (ICO)
Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, misuse, loss or disclosure.
However, no online system can ever be guaranteed completely secure.
Contact Us
If you have any questions regarding this Privacy Policy or your personal data, please contact:
Changes to This Policy
We may update this Privacy Policy from time to time.
Any significant updates will be reflected on this page.