Privacy Notice
This notice explains how Power Vendworks collects, uses and protects your personal information when you submit a venue partnership enquiry or general contact form.
Last updated: 17 October 2026
1. Who We Are
This Privacy Notice is issued by Power Vendworks Ltd, a company registered in England and Wales.
Registered company name: POWER VENDWORKS LTD
Company registration number: 17514947
Jurisdiction: England and Wales
Registered office: 24 Astley Close, Redditch, England, B98 7TY, United Kingdom
Power Vendworks Ltd independently manages its own venue partnerships and website enquiries and has no parent company.
Power Vendworks Ltd is the data controller for personal information collected through this website, including through the Venue Partnership Application and General Contact forms. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that processing is carried out lawfully under UK GDPR and the Data Protection Act 2018.
You can contact us about data protection matters at: [email protected]
2. Information We Collect
We collect personal information through two forms on this website:
Venue Partnership Application Form
- Your name
- Your email address
- Your business telephone number (optional)
- Your venue name
- Type of venue
- Town or postcode of the venue
- Estimated monthly visitor numbers (optional)
- Approximate available floor space (optional)
- Machines of interest
- Any additional information you choose to provide in the free-text field
General Contact Form
- Your name
- Your email address
- Your company name (optional)
- Your telephone number (optional)
- The nature of your enquiry
- Your message
This website uses browser storage to remember your cookie preferences.
Optional website interaction analytics are provided through the GoDaddy platform. These are intended to operate only where you have given your consent. You can review and change your preferences at any time using the Cookie Settings link in the footer of this website, or by reading our Cookie Policy.
⚠ TO CONFIRM: GoDaddy's technical confirmation of whether any personal data is processed before consent is given, and the nature of any pre-consent network requests, remains outstanding. This section should be reviewed once that confirmation is received.
Special category data
Power Vendworks Ltd does not request special category data (as defined under UK GDPR) through any form on this website. We ask that visitors do not include special category information — such as health data, religious beliefs or political opinions — in any free-text fields unnecessarily. Any such information submitted would be handled with appropriate care, but we are not able to guarantee that it will be processed under a specific lawful basis for special category data unless you have made a specific request that requires it.
3. Why We Collect Your Information
We collect and use your personal information for the following purposes:
- Responding to your enquiry — to reply to questions submitted through the general contact form.
- Assessing venue partnership applications — to evaluate whether a venue partnership may be suitable and to progress discussions with prospective venue partners.
- Maintaining business correspondence — to keep a record of communications with prospective and existing venue partners.
- Complying with legal obligations — where we are required by law to retain certain records.
We will not use your information for marketing purposes without your separate consent.
4. Lawful Basis for Processing Personal Data
Under UK GDPR, we must identify a lawful basis before processing your personal data. The lawful bases we consider applicable to our processing activities are set out below. Where we rely on legitimate interests, a legitimate interests assessment must be carried out and documented before that basis can be confirmed. Those assessments have not yet been completed. ⚠ TO CONFIRM: each lawful basis below must be verified with a qualified data protection adviser, and any required legitimate interests assessments must be completed and documented, before this notice is published
Responding to general enquiries
Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR) — We consider it to be in our legitimate interest to respond to enquiries directed to us. This basis is subject to a legitimate interests assessment confirming that our interest is not overridden by the rights and interests of the individual. ⚠ TO CONFIRM: legitimate interests assessment to be completed and documented
Assessing and progressing venue partnership applications
Lawful basis: Legitimate interests, or pre-contractual steps where applicable (Article 6(1)(f) or Article 6(1)(b) UK GDPR) — We consider it to be in our legitimate interest to evaluate prospective commercial partnerships. Where an individual is submitting an application in their own capacity as a prospective contracting party (rather than as a representative of a business), Article 6(1)(b) may also apply as processing necessary for steps taken at the request of that individual prior to entering a contract. Article 6(1)(b) does not automatically apply to individuals acting solely as representatives of a company. ⚠ TO CONFIRM: confirm which basis applies in each context; complete legitimate interests assessment if Article 6(1)(f) is relied upon
Maintaining business correspondence records
Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR) — We consider it to be in our legitimate interest to retain records of business correspondence for operational and accountability purposes. This basis is subject to a legitimate interests assessment and to the application of appropriate retention limits, ensuring that records are kept only for as long as necessary and proportionate. ⚠ TO CONFIRM: legitimate interests assessment to be completed and documented; retention periods to be confirmed in Section 8
Compliance with applicable legal duties
Lawful basis: Legal obligation (Article 6(1)(c) UK GDPR) — Where a specific legal obligation requires us to retain or process personal data — for example, obligations arising under company law, tax law or other applicable legislation — we will rely on this basis. We will not rely on Article 6(1)(c) in the absence of an identified and applicable legal obligation.
5. How We Store and Protect Your Information
Your personal information is stored and processed using the systems described in Section 6 below. ⚠ TO CONFIRM: describe where enquiry data is stored — for example, the inbox or CRM system used by Power Vendworks
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss or disclosure. ⚠ TO CONFIRM: describe specific security measures in place, such as access controls, encryption or staff training
Access to personal information submitted through this website is restricted to authorised personnel at Power Vendworks who need it to carry out their responsibilities.
6. Third Parties and Processors
To operate this website and manage enquiries, we use third-party service providers who may process your personal information on our behalf. These providers act as data processors and are required to handle your data only in accordance with our instructions.
⚠ TO CONFIRM: list all third-party processors used, including website hosting provider, email or inbox provider, any CRM or helpdesk software, and any analytics tools. For each, confirm the name of the provider, the purpose and the country in which data is processed.
We do not sell your personal information to third parties. We do not share your personal information with third parties for their own marketing purposes.
We may disclose your personal information where required to do so by law, by a court order, or by a regulatory authority.
7. International Transfers
The United Kingdom has its own data protection framework following its departure from the European Union. Where your personal information is transferred to or processed in a country outside the UK, we will ensure that appropriate safeguards are in place in accordance with UK GDPR.
⚠ TO CONFIRM: confirm whether any of the third-party processors listed in Section 6 process data outside the UK, and if so, identify the safeguards relied upon — for example, adequacy regulations, standard contractual clauses or binding corporate rules.
If no international transfers take place, this section may be simplified to confirm that all processing occurs within the UK.
8. How Long We Keep Your Information
We will retain your personal information only for as long as is necessary for the purposes described in this notice, or as required by law. The retention periods set out below represent Power Vendworks Ltd's proposed policy, which is subject to final internal approval.
General enquiries — no partnership progressed
Personal information relating to general enquiries that do not progress will be retained for up to 12 months after the last meaningful communication, unless a longer period is necessary for a documented lawful purpose.
Venue partnership applications — partnership not progressed
Personal information relating to venue partnership applications that are closed or declined will be retained for up to 24 months after the application has been closed or declined, unless a longer period is necessary for a documented lawful purpose.
Venue partnership applications — partnership entered into
Personal information needed to administer an active commercial partnership will be retained for the duration of that relationship. Following termination, relevant contractual and business records may be retained for up to six years where justified by contractual, legal or legitimate business purposes. Information not required for those purposes will be deleted or anonymised earlier.
Deletion and review
Power Vendworks Ltd will periodically review retained information and arrange for deletion or anonymisation when the applicable retention period expires, unless continued retention is lawfully justified.
⚠ TO CONFIRM: the practical implementation of this retention policy — including the procedure for permanently deleting or anonymising individual records held in the GoDaddy Airo Inbox — has not yet been verified with GoDaddy. No automatic deletion is currently configured. This notice must not represent deletion as guaranteed until the applicable deletion procedures have been confirmed and, where necessary, implemented.
9. Your Data Protection Rights
Under UK GDPR, you have the following rights in relation to your personal information. These rights are not absolute and may be subject to exemptions in certain circumstances.
Right of access
You have the right to request a copy of the personal information we hold about you (known as a Subject Access Request).
Right to rectification
You have the right to ask us to correct personal information that is inaccurate or incomplete.
Right to erasure
You have the right to ask us to delete your personal information in certain circumstances, for example where it is no longer necessary for the purpose for which it was collected.
Right to restriction of processing
You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Right to data portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal information in a structured, commonly used and machine-readable format.
Right to object
Where we rely on legitimate interests as our lawful basis, you have the right to object to the processing of your personal information. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
Rights related to automated decision-making
We do not make decisions about you solely by automated means that produce legal or similarly significant effects.
To exercise any of these rights, please contact us using the details in Section 10. We will respond within one calendar month of receiving your request. We may ask you to verify your identity before processing your request.
10. Contacting Us About Privacy
If you have any questions about this Privacy Notice, or if you wish to exercise any of your data protection rights, please contact us by email:
Data Protection Enquiries
[email protected]Please include "Data Protection" in the subject line of your email so that we can direct your enquiry appropriately.
11. Complaints to the ICO
If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the UK's independent data protection regulator.
Information Commissioner's Office
Website: ico.org.uk
Helpline: 0303 123 1113
Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first using the details in Section 10.
12. Updates to This Notice
We may update this Privacy Notice from time to time to reflect changes in our practices, the services we offer, or legal requirements.
Where changes are material, we will take reasonable steps to bring them to your attention. The date at the top of this notice indicates when it was last updated.
Your continued use of this website after any update constitutes your acknowledgement of the revised notice.