Privacy Policy

This Privacy Policy explains how Webdigit Giorgio Montaldo ("we", "us", "our") collects, uses, and protects personal data when you use londoncoworkingspace.com (the "Website"). We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. What Data We Collect

We collect personal data in the following circumstances:

a) Newsletter subscription

• Email address

b) Listing submission form

• Business name and address
• Contact name
• Email address and phone number
• Website URL
• Business description and other details voluntarily provided

c) Automatic data (server logs)

• IP address (anonymised)
• Browser type and version
• Pages visited and time of visit
• Referring URL

We do not use any third-party tracking cookies or analytics scripts. We do not collect data from minors under the age of 16.

2. Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR) — for newsletter subscriptions
• Contract performance (Art. 6(1)(b) GDPR) — for processing listing submissions and paid plans
• Legitimate interests (Art. 6(1)(f) GDPR) — for server log data used to maintain site security and performance

3. How We Use Your Data

• To send newsletters and updates (with your consent, which you may withdraw at any time)
• To review, publish, and manage your directory listing
• To process payments for paid listing plans (via third-party payment processors)
• To respond to enquiries and support requests
• To maintain the security and performance of the Website

4. Payment Processing

When you purchase a paid listing plan, payments are processed by a third-party payment provider (such as Stripe or Paddle). We do not store your payment card details. The payment processor's own privacy policy applies to data processed during the payment transaction. We will update this policy with the specific provider's details when payment processing is activated.

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Payment processors — solely to complete transactions you initiate
• Hosting providers — Cloudflare, Inc. (infrastructure and CDN), under GDPR-compliant data processing agreements
• Legal authorities — if required by law or to protect our legal rights

6. Data Retention

• Newsletter data: retained until you unsubscribe
• Listing submissions: retained for the duration of the listing plus 12 months after cancellation
• Server logs: automatically deleted after 90 days
• Payment records: retained for 7 years in accordance with Polish accounting law

7. Your Rights

Under the GDPR and UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (for newsletter subscriptions)
• Lodge a complaint with the Polish data protection authority (UODO) at uodo.gov.pl, or with the UK ICO at ico.org.uk

To exercise any of these rights, contact us at: privacy@londoncoworkingspace.com. We will respond within 30 days.

8. International Transfers

Our Website is hosted via Cloudflare, which may process data on servers within the EEA and the United States. Cloudflare participates in the EU–US Data Privacy Framework, providing appropriate safeguards for international transfers.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including HTTPS encryption for all data in transit and access controls on data storage systems.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the Website after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related queries, contact us at: privacy@londoncoworkingspace.com