Privacy Policy

The Compton Club: Privacy Policy

Last updated: 18 March 2026

The Compton Club (“we”, “us”, “our”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, store and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to personal information collected from members, visitors and individuals who interact with the club through our website, membership applications, club activities, and communications.

Who We Are

The Compton Club
Spiceall
Compton
Guildford
Surrey
GU3 1JQ

Telephone: 01483 810268
Email:

For the purposes of data protection law, The Compton Club is the data controller responsible for the personal data we process.

Personal Data We Collect

Depending on how you interact with the club, we may collect the following information:

• Identity and contact information such as name, address, email address, and telephone number.
• Membership information including membership status and renewal history.
• Communication information relating to enquiries or correspondence sent to the club.
• Payment information relating to membership payments where applicable. Payments are processed securely using Square and the club does not store full card details. Payment card details are entered directly into Square’s secure payment systems and are not stored, processed, or accessible by The Compton Club.
• Limited technical information necessary for the secure operation of our website.

We collect only the personal information necessary to administer membership and operate the club.

Technical Data and Website Security

When you visit our website, limited technical information may be processed automatically as part of essential website security and operation. This may include IP address information and security-related request data processed by our website infrastructure.

Our website infrastructure may use security and hosting services that process limited technical request data to protect the website from malicious traffic and maintain network integrity.

These processes are used solely to protect the website from malicious traffic, maintain network integrity, and ensure the site functions correctly. We do not use analytics tools, behavioural tracking, advertising technologies, or marketing profiling on this website.

Security and functionality cookies used by the website do not store personally identifiable information and are described in more detail in our Cookie Policy.

Automated systems such as search engine crawlers, security scanners, and malicious traffic may also interact with the website. Our security infrastructure may process limited technical request data from these systems in order to protect the website, maintain network integrity, and prevent abuse.

How We Use Personal Data

We may use personal information to:

• Administer and manage club membership.
• Communicate with members regarding membership administration, renewals, club events and activities.
• Respond to enquiries or correspondence.
• Process membership payments where applicable.
• Maintain the security and proper operation of our premises and website.
• Comply with legal obligations.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract – to administer membership and provide club services.
• Legitimate interests – to operate and manage the club effectively and prevent crime while protecting the safety of members, visitors, staff and property.
• Consent – where individuals have chosen to receive optional communications.

Sharing Personal Data

We do not sell or trade personal data.

Information may be shared with trusted service providers who support the operation of the club, such as payment processing services including Square. These providers process data only as necessary to deliver their services and are required to handle information securely and in accordance with data protection law.

Payment transactions are subject to the privacy policy and security practices of the payment provider.

Data Retention

Personal data is not retained longer than necessary for the purposes for which it was collected.

Membership records are generally retained while membership remains active and for a reasonable administrative period afterwards. Other information is retained only for as long as required to fulfil its purpose or comply with legal obligations.

When personal data is no longer required it will be securely deleted or destroyed.

Your Data Protection Rights

Under data protection law, individuals have the right to request access to the personal data we hold about them, request correction of inaccurate data, request deletion where appropriate, or object to certain types of processing.

Requests regarding personal data or CCTV recordings should be sent to:

Email:

You also have the right to lodge a complaint with the Information Commissioner’s Office. Further information is available at https://www.ico.org.uk.

CCTV Monitoring

The Compton Club operates a closed-circuit television (CCTV) system at its premises for the purposes of crime prevention, public safety, and the protection of members, visitors, staff, and property.

Cameras monitor entrances, circulation areas, and external parts of the building. CCTV coverage includes areas used by The Compton Club as well as areas occupied by other organisations operating within the premises, including Giggleville. As a result, images may capture members, guests, contractors, and visitors to both the club and other businesses within the building.

The Compton Club is the Data Controller responsible for the operation and management of the CCTV system.

CCTV recordings are retained for a limited period, typically 21–30 days, and are automatically deleted unless required for the investigation of an incident, criminal activity, or insurance matter.

Access to CCTV recordings is strictly limited to authorised representatives of The Compton Club. Recordings will only be disclosed where lawful and necessary, for example to law enforcement agencies in connection with the investigation of criminal activity or where required by law.

Cameras are positioned to monitor public and operational areas only and are not installed in toilets, changing areas, or other private spaces.

Individuals whose images have been captured by CCTV have the right to request access to their personal data. Requests should include the approximate date, time, and location of the recording and may require proof of identity. Requests should be submitted using the contact details provided in this policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page and the “last updated” date will be revised accordingly.