Privacy Policy

Last updated: 20/06/2026

This Privacy Policy explains how The Lobby collects, uses, stores and protects personal information when you visit our website, contact us, apply for a role, book a call or work with us.

Please read this policy carefully. By using our website or submitting personal information to us, you acknowledge that we will use your information as described in this Privacy Policy.

1. Who We Are

This website is operated by The Lobby.

The Lobby is a hospitality growth agency helping hotels, restaurants, bars, cafés, venues and experience-led hospitality brands grow through content, social media, paid advertising, retention marketing and related services.

For the purposes of data protection law, The Lobby is the “data controller” of the personal information we collect and use through this website and in connection with our business activities.

2. What Personal Information We Collect

We may collect and use different types of personal information depending on how you interact with us.

Information You Provide Directly

This may include:

• Your name

• Email address

• Phone number

• Business name

• Job title

• Website URL

• Social media handles

• Location

• Information submitted through contact forms

• Information submitted when booking a call

• Information included in emails or messages you send to us

• Information included in job applications

• Portfolio links, CVs or examples of work

• Any other information you choose to provide

Information About Your Business

If you enquire about or use our services, we may collect information about your business, such as:

• Business name

• Business type

• Venue location

• Website and social media links

• Marketing goals

• Current marketing activity

• Advertising accounts or platforms used

• Booking systems or customer journey information

• Client project details

• Campaign performance information

• Brand assets or content shared with us

Some of this information may relate to a business rather than an individual, but where it identifies a person, we treat it as personal information.

Recruitment Information

If you apply for a role with The Lobby, we may collect:

• Name

• Email address

• Phone number

• Location

• CV or work history

• Portfolio

• Instagram or social media profiles

• Examples of work

• Cover message or introduction

• Availability

• Compensation expectations

• Interview notes

• Communications relating to your application

Website and Technical Information

When you visit our website, we may collect technical and usage information, such as:

• IP address

• Browser type

• Device type

• Operating system

• Pages viewed

• Time spent on pages

• Referring website or source

• Approximate location

• Website interactions

• Cookie preferences

This may be collected through cookies, analytics tools or similar technologies.

3. How We Collect Personal Information

We may collect personal information when you:

• Visit our website

• Submit a contact form

• Book a discovery call

• Subscribe to updates

• Email us

• Apply for a role

• Send us a portfolio or CV

• Communicate with us on social media

• Become a client

• Attend a meeting or call

• Share access to marketing platforms

• Provide assets, documents or business information

• Interact with our ads, emails or campaigns

We may also collect limited information from publicly available sources, such as your business website, LinkedIn profile, Instagram profile, Google Business Profile or other public business listings, where relevant to our services or outreach.

4. Why We Use Personal Information

We use personal information for the following purposes:

To Respond to Enquiries

We use your information to respond when you contact us, submit a form or book a call.

This may include:

• Replying to your message

• Understanding your business

• Preparing for a discovery call

• Sending relevant information about our services

• Following up with you

Lawful basis: Legitimate interests, or steps before entering into a contract.

To Provide Our Services

If you become a client, we use personal information to deliver our services.

This may include:

• Managing your account

• Creating strategy documents

• Planning campaigns

• Managing content

• Running advertising

• Reporting on performance

• Communicating with you

• Managing access to relevant platforms

• Invoicing and payment administration

Lawful basis: Contract, legitimate interests and legal obligation where required.

To Manage Client Relationships

We use personal information to manage our relationship with clients and potential clients.

This may include:

• Client onboarding

• Calls and meetings

• Project management

• Service updates

• Reporting

• Feedback

• Renewals

• Commercial discussions

Lawful basis: Contract and legitimate interests.

To Improve Our Website and Services

We may use website usage data and feedback to understand how people use our website and how we can improve our services.

This may include:

• Website analytics

• Page performance

• User behaviour

• Enquiry sources

• Service development

• Content improvements

Lawful basis: Legitimate interests and consent where required for cookies or tracking technologies.

To Send Marketing Communications

We may use your contact details to send relevant updates about The Lobby, our services, insights, offers or events where permitted by law.

You can unsubscribe or opt out of marketing communications at any time.

Lawful basis: Consent or legitimate interests, depending on the context and applicable rules.

To Process Job Applications

If you apply for a role, we use your information to review your application and communicate with you about recruitment.

This may include:

• Reviewing your experience

• Reviewing your portfolio

• Contacting you about the role

• Arranging interviews

• Making recruitment decisions

• Keeping your details on file for future opportunities, where appropriate

Lawful basis: Legitimate interests and steps before entering into a contract.

To Meet Legal and Administrative Requirements

We may use personal information where necessary to:

• Keep business records

• Comply with tax or accounting obligations

• Respond to legal requests

• Enforce our terms

• Prevent fraud or misuse

• Protect our rights, property or business

Lawful basis: Legal obligation and legitimate interests.

5. Lawful Bases We Rely On

Under data protection law, we must have a lawful basis for using personal information.

We may rely on the following lawful bases:

Contract

Where processing is necessary to provide services to you or take steps before entering into a contract.

Example: using your contact details to deliver a client project.

Legitimate Interests

Where we have a legitimate business reason to use your information, provided your rights and interests do not override those interests.

Example: responding to enquiries, improving our website or managing client relationships.

Consent

Where you have given clear permission for us to use your information for a specific purpose.

Example: subscribing to marketing emails or accepting certain cookies.

You can withdraw consent at any time.

Legal Obligation

Where we need to use or keep information to comply with the law.

Example: keeping financial records for tax purposes.

6. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

• Make the website work properly

• Understand website performance

• Analyse visitor behaviour

• Improve user experience

• Support marketing and advertising activity

• Remember cookie preferences

Some cookies are essential. Others may be optional and require your consent.

You can usually manage cookies through your browser settings or any cookie consent tool displayed on our website.

For more information, please see our Cookie Policy.

7. Who We Share Personal Information With

We do not sell your personal information.

We may share personal information with trusted third parties where necessary to run our business, deliver our services or comply with the law.

This may include:

• Website hosting providers

• Email providers

• CRM or project management tools

• Payment processors

• Accounting or bookkeeping providers

• Analytics providers

• Advertising platforms

• Social media platforms

• Email marketing platforms

• SMS marketing platforms

• Booking or scheduling tools

• Freelancers, contractors or team members working on client projects

• Professional advisers, such as accountants, lawyers or insurers

• Authorities or regulators, where legally required

Where we use third-party service providers, we only share the information needed for them to provide their services.

8. International Transfers

Some third-party tools or service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure appropriate safeguards are in place, such as standard contractual clauses, adequacy decisions or other legally recognised protections.

9. How Long We Keep Personal Information

We only keep personal information for as long as necessary for the purposes described in this Privacy Policy.

Retention periods may vary depending on the type of information and why we collected it.

As a general guide:

• Enquiry information may be kept for up to 24 months

• Client records may be kept for the duration of the client relationship and for up to 6 years after for legal, tax or accounting purposes

• Marketing contact data is kept until you unsubscribe or ask us to delete it

• Job application data may be kept for up to 12 months unless you ask us to delete it sooner or agree to a longer period

• Website analytics data may be retained according to the settings of the analytics tools we use

• Financial and invoice records may be kept for as long as required by law

We may retain information for longer if required for legal, regulatory, tax, accounting or dispute resolution purposes.

10. How We Protect Personal Information

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.

This may include:

• Secure systems and tools

• Password protection

• Access controls

• Limited access to personal information

• Use of reputable third-party providers

• Internal processes for handling data securely

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted online.

11. Your Rights

Depending on the circumstances, you may have the right to:

• Access the personal information we hold about you

• Ask us to correct inaccurate or incomplete information

• Ask us to delete your personal information

• Ask us to restrict how we use your information

• Object to certain uses of your information

• Ask for a copy of your information in a portable format

• Withdraw consent where we rely on consent

• Object to direct marketing at any time

To exercise your rights, contact us using the details in this policy.

We may need to verify your identity before responding.

There may be situations where we cannot fully comply with a request, for example where we need to keep certain information for legal, accounting or contractual reasons.

12. Marketing Communications

If you receive marketing emails from us, you can unsubscribe at any time by:

• Clicking the unsubscribe link in the email

• Contacting us directly

• Replying and asking to be removed

We will not send you marketing communications where you have opted out.

We may still send non-marketing messages where necessary, such as service updates, invoices or important client communications.

13. Recruitment Privacy

If you apply for a role with The Lobby, we use your information to assess your suitability for current or future opportunities.

We may review your CV, portfolio, Instagram profile, website, social media accounts or examples of work where you have provided them or made them publicly available.

We may keep your application details for up to 12 months unless you ask us to delete them sooner.

If we want to keep your details for longer, we may ask for your consent.

Submitting an application does not guarantee an interview, role, contract or employment.

14. Client and Project Data

If you become a client, we may process business and marketing information relating to your venue, campaigns, customers or audience.

Where you provide us with personal information about your customers, guests, subscribers or users, you must ensure that you have the legal right to share that information with us.

If we process personal data on your behalf as part of providing services, additional data processing terms may be required.

You remain responsible for your own privacy notices, customer consents, marketing permissions and compliance with applicable laws.

15. Special Category Data

We do not intentionally collect special category personal data through our website.

Special category data may include information relating to health, ethnicity, religious beliefs, political opinions, trade union membership, sexual orientation or biometric data.

Please do not submit special category data to us unless it is necessary and you have a lawful basis for doing so.

If special category data is provided to us, we will only use it where permitted by law.

16. Children’s Data

Our website and services are not intended for children.

We do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

17. Links to Other Websites

Our website may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices, content or security of third-party websites.

You should read the privacy policies of any third-party websites you visit.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updates will be posted on this page with a new “Last updated” date.

You should review this page periodically to stay informed about how we use personal information.

19. How to Contact Us

If you have any questions about this Privacy Policy or how we use personal information, please contact us:

Email: [Insert privacy/contact email]
Business name: The Lobby
Address: [Insert business address]

20. How to Complain

If you are unhappy with how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office, the UK regulator for data protection.

Information Commissioner’s Office
Website: ico.org.uk
Phone: 0303 123 1113