40ft Brewery Privacy Policy

Purpose of the Privacy Policy

This privacy policy outlines how 40ft Brewery collects, uses, stores, and protects personal data from customers who access and use our free Wi-Fi service at the taproom.

We are committed to safeguarding your privacy and ensuring that your personal data is handled in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The purpose of this policy is to explain what information we collect, why we collect it, how it is used, how it is stored, and what rights you have regarding your personal data.

Scope of the Privacy Policy

This policy applies to all customers and visitors who access or use the free Wi-Fi network operated by 40ft Brewery at our taproom, as well as any employees or third-party service providers who manage or maintain the Wi-Fi service on our behalf.

It covers personal data collected through the Wi-Fi login process, network usage, and related interactions with our digital systems.

Document Owner and Responsibility

The Managing Director of 40ft Brewery is the owner of this document and is responsible for keeping it up to date.

Overall responsibility for ensuring that this policy complies with legal requirements and data protection standards rests with the Board of Directors.

Day-to-day implementation, compliance monitoring, and responding to data protection queries are managed by the Data Protection Officer (DPO) or designated representative of 40ft Brewery.

Policy Statement

40ft Brewery values the privacy of all customers and visitors. We only collect and process personal data that is necessary to provide and maintain a secure and reliable Wi-Fi service.

We are committed to processing data lawfully, fairly, and transparently, and to taking all reasonable steps to protect it from misuse, loss, or unauthorized access.

Information We Collect

When you use our free Wi-Fi network, we may collect the following data:
- Basic login or identification information (e.g., name, email address, or phone number if required for access)
- Device identifiers (such as MAC address or IP address)
- Connection timestamps (date, time, duration of session)
- Network activity information (limited metadata, not content of communications)

We do not monitor or record your browsing content or any personal communications transmitted over the network.

Purpose of Data Collection

We process this data to:
- Provide you with access to the Wi-Fi service
- Maintain network performance and security
- Prevent fraud, misuse, or illegal activity
- Comply with legal obligations, including those related to public Wi-Fi security and law enforcement requests
- Understand and improve our customer experience

We do not use your Wi-Fi usage data for direct marketing unless you have provided explicit consent.

Data Retention

Personal data collected through the Wi-Fi system is retained only as long as necessary to fulfil the purposes outlined above. Typically, this is no longer than 90 days, unless required for legal or security purposes.

Once this period expires, data is securely deleted or anonymised.

Data Sharing and Security

We do not sell or share personal data with third parties for marketing purposes.

Your data may be shared with trusted third-party providers who operate the Wi-Fi system on our behalf. These providers are contractually required to comply with data protection standards equivalent to those of 40ft Brewery.

We use appropriate technical and organisational measures to ensure your data is protected against accidental loss, unauthorised access, alteration, or disclosure.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:
- Access – You may request a copy of the data we hold about you.
- Rectification – You can ask us to correct inaccurate or incomplete information.
- Erasure – You can request that your data be deleted when it is no longer necessary.
- Restriction – You can ask us to restrict how your data is used.
- Objection – You can object to data processing in certain circumstances.
- Portability – You can request your data in a commonly used, machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer using the details below.

Contact Information

If you have any questions or concerns regarding this Privacy Policy or the way your personal data is handled, please contact:

Data Protection Officer
40ft Brewery
Bootyard, Abbott Street, London E8 3DP
Email: info@40ftbrewery.com

If you believe your data has been mishandled, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Policy Review and Updates

This policy will be reviewed annually or when significant changes occur in our data practices, legal obligations, or Wi-Fi service providers.

The latest version of this Privacy Policy will always be available on-site and upon request.