Privacy Policy

This page has some legal technicalities but also is underpinned by a genuine concern that we do everything we can to ensure your data is treated with the respect that we would want our data treated. We’ve reviewed our data collection and retention policy in line with the General Data Protection Act.

This privacy policy gives you information about how Punch Hospitality (we, us or our) collects and uses your personal data through punch-hospitality.com website (Website), including any data you may provide when you communicate with us through the Website or register with us to purchase a product.

If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us by email on [email protected].

If you’re a client or supplier, we’ll have your data stored in a number of other places for the purposes of invoicing, paying bills and delivering projects.

Information collected

We collect personal data from visitors to our website through the use of online forms, email hyperlinks and the contact us page. We collect your details when you email us with an enquiry. We may also have collected your details when we met you at an event or you came to one of our presentations or training sessions.

When you submit your data to us, either through the website, by email or in person, this will placed into our CRM (Pipedrive) and is used by us in a variety of ways, specifically:

• Providing information about products and services
• Providing and personalising our services
• Dealing with your enquiries and requests
• Administering membership of our newsletter distribution list
• Conducting market research

In all cases our aim is that it is clear what you’re opting into and you’ll have given your consent for us to use your data.

More generally, we do not pass on our data to any third party. You can unsubscribe from the mailing list at any time, either by using the unsubscribe feature on the newsletter or by emailing [email protected].

Where your data is stored?

Pipedrive is our client relationship management tool and collects and stores your data. In this instance, Pipedrive is the data processor and Punch Hospitality is the data controller.

Mailchimp are providers of email marketing software we recommend to our clients and in this instance, they are the processor of data and Punch Hospitality is the controller.

All data stored is compliant within their GDPR policies and no data is stored with Punch outside of this.

We will retain your personal data only for as long as is necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, as well as applicable legal requirements.

Some of our third-party service providers (such as Pipedrive and Mailchimp) may process or store your data outside the UK or the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to protect your personal data in accordance with UK data protection law.

Disclosure, opt out and deletion of your data

Disclosures

We’ll not share your data with third parties unless we are obliged to disclose personal data by law, or the disclosure is necessary for purposes of national security, taxation and criminal investigation, or we have your consent.

Want more details?

You have the right to see the data we have collected about you.

If you have any concerns about how we handle your personal data, we would encourage you to contact us in the first instance at [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection issues (www.ico.org.uk).

And lastly

If you have any concerns about our GPDR policy you can contact; [email protected]  In addition to the above, we collect anonymous data information automatically about your visit to our website through cookies.

Please see our Cookies Policy for more details.

This does not fall within the remit of GDPR but is important.

Last updated: September 2025