Privacy Policy.

Who we are.

This policy explains how 22 Works Ltd, trading as Society of Poets ("we", "us", "our") collects and uses your personal data. We are the data controller. We are registered in England and Wales under company number 15916648, registered office 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE. For any privacy question, contact us at hello@societyofpoets.co.uk.

The information we collect.

• When you enquire or book: your name, email address, and the details you give us (which experience you're interested in, dietary, access or medical needs you choose to share, number of guests and their first names if you provide them).
• When you pay: we take payment through Stripe. Your card details are handled directly by them and are not stored on our systems; we receive confirmation of payment and limited transaction details.
• When you subscribe to the newsletter: your email address (and name if given), together with a record of your consent (when and how you gave it). Our newsletter is managed through Klaviyo.
• Automatically, if you use our site: basic technical and usage data, if analytics or cookies are used (see § 8).

How and why we use it (lawful bases).

• To take and manage your booking and deliver the experience · lawful basis: performance of a contract with you.
• To reply to enquiries · lawful basis: our legitimate interests in responding to you.
• To send you the newsletter · lawful basis: your consent, which you give by opting in and can withdraw at any time.
• To take payment and keep financial records · lawful basis: contract and our legal obligations.
• To keep our site secure and improve it · lawful basis: our legitimate interests.

Who we share it with.

We share data only with service providers who help us run the business, under appropriate agreements, including: our payment processor (Stripe), our email, newsletter and customer-data platform (Klaviyo), our website host (to be confirmed), and our analytics provider (to be confirmed). We do not sell your data. We may disclose data if required by law.

Some of these providers, including Klaviyo (which is based in the United States), may process data outside the UK. Where that happens, we ensure appropriate safeguards are in place, such as the UK extension to the EU/US Data Privacy Framework, or Standard Contractual Clauses and the UK International Data Transfer Agreement.

How long we keep it.

We keep booking and financial records for as long as necessary to provide the service and to meet our legal obligations (for example, tax records are kept for 6 years). Enquiry data is kept for 12 months. Newsletter data is kept until you unsubscribe.

Your rights.

Under UK data protection law you have the right to: access the data we hold about you; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; and withdraw consent at any time (for example, by unsubscribing). To exercise any of these, contact hello@societyofpoets.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Marketing and unsubscribing.

We only send the newsletter to people who have opted in. Every newsletter includes an unsubscribe link, and you can ask us to stop at any time by emailing hello@societyofpoets.co.uk.

Cookies and analytics.

Our site uses only the cookies essential to make it work. We use [privacy-first analytics tool], which does not track you across sites or store personal data, so we don't need a cookie banner.

Keeping data secure.

We take reasonable technical and organisational measures to protect your data, including HTTPS across the site and using reputable, secure processors for payments and email.

Changes to this policy.

We may update this policy from time to time. The current version, with its date, is always on this page.

Contact.

Questions, requests or complaints: hello@societyofpoets.co.uk.