top of page

PRIVACY POLICY

Last updated: 15 July 2026

This Privacy Policy explains how sporebrew collects and uses personal information when you visit our website, contact us, request a quotation, make a booking, attend one of our events, subscribe to marketing or purchase something from our online shop.

1. Who we are

sporebrew is the trading name of SPOREBREW LTD, a company registered in England and Wales.

Company number: 17019118
Registered office: 124–128 City Road, London, England, EC1V 2NX
Email: hello@sporebrew.com

SPOREBREW L

2. Information we collect

The information we collect depends on how you interact with us.

Information you provide

We may collect:

  • your name, email address and telephone number;

  • your company, organisation, job title or role;

  • billing, delivery and venue addresses;

  • enquiry, quotation and booking information;

  • event dates, locations, expected attendance and service requirements;

  • order, delivery, return and refund information;

  • correspondence, reviews and feedback;

  • marketing preferences;

  • information you include in forms, emails or messages.

Dietary and allergy information

Where necessary to provide food or drink safely, we may collect information about allergies, intolerances or dietary requirements.

Some allergy information may reveal information about your health and may therefore receive additional protection under data-protection law. Where appropriate, we will ask for your explicit consent when collecting it.

Please only provide health information that is relevant to your order or booking.

Payment information

Payments are normally processed by third-party payment providers.

We do not normally receive or store your full payment-card details. We may receive limited information such as:

  • payment status and method;

  • transaction reference;

  • amount paid;

  • billing details;

  • refund, chargeback or fraud-prevention information.

Website information

When you use our website, we may collect:

  • your IP address;

  • device, browser and operating-system information;

  • pages viewed and links selected;

  • approximate location derived from your IP address;

  • referring websites or campaigns;

  • website performance and error information;

  • cookie choices and analytics information.

More information is available in our separate Cookie Policy.

Social media and event content

If you contact or interact with us through social media, we may receive your username, profile information, messages, comments and content you share with us.

We may also take photographs or video at events, pop-ups and brand activations. These may include general images of the event, our products or attendees.

We will normally obtain permission where a person is the clear or prominent subject of promotional content. We may use general or incidental event photography where it is reasonable and proportionate to do so.

You can tell us or the event organiser that you do not wish to be photographed.

3. How we collect information

We may collect personal information:

  • directly from you;

  • through our website, online shop and booking forms;

  • through email, telephone or social media;

  • from event, booking or enquiry platforms;

  • from an organisation arranging an event on your behalf;

  • from venues, collaboration partners or referral partners;

  • from payment, delivery and website-service providers;

  • automatically through cookies and similar technologies;

  • from publicly available business sources.

Where another organisation provides your information to us, that organisation may also be responsible for explaining how it uses and shares your information.

4. How and why we use your information

We only use personal information where we have a lawful reason to do so.

Purpose

Information used

Lawful basis

Responding to enquiries and preparing quotations

Contact, company and enquiry information

Taking steps before entering into a contract and our legitimate interests

Confirming and managing bookings

Contact, event, venue and payment information

Performance of a contract

Providing coffee, drinks, event and residency services

Booking, venue, attendee and service information

Performance of a contract and our legitimate interests

Processing online-shop orders

Contact, delivery, order and payment information

Performance of a contract

Processing payments, refunds and chargebacks

Payment and transaction information

Performance of a contract, legal obligations and legitimate interests

Managing allergies and dietary requirements

Dietary, allergy and relevant health information

Performance of a contract and, where health information is involved, explicit consent

Customer service and complaints

Contact, order, booking and correspondence information

Performance of a contract and legitimate interests

Accounting, tax and business records

Order, invoice, payment and contract information

Legal obligations and legitimate interests

Preventing fraud and protecting our business

Transaction, account and technical information

Legal obligations and legitimate interests

Operating and improving our website

Technical, security and website-usage information

Legitimate interests and consent where required

Sending marketing

Contact details and marketing preferences

Consent or legitimate interests where permitted by law

Photography, testimonials and promotion

Photographs, videos, reviews and testimonials

Consent or legitimate interests, depending on the circumstances

Establishing or defending legal claims

Relevant booking, transaction and correspondence information

Legitimate interests and legal obligations

Where we rely on legitimate interests, we consider whether our use of the information is necessary, proportionate and reasonably expected.

5. Marketing

We may send you information about sporebrew products, services, events, pop-ups, merchandise, residencies, offers and collaborations.

We will send marketing emails to individuals where:

  • they have agreed to receive them;

  • the law allows us to contact an existing customer about similar products or services; or

  • another permitted business-to-business marketing rule applies.

Marketing consent is optional and will not be made a condition of placing an order or booking our services.

You can unsubscribe at any time by:

We may retain your email address on a suppression list so that we do not accidentally send you further marketing.

Unsubscribing from marketing will not prevent us from sending messages about an existing enquiry, booking, order, payment or delivery.

6. Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website, online shop, security and checkout functions to work. Other technologies may be used for analytics, advertising or campaign measurement.

Where legally required, analytics, advertising and other non-essential technologies will not be activated unless you have given consent.

You can accept, reject or change your choices through the cookie controls on our website.

Our Cookie Policy provides more information about the technologies we use, their providers, purposes and retention periods.

7. Who we share information with

We do not sell personal information.

We may share information with organisations that help us operate our business, including:

  • website hosting and e-commerce providers;

  • payment processors and banks;

  • delivery and fulfilment providers;

  • email, booking and customer-management providers;

  • cloud-storage and business-software providers;

  • event organisers and venues;

  • suppliers, staff and subcontractors helping to deliver a booking;

  • analytics and advertising providers, where permitted;

  • accountants, insurers, solicitors and other professional advisers;

  • fraud-prevention, security and IT-support providers;

  • regulators, courts, law-enforcement bodies or public authorities where legally required.

Service providers acting on our instructions must only use personal information for the agreed services and must protect it appropriately.

Some organisations, including payment providers, delivery companies and social-media platforms, may use personal information as separate data controllers under their own privacy policies.

We may also disclose information as part of a sale, restructuring or transfer of all or part of our business.

8. International transfers

Some of our website, payment, communications or cloud-service providers may store or process information outside the United Kingdom.

Where UK data-protection law treats this as a restricted international transfer, we will use an appropriate safeguard. This may include:

  • UK adequacy regulations;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved contractual clauses; or

  • another transfer mechanism permitted by law.

You can contact us for more information about safeguards relevant to your personal information.

9. How long we keep information

We keep personal information only for as long as it is reasonably needed.

Our usual retention periods are:

  • Unsuccessful enquiries and quotations: up to 24 months after the last meaningful contact.

  • Bookings, contracts and customer correspondence: normally up to six years after the service or relationship ends.

  • Orders, invoices, payment and accounting records: normally six years or for any longer period required by law.

  • Allergy and health information: deleted after the relevant service once it is no longer needed, unless required for an incident, complaint or legal claim.

  • Marketing records: until you unsubscribe or withdraw consent, with limited information retained on a suppression list.

  • Customer-service and complaint records: for as long as needed to resolve the matter and for a reasonable period afterwards.

  • Photographs and videos: for as long as they remain relevant to the purpose for which they were obtained.

  • Cookie and analytics information: according to the periods shown in our Cookie Policy.

Information connected with fraud, disputes, accidents, security incidents or legal claims may be kept for longer where reasonably necessary.

When information is no longer required, we will delete or anonymise it.

10. How we protect information

We use reasonable technical and organisational safeguards to protect personal information.

These may include:

  • secure website hosting and payment processing;

  • encryption in transit;

  • password protection and multi-factor authentication;

  • restricted access to customer information;

  • software updates and security monitoring;

  • appropriate agreements with service providers;

  • secure storage and disposal procedures.

No website, email service or online system can be guaranteed to be completely secure.

11. Your rights

Depending on the circumstances, you may have the right to:

  • request a copy of your personal information;

  • correct inaccurate or incomplete information;

  • request deletion of your information;

  • restrict how we use your information;

  • object to processing based on legitimate interests;

  • object to direct marketing;

  • withdraw consent;

  • receive certain information in a portable format;

  • complain about how we use your information.

These rights are subject to legal conditions and exemptions.

To exercise a right, email hello@sporebrew.com. Please provide enough information for us to identify the relevant records.

We may request proof of identity where reasonably necessary. We will normally respond within one month, although the law may permit additional time for complex requests.

12. Data-protection complaints

You can complain to us if you believe that we have not handled your personal information properly.

Please send your complaint to hello@sporebrew.com and include:

  • your name and contact details;

  • a description of your concern;

  • the outcome you are seeking; and

  • copies of any relevant correspondence.

We will:

  • acknowledge your complaint within 30 days;

  • investigate it appropriately;

  • keep you informed where necessary; and

  • explain the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office, the UK data-protection regulator. You do not have to complain to us before contacting the ICO.

13. Children

Our website, bookings and online shop are intended primarily for adults, businesses and event organisers.

Service bookings and online purchases should be made by an adult. We do not knowingly collect personal information directly from children through our website.

Please contact us if you believe that a child has provided information to us without appropriate permission.

14. Automated decisions

We do not currently use personal information to make decisions that have legal or similarly significant effects solely through automated processing.

15. External websites

Our website may contain links to payment services, social-media platforms and other third-party websites.

Those organisations have their own privacy policies. We are not responsible for the privacy or security practices of independent third-party services.

16. Changes to this policy

We may update this policy when our website, online shop, services, suppliers or legal obligations change.

The latest version will be published on our website with a revised “Last updated” date.

17. Contact us

For privacy questions, rights requests or complaints, contact:

SPOREBREW LTD
124–128 City Road
London
England
EC1V 2NX

Company number: 17019118
Email: hello@sporebrew.com

bottom of page