THINQTANQ PRIVACY POLICY (V2)
Last reviewed: 10/10/2026
1. Who we are
Our website address is https://thinqtanq.co.uk. THINQTANQ is the shortened name of THINQTANQ Plymouth Ltd, a private limited company registered in England and Wales.
- Company number: 08202834
- Registered office: Fairbairn House, Higher Lane, Plymouth, PL1 2AN
- Directors: Robert David Wick and Kirsty Ann Wick
- ICO registration: ZA596084 (Tier 1)
- Data protection contact: compliance@thinqtanq.co.uk
This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. We are committed to protecting your privacy, and we will never sell your data.
2. What personal data we collect and why
We collect and use personal data only where we have a lawful basis to do so under the UK GDPR and the Data Protection Act 2018. The main bases we rely on are: performance of a contract, compliance with a legal obligation, our legitimate interests (for example, running the building securely and keeping members informed), and consent where required.
Purchases, memberships and accounts
If you purchase something from us - including a membership, a day pass, a free week, a room booking or a registered office service - we collect the information needed to set up and manage your account, take payment and provide the service. This includes your name, business name, contact details, billing address and payment records. We process this data to perform our contract with you and to meet our legal obligations (for example financial and tax records).
When you sign up for one of our products, including the free week, your email address is added to our community mailing list. We do not use this list to market to third parties; we use it to keep members up to date on what is going on and any important changes at THINQTANQ. You can unsubscribe at any time using the link at the bottom of any email, or by contacting us. Opting out will not stop service-related emails connected to your account.
Comments
If visitors leave comments on the site we collect the data shown in the comments form, plus the visitor's IP address and browser user agent string, to help spam detection. An anonymised string created from your email address (a hash) may be provided to the Gravatar service to check whether you use it; the Gravatar service privacy policy is available at https://automattic.com/privacy. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Contact forms and email
If you submit information to us via a contact form, we retain it only for as long as is required to deal with your request, and we do not use it for marketing unless you have asked us to. If you contact us by email, we retain the correspondence for as long as required to deal with your request or enquiry. Should you subsequently enter into a business arrangement with us, we retain your information for the duration of that arrangement and for any period after that required by law.
Registered office and virtual office services
Where you use our registered office or virtual office service, we collect proof of identity and proof of address, and we may carry out sanctions list and Politically Exposed Person (PEP) screening. We do this to comply with our legal obligations under anti-money laundering legislation. We retain these records for a minimum of five years after the end of your membership, as required by law.
Sign-in system
When you visit THINQTANQ, we ask you to sign in on arrival and sign out when you leave. We collect your name and email address in our sign-in system so that we can track usage, manage our usage statistics, generate fire safety information and ensure building security. Guests are also asked to sign in. We process this data in our legitimate interests of keeping the building secure and meeting fire safety requirements.
CCTV
We may use CCTV in and/or around THINQTANQ for the security of our members, visitors, staff and property. CCTV footage is used only for security purposes, is retained only as long as necessary, and is not used for any other purpose.
3. Cookies and tracking
If you use our website you consent to the use of cookies - that's how the internet works. If you select the "Nope" button on our cookie notification, all non-functional third-party cookies will be refused.
- Comment cookies. If you leave a comment you may opt in to saving your name, email address and website in cookies, for your convenience so you don't have to fill in your details again. These cookies last for one year.
- Login cookies. If you have an account and log in, we set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in we also set cookies to save your login information and screen display choices: login cookies last for two days, screen options cookies for a year. If you select "Remember Me", your login persists for two weeks. If you log out, the login cookies are removed.
- Editing cookies. If you edit or publish an article, an additional cookie is saved in your browser. It includes no personal data and simply indicates the post ID of the article you just edited; it expires after one day.
4. Embedded content from other websites
Articles on this site may include embedded content (for example videos, images, articles). Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction if you have an account and are logged in to that website.
5. Analytics
We use Google Analytics as part of our website. This may collect details from your computer such as IP address, cookies or ID numbers. We use this information (once processed by Google) to track website performance. It is not retained or processed in any other way.
6. Who we share your data with
In the process of doing business with you, we may store your data with one or more of the following services. We share only what is necessary to run our business, transmit information as securely as possible, and keep data within the UK and European Union where possible. We will never sell your data.
- Google (calendar, analytics, docs, sheets, gmail) - https://google.com
- WordPress (this website, booking and analytics plugins, shopping services) - https://thinqtanq.co.uk
- WooCommerce - https://woocommerce.com
- PayPal - https://paypal.com
- GoCardless - https://gocardless.com
- Eventbrite - https://www.eventbrite.co.uk
- Xero - https://www.xero.com/uk
- Zettle (PayPal) - https://www.zettle.com/gb
- Stripe - https://stripe.com/gb
- Our web hosting provider and email provider
We have checked and are satisfied that each is compliant with, or has a roadmap towards compliance with, UK data protection law.
7. How long we retain your data
We retain your data only for as long as is required to fulfil the purpose it was originally intended for. Financial records may be kept for up to 7 years to meet HMRC requirements. Anti-money laundering records are kept for a minimum of 5 years after the end of your membership. Data collected for other purposes (for example contact form enquiries) is deleted once the purpose is complete.
8. Your rights
If you have an account on this site, or have left comments, you can request a copy of the personal data we hold about you, including any data you have provided to us. Under the UK GDPR you also have the right to:
- have inaccurate personal data corrected
- request erasure of personal data we hold about you, where we are not obliged to keep it by law
- restrict how we process your data in certain circumstances
- object to processing based on legitimate interests
- data portability, where applicable
These rights do not extend to data we are obliged to keep for administrative, legal or security purposes. If you wish to exercise any of these rights, email compliance@thinqtanq.co.uk with the subject "Privacy Enquiry" and an outline of your request. We will respond as soon as is reasonably practicable and within one month. If you are not satisfied with how we handle your request, you have the right to complain to the Information Commissioner's Office (ico.org.uk).
9. How we protect your data
We use secure passwords and, where possible, two-factor authentication to secure your data. Any written or printed data is secured with a lock and key, and our systems are hosted on servers in the UK and EU.
10. Data breach procedures
We take the security of your data seriously. If a data breach occurs affecting your personal data, we will contact all affected users by email as soon as practicable, with a follow-up one week later. Where a breach is reportable under the UK GDPR, we will notify the Information Commissioner's Office within 72 hours, and we will keep affected individuals informed where the breach poses a high risk to their rights.
Please visit our partners' websites (listed above) for information on how they handle a data breach.
11. Changes to this policy
We review this policy regularly. Any changes will be published on this page, and where changes are significant we will notify affected members.
*THINQTANQ Plymouth Limited. Registered in England and Wales, company number 08202834.*