Privacy Policy

This privacy notice details how we collect, use and protect the personal data you provide to us. It also explains your rights in relation to the personal data we hold about you, and how to contact us if you have any questions.

Contents

1. Important information and who we are
2. The data we hold about you
3. How your personal data is collected and used
4. Access, sharing and disclosure of your personal data
5. Data retention and disposal
6. Cookies
7. Changes to this privacy notice
8. Your rights
9. Your acceptance of this privacy notice
10. Contacting us or making a complaint

1. Important information and who we are

Purpose of this privacy notice

This privacy notice details how we collect, use and protect the personal data that you provide to us, and explains what we do with your data. It also explains your rights in relation to the personal data we hold about you, and how to contact us if you have any questions or comments. This privacy policy was last updated June 2026 and may change from time to time — the up-to-date version will always be available on our website.

Controller

Our registered company name is Cowork Ventures Ltd (company no. 10136014; The Gallery, Kings Wharf, The Quay, Exeter, Devon, EX2 4AN). We are VAT registered (no. GB243133835) and registered as a data controller with the UK Information Commissioner's Office (ICO; no. ZA631931). Cowork Ventures Ltd is referred to by its business name Generator Hub (Generator Hub, we, our, or us). If you have any questions about this privacy notice, please contact us at [email protected].

Third-party links

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. When you leave our website, we encourage you to read the privacy notice of every website you visit.

2. The data we hold about you

Personal data refers to any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you, including:

• Identity data — first and last name, date of birth, gender, social media accounts, employer, company name, skills and interests, and image
• Contact data — email address, home or registered office address, and personal and/or work phone numbers
• Financial data — payment card details (processed securely by Stripe; we do not store card details directly)
• Technical data — internet protocol (IP) address, browser type and version, time zone settings, browser plug-in types and versions, operating system and platform
• Usage data — information about how you use our website and services
• Marketing and communications data — your preferences in receiving marketing from us and your communication preferences

Other than as captured incidentally via our CCTV systems, we do not collect any Special Categories of Personal Data about you (such as race, ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, or health/medical information) unless you voluntarily disclose this to us for health and safety purposes.

Control of your personal data

Customers have the option to provide us with personal data when they contact us or use our services. Aside from mandatory information (name, email address, physical address, company name and phone number), customers have control over what information they provide. Customers can always refuse to supply personal information, except this may prevent them from engaging in certain Generator Hub activities.

Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your time with us.

3. How your personal data is collected and used

Data collection methods

We collect personal data through the following methods:

• Direct interactions — in person, by phone, via email, by post and through our social media platforms (Instagram, LinkedIn, Facebook)
• Contact and enquiry forms — via our website, including our contact form, membership enquiry form, book a visit form, and newsletter signup
• Photo identification — we may ask you to provide photo ID to prevent fraudulent use of our services. Images are sent securely and stored on a secure, password-protected server
• CCTV — we use CCTV in various locations around the cowork space for security. We adhere to the ICO's code of practice for CCTV. Footage is stored for up to 20 days before being overwritten
• Online payments — payment information is collected and processed by Stripe. We do not store card details
• Newsletter signup — if you subscribe to our newsletter, your name and email address are stored securely by Mailchimp
• Network monitoring — we use a third-party network management system (Switch Systems, UK) that monitors network usage. This platform stores IP addresses and network usage data. We do not store browsing history or track internet activity
• Photos and videos — as part of our community activities, we may take photos or videos. We will give prior notice where possible, ask for permission, and give customers the opportunity to opt out. Where consent is withdrawn in writing, we will remove images where possible

Reasons for data collection

The main legal bases for processing your personal information are:

• Consent — for example, newsletter subscriptions
• Contract performance — to provide you with our services
• Legitimate interests — to run our business, protect our assets, administer our IT systems, and operate our website

Purposes for data collection

• To contact and communicate with you
• To provide you with our products and services
• To send you our newsletter (where you have subscribed)
• To ensure security and investigate responsibility in the event of any crime, damage or injury
• To take and verify payments
• To efficiently run our website and social media pages
• To facilitate networking and community building between members
• To allow us to monitor and record use of our services
• Ancillary purposes such as maintenance, backups and archiving

Marketing

We may contact you from time to time by email to provide information about our products or services. You can unsubscribe at any time by following the opt-out link in any marketing message or by contacting us directly. We will get your express opt-in consent before sharing your personal data with any third party for marketing purposes unrelated to Generator Hub.

4. Access, sharing and disclosure of your personal data

Within Generator Hub, your personal data will only be accessed or used by our directors and employees who have a legitimate business need to do so. We take your privacy seriously and have implemented appropriate physical, technical and organisational security measures to protect your personal data.

Except as explained in this notice, we will not share your personal data without your consent unless required to do so by law. We may share your personal data with the following third-party service providers:

• HM Revenue & Customs and other regulatory authorities
• Professional advisors — lawyers, bankers, auditors and insurers
• Stripe — online payment processing (USA)
• Resend — transactional email delivery (USA)
• Mailchimp / Intuit — newsletter distribution (USA)
• Cloudflare — website security and bot protection via Turnstile (USA)
• Switch Systems — IT and network management (UK)
• RingCentral — phone provider (UK)
• Third parties — in the event of a business sale, transfer or merger, the new owners may use your personal data in the same way as set out in this notice

In all cases, these third-party providers may only use your personal data for the specific business purposes intended and not for any other reason.

5. Data retention and disposal

We will keep your personal data for no longer than necessary for the purposes set out above. We will retain your information for as long as needed to provide services to you, and for a maximum of 5 years after our last communication once you are no longer a customer.

Personal data stored by Generator Hub will be disposed of securely. Where personal data is also stored by third-party applications, we will delete what we can directly — in some cases you may need to contact the third party directly to request deletion of your data from their systems.

6. Cookies

Our website uses only essential cookies — small text files that are necessary for the website to function correctly. These include session cookies that maintain your browsing session and security cookies used by our form protection (Cloudflare Turnstile).

We do not use any tracking, analytics, advertising or third-party marketing cookies. Because we use only essential cookies, we are not required to obtain your consent before setting them under UK PECR (Privacy and Electronic Communications Regulations).

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse essential cookies, please note that some parts of our website may become inaccessible or not function properly.

7. Changes to this privacy notice

Generator Hub may update this privacy policy at any time. We encourage you to check this page periodically to stay informed about how we protect your personal information. The date at the top of this page indicates when it was last updated. Your continued use of our website and services following any changes constitutes your acceptance of the updated policy.

8. Your rights

You have a number of rights in relation to your personal data (though there are circumstances in which these may not apply). You have the right to request that we:

• Update any of your personal information if it is inaccurate or out of date
• Delete the personal data we hold about you (note: this may affect our ability to provide some services to you)
• Restrict the way in which we process your personal data
• Stop processing your data where you have valid objections to such processing
• Transfer your personal data to a third party

To exercise any of these rights, please contact us at [email protected]. We will respond within the time frame permitted by law.

9. Your acceptance of this privacy notice

By using this site and our services, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our site or services. Your continued use of the site following the posting of changes to this policy will be deemed your acceptance of those changes.

10. Contacting us or making a complaint

If you have any questions about this privacy notice or the way we handle your personal data, please contact us:

• Email: [email protected]
• Phone: 01392 427111
• Post: Generator Hub, The Gallery, Kings Wharf, The Quay, Exeter, Devon, EX2 4AN

If you are unsatisfied with our response to any data protection issue, you have the right to make a complaint to the Information Commissioner's Office (ICO) — the UK authority responsible for data protection. You can contact them at ico.org.uk.