Privacy Policy

Last updated: February 2026

1. Who We Are

Castle Street Co. is a coworking space operated by Greg Keegan. We are the data controller for personal information collected through this website and our booking system. You can contact us at hey@castlestreet.co for any privacy-related queries.

2. What We Collect & Why

Data	Purpose	Lawful Basis
Name & email	Account creation, booking confirmations, receipts	Contract
Payment information	Processing payments (handled by Stripe)	Contract
Booking history	Managing your access and resolving queries	Contract
Google profile (if used)	Signing in via Google OAuth	Contract
IP address	Security and fraud prevention	Legitimate interests

3. Third-Party Services

We share data with these providers only as needed to run the service:

Stripe — payment processing
Supabase — authentication and database
Loops — transactional emails (confirmations, reminders)
Vercel — website hosting
Google — OAuth sign-in (if you choose it)

Where these providers process data outside the UK, appropriate safeguards (such as Standard Contractual Clauses) are in place.

4. How Long We Keep Data

Account data is kept while your account is active.
Financial records (booking and payment history) are retained for 7 years in line with HMRC requirements.
Inactive accounts with no bookings may be deleted after 2 years.

5. Your Rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Restrict or object to processing
Request a portable copy of your data

To exercise any of these rights, email hey@castlestreet.co.

6. Cookies

We only use cookies that are strictly necessary for authentication (keeping you signed in). We do not use analytics or advertising cookies. No cookie consent banner is required.

7. Complaints

If you are unhappy with how we handle your data you can contact the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.