Privacy Policy

Village Space (“we”, “us”, “our”) is committed to protecting the personal data of everyone who uses our platform. This policy explains what we collect, why we collect it, and your rights.

We process personal data in accordance with UK GDPR and the Data Protection Act 2018. If you have any questions, contact us at hello@village.space.

Village Space is intended for use by adults managing or making community venue bookings. We do not knowingly collect data from children under 18.

1. What we collect

Depending on how you use Village Space, we may collect:

• Account information — your name, email address and password (stored as a secure hash).
• Venue information — the name, address, description and details of the community venue you manage.
• Booking information — dates, times, spaces booked, and the name and contact details of the person making the booking.
• Communications — messages sent through the platform or directly to us by email, including any correspondence with venues about bookings.
• Payment metadata — billing details, transaction records and payment status. Full card details are handled entirely by our payment provider and are never seen or stored by Village Space.
• Usage information — anonymous, aggregate data about how the platform is used, collected to help us improve the Service.

2. Why we collect it

We collect and use personal data to:

• Provide accounts and bookings — to create and manage your account and process bookings made through the platform.
• Communicate about bookings — to send confirmation emails, reminders and updates related to your bookings or venue.
• Process payments — to facilitate the collection and transfer of payments between bookers and venues.
• Improve the platform — to understand how people use Village Space and make it better over time.
• Meet legal obligations — to comply with applicable financial, tax and data protection laws.

We do not use your data for advertising, and we do not sell it to third parties.

3. Sharing data with venues

When you make a booking through a venue’s Village Space page, relevant booking information — including your name and contact details — is shared with the venue administrator. This is necessary to manage and fulfil your booking.

Venue administrators are responsible for handling your data in accordance with data protection law. Village Space provides the tools; the booking relationship is between you and the venue.

4. Third-party providers

We use a small number of trusted third-party services to operate the platform. These providers may process personal data on our behalf:

• Stripe — payment processing and payouts to venue accounts. Stripe is PCI-DSS compliant and handles all payment card data securely. Village Space does not store full card details.
• Supabase — database hosting and authentication. Data is stored in the EU on infrastructure with appropriate security standards.
• Resend — transactional email delivery (booking confirmations, notifications).
• Analytics providers — we use privacy-friendly, cookieless analytics to understand platform usage. These tools do not track individuals or share data with advertising networks.

We do not share personal data with third parties beyond what is necessary to operate the Service.

5. Cookies and local storage

Village Space uses cookies and browser local storage for the purposes of keeping you logged in, remembering your preferences, and collecting anonymous usage analytics. We do not use advertising cookies or tracking technologies that follow you across other websites.

Our analytics tools are cookieless by design and do not identify individual users.

6. How long we keep it

We retain personal data for as long as your account is active or as long as is necessary to provide the Service. Booking and financial records are retained to meet our legal and accounting obligations. Data held in backups is retained for a reasonable period as part of our standard infrastructure practices.

When data is no longer reasonably required, we delete or anonymise it securely. You can request deletion of your personal data at any time — see Your Rights below.

7. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (TLS), hashed passwords and access controls. We take security seriously and keep our practices under review.

No internet-based service can be guaranteed completely secure. In the unlikely event of a data breach that affects your rights, we will notify you and the relevant authority as required by law.

8. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data where there is no compelling reason for us to continue holding it.
• Restriction — ask us to pause processing your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing carried out on the basis of legitimate interest.

To exercise any of these rights, email hello@village.space. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify account holders by email. The “Last updated” date at the top of this page always reflects the current version.

10. Contact

Questions about this policy or how we handle your data? Email us at hello@village.space.