Last updated: 07 March 2026

GDPR Compliance

Data Controller

When you use Hallhub to manage your venue bookings, you act as the Data Controller for your customers' personal data. Hallhub acts as the Data Processor.

Lawful Basis

Personal data collected during bookings is processed under the lawful basis of contract performance — it is necessary to fulfil the booking agreement between you and your customers.

Data Retention

Booking records are retained for 7 years to comply with UK financial record-keeping requirements. Customer personal data may be deleted upon request outside of this legal obligation.

Data Subject Rights

Your customers have the right to access, correct, or delete their personal data. You can manage customer data from the Customers section of your dashboard.

Data Transfers

No personal data is transferred outside the UK or EEA without appropriate safeguards in place.

Contact Our DPO

For GDPR enquiries, contact us via the contact page.