Legal & Compliance
Privacy Policy
Black Velvet Events is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you interact with our website and services.
Introduction
This privacy policy applies to all visitors, clients, and event attendees who interact with the Black Velvet Events website, make an enquiry, or attend one of our private galas, corporate celebrations, or immersive nocturnal casino experiences. We act as the data controller for personal data collected through our website and event bookings.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are transparent about what we collect, why we collect it, and how you can exercise your rights. If anything in this policy is unclear, please contact us using the details in the Data Controller section below.
- We act as the data controller for personal data collected through our website and event bookings.
- This policy applies to all visitors, clients, and event attendees.
- We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
Black Velvet Events is the data controller responsible for your personal data. You can contact us regarding any privacy matter, including requests to access, correct, or delete your information, using the details opposite.
Contact Details
- Company name
- Black Velvet Events
- Address
- 1 Mayfair Place, London W1J 8AJ, United Kingdom
- [email protected]
- Phone
- +44 7539 184 720
Information We Collect
We collect the following categories of personal data when you use our website or services:
- Identity data: name, title, and date of birth for age verification. Our events operate a strict 21+ VIP house policy.
- Contact data: email address, phone number, and postal address so we can respond to enquiries and manage bookings.
- Transaction data: details of event bookings and payments. Payment details are processed by third-party providers and are not stored by us.
- Technical data: IP address, browser type, device information, and other technical identifiers collected automatically.
- Usage data: pages visited, time spent on site, referral source, and interaction patterns.
- Marketing data: your preferences for receiving communications about private events, new experiences, and special invitations.
How We Use Your Information
We use your personal data for the following purposes, relying on the legal bases indicated:
Provide and manage event bookings
We process identity, contact, and transaction data to arrange your private gala, corporate celebration, or casino experience. This processing is necessary for the performance of a contract.
Communicate about enquiries and bookings
We use your contact details to respond to enquiries, confirm arrangements, and provide practical event information. This processing is based on our legitimate interests in delivering a professional service.
Send marketing communications
Where you have given consent, we send invitations, event news, and tailored offers. You can withdraw consent at any time using the unsubscribe link in any email or by contacting us directly.
Comply with legal obligations
We process identity data for age verification and maintain records where required by law, including tax and accounting obligations. This processing is necessary for compliance with a legal obligation.
Improve our website and services
We analyse technical and usage data to understand how visitors interact with our site, identify areas for improvement, and enhance the overall experience. This processing is based on our legitimate interests.
We do not use personal data for automated decision-making or profiling. You can withdraw consent for marketing at any time.
Data Sharing and Disclosure
We may share your personal data with the following categories of recipients:
- Service providers: payment processors, email marketing platforms, and hosting providers who support our operations.
- Professional advisers: lawyers, accountants, and insurers who provide professional services to Black Velvet Events.
- Regulatory authorities: where disclosure is required by law or in response to a valid legal request.
- Event partners: venues and suppliers involved in your event, where you have given consent for us to share your details.
We do not sell your personal data to third parties. All third parties are contractually obligated to protect your data and to process it only in accordance with our instructions.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.
| Data category | Retention period |
|---|---|
| Booking and transaction data | 6 years after the event, for tax and legal purposes |
| Marketing data | Until consent is withdrawn |
| Enquiry data | 12 months after the enquiry is resolved |
| Technical data | 26 months for analytics |
Retention periods are based on legal requirements and business needs. Data is securely deleted or anonymised after the retention period.
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right to access: request a copy of your personal data.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: request deletion of your data, subject to legal obligations.
- Right to restrict processing: limit how we use your data.
- Right to data portability: receive your data in a machine-readable format.
- Right to object: object to processing based on legitimate interests.
- Right to withdraw consent: withdraw consent at any time.
To exercise any right, contact us at [email protected]. We respond to requests within one month.
Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
- Encryption of data in transit and at rest.
- Access controls and authentication mechanisms.
- Regular security assessments and staff training.
- Secure hosting with reputable providers.
We do not store payment card details on our servers. In the event of a data breach, we will notify affected individuals and the ICO as required.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date.
This policy was last updated on 9 September 2026.
We encourage you to review this policy periodically.