Privacy policy

BLOQS PRIVACY POLICY

Version 1.0
Effective Date: 15-01-2025
Issued by: Building Bloqs at Meridian Works Ltd

 

1. Introduction

This Privacy Policy explains how BLOQS ("we", "us", "our") collects, uses, stores, and protects personal data when you use our services, visit our premises, or interact with our physical and digital systems.

BLOQS operates shared production facilities and supporting digital platforms that rely on trust, safety, and responsible data handling. We collect and process personal data only where it is necessary, proportionate, and relevant to the safe operation of our facilities, the fair management of access and bookings, and the fulfilment of our legal and contractual obligations.

We are committed to safeguarding your privacy and handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

2. Who We Are

Data Controller
Building Bloqs at Meridian Works Ltd
Company No. 10289009
Registered Office: 2 Anthony Way, London, N18 3QT
Email: info@bloqslondon.com

 

3. What Personal Data We Collect

We may collect and process the following categories of personal data, depending on how you interact with BLOQS:

Categories of Data

Identity Data
Name, date of birth, photo identification (where required for security, insurance, or compliance purposes)

Contact Data
Email address, phone number, billing address, emergency contact or next-of-kin details (used only in the event of an incident affecting health or safety)

Account Data
Login credentials, user preferences, training records, machine access permissions, skill sign-offs

Booking & Subscription Data
Facility usage, booking history, subscriptions, workspace or storage allocations

Payment Data
Payment method and transaction records (processed securely by third-party providers; BLOQS does not store full card details)

Safety & Compliance Data
Induction attendance, safety tests, insurance documentation, incident reports

CCTV & Access Control Data
CCTV footage, door entry logs, and access timestamps collected for security, safety, and incident investigation

Communications
Emails, messages, support requests, feedback, or correspondence with BLOQS staff

We do not knowingly collect excessive or irrelevant personal data. Where optional data is requested, this will be made clear at the point of collection.

 

4. How We Use Your Data

We use personal data for the following purposes:

  • Creating and managing BLOQS user accounts
  • Processing bookings, subscriptions, and payments
  • Managing access to buildings, equipment, and workspaces
  • Recording training, inductions, and safety compliance
  • Ensuring the safe operation of shared facilities
  • Preventing misuse, investigating incidents, accidents, or breaches of policy
  • Enforcing our Terms & Conditions, Code of Conduct, and related policies
  • Communicating essential operational, safety, or service updates
  • Meeting legal, regulatory, insurance, and financial obligations

We do not currently use personal data for profiling, behavioural scoring, or fully automated decision-making that produces legal or similarly significant effects.

 

5. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Contractual necessity — where processing is required to provide services you request (such as bookings, subscriptions, or access)
  • Legitimate interests — for safety management, access control, training compliance, operational administration, service improvement, and protection of people and property
  • Legal obligation — where required to comply with health & safety, financial, or regulatory duties
  • Consent — where required, such as for marketing communications

Where processing is based on legitimate interests, BLOQS has carried out internal Legitimate Interests Assessments (LIAs) to ensure that our interests do not override your rights and freedoms. You have the right to object to processing carried out on this basis.

You may withdraw consent at any time where consent is the lawful basis.

 

6. Data Storage & Security

Personal data is stored securely using encrypted systems or trusted cloud-based platforms with appropriate access controls.

Security measures include:

  • Restricted access to authorised staff only
  • Staff training on data protection and confidentiality
  • Use of PCI-DSS-compliant third-party payment processors
  • Secure storage and limited retention of CCTV footage (typically 30 days unless required for investigation)

While we take appropriate technical and organisational measures to protect personal data, no system can be guaranteed to be completely secure.

 

7. Data Sharing

We may share personal data with trusted third parties where necessary to operate our services, including:

  • Payment processors
  • Insurance or verification providers
  • Training, certification, or compliance platforms
  • Legal, regulatory, or enforcement authorities where required by law

All third parties are required to process personal data only on our instructions and to apply appropriate security measures.

We do not sell or rent personal data.

 

8. Data Retention

Personal data is retained only for as long as necessary for its purpose, unless a longer period is required by law or an active investigation.

Data Type

Retention Period

Booking & Payment Records

6 years

Account & Identity Data

While active, plus 1 year after closure

Safety & Training Records

Up to 5 years

CCTV & Access Logs

Typically 30 days unless required for investigation

 

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of data (where applicable)
  • Object to certain processing activities
  • Request restriction of processing
  • Withdraw consent where consent is relied upon
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

We aim to respond to valid requests within one month.

Requests should be sent to:
info@bloqslondon.com

 

10. Cookies & Website Usage

The BLOQS website uses cookies to ensure functionality and improve user experience. Where required, cookies are managed through a consent mechanism.

You may also control cookies through your browser settings.

 

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available via the BLOQS website or on request.

Where changes materially affect how personal data is processed, users will be notified via email or platform notification where reasonably practicable.

 

12. Contact & Data Protection Enquiries

Data Protection Contact
This contact is responsible for handling data protection enquiries. BLOQS is not currently required to appoint a statutory Data Protection Officer.

Email: info@bloqslondon.com
Phone: 020 8803 3987
Post: BLOQS, 2 Anthony Way, London, N18 3QT