Privacy Policy
Last updated: 11 November 2026
This policy explains how Hook by FOUNDRY ('we', 'us') collects and uses personal data when you visit hookbyfoundry.com, enquire about our offices or come to view a space. It also explains your rights and how to use them. It follows UK law: the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, each as amended by the Data (Use and Access) Act 2025.
Who we are
Hook by FOUNDRY is a trading name of FOUNDRY TOP CO LLP, a limited liability partnership registered in England and Wales (number OC441710). Our registered office is 78 The Beacon, Eastbourne, East Sussex, BN21 3NW. We are the data controller for the personal data described in this policy, and we are registered with the Information Commissioner's Office under number ZC104644.
The data we collect
When you request a tour or make an enquiry
Your name, email address, phone number, company name and role, where your office is currently based, the size of space you need, and anything else you tell us about your business and what you are looking for.
When we stay in touch
Emails, messages and notes of calls between us, notes from tours and meetings, and the details we need to prepare a proposal or agreement if you decide to take space.
When you visit one of our buildings
Your name and the time of your visit if you sign in as a visitor. Where a building uses CCTV for security, signs will tell you.
When you use our website
Information about your device and how you use the site, such as your IP address, browser type, the pages you view and how you found us. We collect this through cookies, and we only use cookies that are not strictly necessary if you agree. Our Cookie Policy explains this in full.
From other sources
We may look up publicly available business information, such as Companies House records and your company website, when we prepare for a tour or proposal.
We do not need sensitive information, such as details about your health, so please do not include it in your enquiry.
How we use your data and our lawful basis
UK law says we must have a lawful basis for each way we use personal data. Here is what we do and why.
To reply to your enquiry, arrange tours and send you details of spaces. We do this because you have asked us to, as a step before entering into a contract, and because we have a legitimate interest in responding to business enquiries.
To prepare proposals and agree terms if you decide to take space. We need to do this to enter into and carry out a contract with you or your business.
To send you occasional updates about Hook by FOUNDRY spaces that match what you asked about. We rely on our legitimate interests. Where the law requires your consent, for example if you are a sole trader, we only email you if you have agreed. Every email has an unsubscribe link.
To run, secure and improve our website and measure our advertising. We rely on your consent for analytics and advertising cookies, and on our legitimate interests for keeping the site secure and working.
To keep our buildings, team and visitors safe. We rely on our legitimate interests.
To meet our legal duties, keep business records and deal with legal claims. We rely on legal obligation and our legitimate interests.
Where we rely on legitimate interests, we have weighed them against your rights and interests. You can ask us for more detail.
We do not sell your personal data. We do not make decisions about you based solely on automated processing.
Who we share your data with
We only share your data when we need to. The companies that provide services to us can only use it to carry out our instructions.
Squarespace, which hosts our website and enquiry forms.
Providers of our email, customer relationship management and other business systems.
Google, Meta and LinkedIn, for analytics and advertising, only where you have accepted the relevant cookies.
Our wider FOUNDRY team, which is part of the same business, if another of our locations may suit you better.
Professional advisers, such as lawyers, accountants and insurers.
The police, regulators, courts or other authorities, where the law requires it.
A buyer of, or investor in, all or part of our business, under strict confidentiality.
International transfers
Some of our service providers store or access data outside the UK, including in the United States. Where they do, we make sure your data is protected by safeguards recognised under UK law, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the ICO's International Data Transfer Agreement or Addendum.
How long we keep your data
Enquiries that do not lead to an agreement: up to 2 years after we were last in touch. We then delete or anonymise them.
Clients: for as long as the agreement lasts and 6 years after it ends, to meet legal, tax and accounting requirements.
Marketing opt-outs: we keep your email address on a suppression list so we do not contact you again.
Visitor records and CCTV: for a short period, unless we need them to look into an incident.
Cookies: for the periods set out in our Cookie Policy.
How we protect your data
We use appropriate technical and organisational measures to protect your data, including access controls, encryption and limiting access to the people who need it. We choose service providers who protect data to the same standard. No system is completely secure, but if a breach puts your data at risk, we will tell you and the ICO where the law requires it.
Your rights
Under UK data protection law, you have the right to:
ask for a copy of the personal data we hold about you
have inaccurate or incomplete data corrected
have your data deleted
ask us to limit how we use your data
object to us using your data based on our legitimate interests
object to direct marketing at any time, which we will always respect
receive your data in a portable format, where this applies
withdraw your consent at any time, where we rely on it
Some rights only apply in certain situations. To use any of them, contact us using the details below. It is usually free. We may ask you to confirm your identity, and we will reply within one month. If your request is complex, we may need up to two more months, and we will tell you if so.
Children
Our website and services are for businesses. They are not aimed at anyone under 18, and we do not knowingly collect data about children.
Other websites
Our website links to other sites, such as maps and social media. Those sites have their own privacy policies, and we are not responsible for how they use your data.
Changes to this policy
We will update this page if we change how we use personal data. The date at the top shows when we last changed it.
Contact us
If you have questions about this policy or want to use your rights, email us at hello@foundryuk.com, get in touch through our enquiry form, or write to us at our registered office above.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. We will acknowledge your complaint within 30 days and respond without undue delay. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.