Privacy Policy

01 What VenueSignal does

VenueSignal helps hospitality businesses, including restaurants, bars, hotels, and hospitality groups, improve their marketing conversion tracking.

Our services include:

• Web tracking setup using Google Tag Manager, Google Analytics 4, Meta Pixel, and related tools
• Server-side tracking setup where supported by the client’s booking or reservation platform
• Paid media and channel attribution setup
• Conversion event configuration for platforms such as Google, Meta, and TikTok
• Tracking audits and implementation support

We do not run advertising campaigns for clients unless separately agreed in writing. Our main role is to help clients measure bookings and channel performance more accurately.

02 Information we collect from website visitors

When you submit a Signal Audit request or contact us through our website, we may collect the following information:

• Full name
• Venue name
• Work email address
• Booking or reservation system
• Monthly advertising spend range
• Any optional notes or message you choose to provide

We collect this information so we can understand your tracking setup, respond to your enquiry, and decide whether VenueSignal is able to help your business.

03 Information we collect from clients

If you become a client, we may ask you to provide access details or account identifiers needed to configure your tracking setup. This may include:

• Google Analytics 4 property ID
• Google Tag Manager container access
• Meta Events Manager or Pixel ID
• Google Ads conversion setup details
• TikTok Pixel or Events API details, where relevant
• Booking or reservation platform details needed for tracking configuration

We only request access or information that is reasonably needed to provide the agreed service. You are responsible for ensuring that you have the right permissions to give us access to these accounts and systems.

04 Booking and customer data

VenueSignal does not intentionally store your customers’ personal booking data in its own database.

Where server-side tracking is used, booking or conversion information may pass through a tracking setup so that conversion events can be sent to platforms such as Meta, Google, or TikTok. Where personal identifiers such as email addresses or phone numbers are used for matching purposes, they are hashed before being passed to the relevant advertising or analytics platform.

Hashing means the information is converted into a fixed encrypted format before transmission. However, hashed data may still be considered personal data under applicable data protection law where it can be linked back to an individual by another party.

• We do not sell customer data.
• We do not use client customer data for our own advertising purposes.
• We do not keep a separate VenueSignal database of client customer records.

05 How we use personal information

We use personal information to:

• Respond to enquiries
• Review Signal Audit requests
• Provide quotes and proposals
• Set up and manage client tracking implementations
• Configure analytics and advertising conversion events
• Communicate with clients about their project
• Send invoices and manage payments
• Maintain records for legal, tax, accounting, and business purposes
• Improve our website and services
• Protect our business, systems, and legal rights

06 Our lawful basis for using personal information

Under UK data protection law, we rely on the following lawful bases:

Contract

We use personal information where it is necessary to provide our services, respond to service requests, prepare quotes, manage client projects, and communicate about work we have agreed to carry out.

Legitimate interests

We may use personal information for our legitimate business interests, including responding to enquiries, improving our services, maintaining business records, protecting our systems, and managing client relationships.

Legal obligation

We may use and retain certain information where required for tax, accounting, regulatory, or legal compliance.

Consent

Where required, we rely on consent for non-essential cookies, analytics technologies, or marketing communications. You can withdraw consent at any time where consent is the lawful basis for processing.

07 Website analytics and cookies

Our website may use cookies and similar technologies to understand how visitors use the site and to measure the performance of our own marketing. We currently use Google Tag Manager connected to tools such as Google Analytics 4 and Meta Pixel.

These tools may collect information such as pages visited, time spent on the site, referring website or campaign, device and browser information, approximate location, interactions with our forms or buttons, and advertising or analytics identifiers.

Some cookies are necessary for the website to function. Others, such as analytics and advertising cookies, are used only where permitted by applicable law and, where required, with your consent. You can control cookies through your browser settings. If a cookie consent banner is shown on our website, you can use it to accept, reject, or manage non-essential cookies.

08 Who we share information with

We may share personal information with trusted service providers where necessary to operate our business and provide our services. This may include:

• Website hosting providers
• Email and communication tools
• Analytics providers
• Advertising platforms such as Google, Meta, and TikTok
• Accounting and invoicing providers
• Professional advisers such as accountants, lawyers, or compliance advisers
• Technical partners or contractors who help us deliver client work
• UAE-based partners who help us introduce or support client relationships in that market

We only share information where it is necessary and appropriate. We may also disclose information if required by law, court order, regulator, or government authority.

09 International transfers

Some of the tools and platforms we use may process information outside the United Kingdom. Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place, such as contractual protections or recognised transfer mechanisms where required by law.

10 How long we keep information

We keep personal information only for as long as reasonably necessary. Typical retention periods are:

• Enquiry and audit request information: up to 24 months after the last meaningful interaction
• Client project records: up to 7 years for accounting, tax, legal, and business record purposes
• Invoice and payment records: as required by tax and accounting laws
• Website analytics data: according to the retention settings in the relevant analytics platform
• Technical implementation records: for as long as needed to support the client relationship or resolve issues

We may delete information sooner where it is no longer needed.

11 Security

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include controlled access to client accounts, secure password practices, limited permissions, data minimisation, and use of reputable third-party platforms. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12 Your data protection rights

Depending on the circumstances, you may have the right to:

• Request access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your personal information
• Ask us to restrict how we use your information
• Object to certain uses of your information
• Request a copy of your information in a portable format
• Withdraw consent where we rely on consent
• Complain to the UK Information Commissioner’s Office

To exercise your rights, contact us at support@venuesignal.com. We may need to verify your identity before responding to your request. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk if you are unhappy with how we handle your personal information.

13 Client responsibilities

If you are a VenueSignal client, you are responsible for ensuring that:

• You have a lawful basis for collecting and using your own customers’ personal data
• Your own privacy policy explains how customer data may be used for analytics, attribution, and advertising measurement
• Your cookie consent setup complies with applicable law
• You have the right to give us access to your analytics, advertising, booking, and tag management platforms
• Your booking or reservation platform permits the tracking setup you ask us to configure

VenueSignal is not responsible for the accuracy or legal compliance of your own privacy policy, cookie banner, booking platform terms, or customer data collection practices.

14 Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website with the updated date at the top of the page. If we make significant changes, we may take reasonable steps to notify clients or website users where appropriate.

15 Contact us

If you have questions about this Privacy Policy or how we handle personal information, contact us at:

← Back to home