Legal & Transparency
Privacy Policy & Cookie Policy
Last updated: 25 August 2026 · UK GDPR & Data Protection Act 2018
1. Who we are (Data Controller)
The data controller for personal data collected through this website is bestclubsinlondon.co.uk, an independent London nightlife guide and affiliate publisher operating in the United Kingdom. Privacy enquiries: privacy@bestclubsinlondon.co.uk.
2. Data we collect
- Technical data: IP address (truncated where possible), browser and device type, screen size, operating system, referring URL.
- Approximate or precise location: only if you use "Clubs Near Me" and grant your browser's location permission, or if you type a postcode/area into search. A typed postcode is sent to a geocoding service to convert it into coordinates.
- Usage metrics: pages viewed, searches and filters used, which venue pages and outbound ticket buttons you click, timestamps.
- Newsletter sign-ups: your name (optional) and email address, if you choose to subscribe.
- Account data (admin users only): email address and authentication identifiers.
We do not knowingly collect data from anyone under 18, and we do not collect special category data.
3. Lawful basis under UK GDPR
- Legitimate interests (Art. 6(1)(f)): aggregate analytics, measuring which listings are useful, site performance, security and fraud prevention. We balance this against your rights and keep the data minimal and non-intrusive.
- Consent (Art. 6(1)(a)): non-essential cookies, affiliate tracking, newsletter opt-in, and browser location access. You can withdraw consent at any time.
- Contract (Art. 6(1)(b)): providing access to admin accounts where one has been created.
- Legal obligation (Art. 6(1)(c)): retaining records where the law requires it.
4. Cookies and similar technologies
- Strictly necessary: routing, security and storing your cookie choice. These do not require consent.
- Analytics: first-party measurement of page views and outbound clicks so we can improve the directory. Set only with your consent.
- Affiliate tracking: when you click a ticket link, our partner (for example Skiddle, via our tracking tag) may set a cookie on their domain so a resulting booking is attributed to us. Set only with your consent.
You can change your choices at any time using , or by clearing cookies in your browser settings.
5. Third-party sharing and processors
We share limited data with the following categories of recipients:
- Affiliate and ticketing partners (Skiddle, Eventbrite, DesignMyNight, venue portals): when you click through, they receive your IP, device data and our tracking tag, and apply their own privacy policies to the purchase.
- Hosting, database and analytics infrastructure providers acting as processors under written terms.
- Geocoding services used to convert a postcode or area name into map coordinates.
We never sell your personal data. Where a provider processes data outside the UK, we rely on adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
6. Retention
Analytics events are retained in identifiable form for no longer than 26 months and are then aggregated or deleted. Newsletter data is kept until you unsubscribe. Admin account data is kept while the account is active.
7. Your rights
Under UK GDPR you have the right to:
- Access — obtain a copy of the personal data we hold about you;
- Rectification — have inaccurate data corrected;
- Erasure — ask us to delete your data ("right to be forgotten");
- Restriction — limit how we process your data;
- Data portability — receive your data in a structured, machine-readable format;
- Object — object to processing based on legitimate interests, and to direct marketing at any time;
- Withdraw consent — at any time, without affecting processing carried out before withdrawal.
To exercise any right, email privacy@bestclubsinlondon.co.uk. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
8. Security and changes
We use encryption in transit, access controls and row-level database security to protect your data. This policy may change; the version published here is current. See also our Terms & Conditions and Affiliate Disclosure.