Privacy Policy

Last updated: 25 October 2025

Welcome to the Medley Works Ltd’s privacy notice. 

This privacy notice provides information on how Medley Works Ltd collects and processes your personal data when you visit our social media or email to sign up for an event, sign up on EventBrite or come to an event or visit the website.

It is important that you read this privacy notice together with our website privacy policy which contains more detailed information about our data processing and can be accessed here.

1. Important information and who we are

Medley Works Ltd (Company #16744576)

Directors: Sarah Lewis & Katie Reeves

Contact details

Full name of legal entity: Medley Works Ltd

Name or title of Katie Reeves (Director) and Sarah Lewis (Director)

Email address: hello@medleyripon.co.uk

Postal address: Medley Works Ltd, Appletree Hosue, Sharow Lane, Sharow, HG4 5BP 

2. The data we collect about you

We may collect, use, store, and transfer various types of personal data, including:

  • Identity Data – such as your name or title

  • Contact Data – such as email address, phone number, and postal address

  • Financial Data – such as payment details (if applicable)

  • Transaction Data – details about payments and event bookings

  • Technical Data – including IP address, browser type, and usage details

  • Profile Data – such as your preferences or feedback

  • Usage Data – how you use our website and services

  • Marketing and Communications Data – your preferences in receiving marketing from us

Purpose and Lawful Basis for Processing

We use your data for the following purposes:

  • To register you as a new customer – using Identity and Contact Data, on the basis of performing a contract with you.

  • To process and deliver orders or event bookings – using Identity, Contact, Financial, and Transaction Data, based on performance of a contract and our legitimate interests (to recover debts).

  • To manage our relationship with you – including updates to terms, privacy notices, reviews, or surveys, based on contract performance, legal obligation, and our legitimate interests in keeping records accurate.

  • To administer and protect our business and website – including troubleshooting, analytics, maintenance, and security, based on legal obligations and legitimate interests in running our business.

  • To deliver relevant content and advertisements – using Identity, Contact, Profile, Usage, and Technical Data, based on our legitimate interests in improving and marketing our services.

  • To improve our website and customer experience – using Technical and Usage Data, based on legitimate interests.

  • To make suggestions and recommendations – using Identity, Contact, Technical, Usage, and Profile Data, based on legitimate interests in growing our business.

How We Collect Data

We collect personal data in several ways:

  • Directly from you – when you contact us, register for events, or communicate with us.

  • Automatically – through cookies and similar technologies when you use our website. See our Cookie Policy for more details.

  • From third parties – including:

    • Search providers such as LinkedIn

    • Event or payment platforms such as Eventbrite

    • Public sources like Companies House or the Electoral Register

3. How We Use Your Personal Data

We only use your personal data for the purpose it was collected. This includes:

  • Registering you as a customer or event attendee

  • Processing orders or event participation

  • Managing our ongoing relationship with you

  • Conducting surveys, prize draws, or competitions

  • Improving our website, services, and customer experience

  • Making recommendations about services or events that may interest you

4. How We Share Your Personal Data

We may share your data with:

  • Our employees, agents, and professional advisors, where necessary to deliver services or respond to your enquiry
    All sharing is done in accordance with this Privacy Policy and relevant data protection laws.

5. Your Legal Rights

Under UK data protection laws, you have rights regarding your personal data, including:

  • Access: You can request copies of the information we hold about you.

  • Correction: You can ask us to update or correct inaccurate data.

  • Erasure: You can request that we delete your personal data.

  • Restriction: You can ask us to limit how we use your data.

  • Portability: You can request a copy of your data in a structured, machine-readable format.

  • Objection: You can object to us processing your data where we rely on legitimate interests.

To exercise these rights or withdraw consent, please email hello@medleyripon.co.uk.

If you are not satisfied with how we handle your data, you may complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Please keep us informed if your personal data changes so that our records remain accurate.

6. Further Details

For additional details about data security, retention, and lawful processing, please see our full Website Privacy Policy.