Last updated: 11th October 2026
At The 19th, we respect your privacy and are committed to handling your personal information responsibly and securely.
The 19th is a trading style of BP Leisure Limited, which is the data controller responsible for the personal information covered by this policy.
BP Leisure Limited is registered with the Information Commissioner's Office (ICO).
Registration reference: ZC211699.
1. Information We Collect
Depending on how you interact with The 19th, we may collect information including:
• your name and contact details;
• information provided when you contact us by email, telephone or through our website;
• booking and membership information;
• payment and transaction information;
• information relating to your use of the venue, bookings or membership;
• communications between you and The 19th; and
• CCTV images when you visit the venue.
Bookings, memberships and payments may be administered using third-party systems. Those providers may process personal information on our behalf and/or in accordance with their own privacy information, depending on the service provided.
2. How We Use Your Information
We may use personal information to:
• manage bookings and memberships;
• provide access to The 19th and its facilities;
• process and administer payments;
• respond to enquiries and provide customer support;
• communicate important information about bookings, memberships or the venue;
• manage the safety, security and proper operation of The 19th;
• investigate incidents, complaints, damage, misuse or breaches of our Terms and House Rules;
• maintain appropriate business and financial records; and
• comply with legal obligations and establish, exercise or defend legal claims where necessary.
We will only use personal information where we have an appropriate lawful basis, including where processing is necessary to perform a contract with you, comply with a legal obligation or pursue our legitimate business interests where those interests are not overridden by your rights.
Where we rely on consent, for example for certain types of direct marketing, you may withdraw that consent at any time.
3. CCTV at The 19th
The 19th is a largely unmanned venue and CCTV operates within the premises.
We currently use security cameras covering areas including the entrance, simulator room and social lounge.
CCTV is used for legitimate safety, security and operational purposes, including:
• protecting customers, members and visitors;
• maintaining the security of a largely unmanned venue;
• protecting the premises and equipment;
• preventing and detecting crime;
• investigating accidents, incidents, damage or misuse;
• investigating serious or repeated breaches of our Terms or House Rules; and
• establishing, exercising or defending legal claims where appropriate.
Depending on the camera and system settings, footage may be recorded when activity or motion is detected and may also be capable of continuous recording.
Authorised persons may access a live camera view remotely where reasonably required for safety, security or operational purposes. The cameras are not routinely watched continuously by a person.
We do not use CCTV for facial recognition or automated decision-making.
Appropriate CCTV signage is displayed at the venue to make visitors aware that recording is taking place.
4. CCTV Storage, Access & Sharing
CCTV recordings are stored using Ring's cloud-based service.
CCTV footage is normally retained for up to 30 days, after which it is automatically deleted in accordance with the system settings.
Where footage relates to a specific incident, accident, complaint, suspected crime, damage, insurance matter or legal dispute, relevant footage may be downloaded and retained securely for longer where reasonably necessary for that purpose.
Access to CCTV footage is restricted to authorised persons and should only take place where there is a legitimate reason to view it.
Where appropriate and lawful, footage may be shared with third parties such as:
• the police or other law-enforcement authorities;
• insurers;
• legal or professional advisers;
• building management or security personnel where relevant to an incident; or
• other parties where disclosure is required or permitted by law.
CCTV footage will not be routinely shared or used for unrelated purposes.
5. How Long We Keep Other Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including any legal, accounting, contractual or dispute-resolution requirements.
General enquiries will normally be retained only for as long as necessary to deal with the enquiry and any related administration.
Booking, membership and transaction records may need to be retained for longer where required for legitimate business, accounting or legal purposes.
We periodically review our retention arrangements to ensure information is not kept for longer than necessary.
6. Keeping Your Information Secure
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
Access to personal information, including CCTV footage, is restricted to those who reasonably require it.
Where we use third-party service providers to process personal information on our behalf, we take reasonable steps to use providers capable of handling that information appropriately and securely.
7. Marketing
We do not use general enquiries for unrelated marketing unless you have separately agreed to receive marketing communications or another lawful basis permits us to contact you.
Where you have subscribed to marketing, you can unsubscribe at any time using the method provided in the communication or by contacting us.
8. Your Data Protection Rights
Depending on the circumstances, you may have rights in relation to your personal information, including the right to:
• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase personal information in certain circumstances;
• ask us to restrict how information is used;
• object to certain uses of your information; and
• withdraw consent where processing is based on consent.
These rights are subject to applicable data-protection law and are not absolute in every circumstance.
You may also request access to CCTV footage containing your personal information. We may need information from you to identify the relevant footage, such as the date, approximate time and location of your visit, and may need to take steps to protect the privacy of other individuals shown in the footage.
9. Complaints
If you have a question or concern about how we use your personal information, please contact us first and we will try to resolve it.
You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's data-protection regulator.
10. Contact Us
For privacy enquiries or requests relating to your personal information, please contact:
The 19th / BP Leisure Limited
Email: info@the19th.wales
Company number:17142853
ICO registration reference:ZC211699
Registered office:71 Burdons Close, Wenvoe, Cardiff, CF5 6FE
Venue:The 19th, The Maltings, East Tyndall Street, Cardiff, CF24 5EA
We may update this policy from time to time to reflect changes in how The 19th operates or how we process personal information.
