Skip to content
Waterside

Legal

Privacy Policy

Last updated: 24 March 2025

Who we are

Waterside Co-Working is operated by 4tel Communications Limited, a company registered in England and Wales. Our registered address is Waterside Court, Falmouth Road, Penryn, Cornwall, TR10 8AW.

We are the data controller for any personal data you provide to us through this website. If you have any questions about how we handle your data, please contact us at hello@watersidecoworking.co.uk or call 01326 653279.

What data we collect and why

We collect personal data in the following ways:

  • Contact form submissions — name, email address, phone number, and your message. We use this solely to respond to your enquiry.
  • Booking requests — details you provide when booking a desk, conference room, or office through our booking system (operated by Nimbuspop). Their own privacy policy governs that data.
  • Analytics — we use Google Analytics 4 and Zoho PageSense to understand how visitors use our site (pages viewed, time on site, general location). This data is anonymised and aggregated; we do not identify you personally through analytics.
  • Cookies — we use cookies to measure site performance (see our Cookie Policy below).

Legal basis for processing

Under UK GDPR and EU GDPR, we rely on the following lawful bases:

  • Legitimate interests — to respond to enquiries and improve our website.
  • Consent — for analytics cookies, collected via our cookie consent banner. You can withdraw consent at any time by clearing your browser cookies or clicking "Decline" if the banner reappears.
  • Contract performance — to fulfil a booking or service agreement you have entered into with us.

How long we keep your data

Contact form enquiry data is kept for no longer than 12 months after your enquiry is resolved, unless a longer retention period is required by law or necessary for an ongoing business relationship.

Analytics data is retained in aggregated, anonymised form in accordance with Google Analytics and Zoho PageSense default retention periods (26 months for Google Analytics).

Who we share your data with

We do not sell your personal data. We share data only with:

  • Google LLC — analytics via Google Analytics 4. Data may be processed in the US under Standard Contractual Clauses. See Google's privacy policy.
  • Zoho Corporation — analytics via Zoho PageSense. Data is processed on EU-based servers (zoho.eu). See Zoho's privacy policy.
  • Nimbuspop — our booking platform. See their privacy policy for details of how they handle booking data.

We do not transfer your personal data outside the UK or EEA except where covered by appropriate safeguards (such as Standard Contractual Clauses) as noted above.

Cookie policy

We use the following categories of cookie:

  • Essential cookies — required for the site to function (e.g. session state). No consent is required.
  • Analytics cookies — set by Google Analytics and Zoho PageSense to measure usage. Only placed if you click "Accept" on our cookie banner. You can decline without affecting your ability to use the site.

To opt out of Google Analytics specifically, you can install the Google Analytics Opt-out Browser Add-on.

Your rights

Under UK GDPR (and EU GDPR where applicable) you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your personal data ("right to be forgotten").
  • Restriction — ask us to restrict how we use your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests.
  • Withdraw consent — at any time where processing is based on consent.

To exercise any of these rights, email hello@watersidecoworking.co.uk. We will respond within 30 days.

If you are unhappy with how we handle your data you have the right to lodge a complaint with the Information Commissioner's Office (ICO) (UK supervisory authority) or your local EU data protection authority.

Security

We take reasonable technical and organisational measures to protect your personal data, including HTTPS encryption, Content Security Policy headers, and access controls on our systems. No method of transmission over the internet is 100% secure, but we strive to use commercially acceptable means to protect your data.

Data breach notification

If we discover a personal data breach affecting your information, we will notify you and the Information Commissioner's Office (ICO) within 72 hours, as required by UK GDPR. You will receive notification containing the nature of the breach, the data affected, the likely consequences, and the measures we have taken to address it.

Data processing agreements

We have Data Processing Agreements (DPA) in place with all third-party processors handling your personal data, in accordance with UK GDPR Article 28. These include Google LLC (Analytics), Zoho Corporation (PageSense), and Nimbuspop (booking platform). These agreements ensure processors comply with UK GDPR.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.