legal

privacy policy

Last updated: 16 May 2025

This Privacy Policy explains how MP Investment Group Limited and its subsidiary venue companies (together, “Market Place”, “we”, “us”, or “our”) collect, use, share and protect your personal data when you interact with us online or in person.

This includes when you visit our websites, book a table, sign up to the MP Munch loyalty programme, connect to venue Wi-Fi, purchase a gift card, submit a contact form, subscribe to marketing, or place a pre-order.

Our registered office is 281–287 High Street, Hounslow, United Kingdom, TW3 1EF.
Company No: 14664042
VAT No: 442 1900 26

If you have any questions about this notice or would like to exercise your data protection rights, please contact us at: contact@marketplacelondon.com or write to the address above (FAO: Data Protection Coordinator).

1. Scope of this notice

This notice applies to all venues operating under the Market Place brand, including locations in Peckham, Vauxhall, Harrow, Liverpool, and planned openings in St Paul’s, Baker Street and Manchester.

Each venue is operated by a separate company within the MP Investment Group. Personal data collected by one group company may be shared within the group for operational, administrative, or marketing purposes as set out in this policy.

2. What personal data we collect

Depending on how you interact with us, we may collect the following types of personal data:

When you browse our websites
– IP address, browser type, device information, cookie identifiers
– Collected automatically via cookies and similar technologies

When you complete a contact form
– Name, email address, phone number (optional), and your message
– Provided directly by you

When you sign up for marketing or our newsletter
– Name, email address, town/city, and date of birth
– Collected through voluntary sign-up forms with confirmation via email

When you book a table or place a pre-order
– Name, email, phone number, booking or order details, and payment reference (last 4 digits only)
– Collected via our third-party booking or ordering partners, or directly via phone

When you join MP Munch (our loyalty programme)
– Name, email address, venue preferences, purchase history, and reward balance
– Collected during sign-up or automatically through in-venue transactions when your loyalty ID is scanned

When you connect to in-venue Wi-Fi
– Email address, device MAC address, and basic session logs
– Collected via the captive Wi-Fi portal

When you purchase or redeem a gift card
– Name, email address, delivery address (for digital cards), card value, and limited payment details
– Collected during checkout or at the till

When you apply for a job or submit a business enquiry
– Contact details, CV, cover letter, financial information or proposals (as provided)
– Collected via email or web forms

We do not knowingly collect data from children under the age of 13. Alcohol sales are restricted to individuals aged 18 and over. If you believe we may have collected data from a child, please contact us so we can delete it.

3. How and why we use your data

We process your personal data for the following purposes and legal bases:

To process bookings, pre-orders, gift card purchases, or loyalty rewards
– Legal basis: Contract (we need the data to provide these services)
To send you service communications, such as booking confirmations, reward notifications or Wi-Fi access details
– Legal basis: Legitimate interests (to deliver expected user experiences)
To send marketing emails, event updates or special offers
– Legal basis: Consent (you can withdraw this at any time)
To respond to your enquiries or complaints
– Legal basis: Legitimate interests (to manage our relationship with you)
To operate competitions or promotional campaigns
– Legal basis: Consent or Contract (depending on entry method)
To analyse usage trends and improve our websites, services and customer experience
– Legal basis: Legitimate interests (business development and optimisation)
To meet our legal obligations (e.g. accounting, tax reporting, safeguarding)
– Legal basis: Legal obligation

Where we rely on legitimate interests, we ensure that your rights and freedoms are not overridden by our business needs.

4. Sharing your data

We only share your personal data with trusted third parties when it is necessary to deliver our services, support operations, or comply with legal requirements. This includes:

Booking and loyalty platforms
– OpenTable – to manage table and event bookings
– Leat (formerly Piggy) – to handle loyalty sign-ups, rewards and in-venue transactions
– Loke – to facilitate customer pre-orders and promotions at Vauxhall
– Toast – to enable click & collect and pre-ordering at St Paul’s (with rollout planned for other venues)

Customer relationship and marketing systems
– Sprout (Me&You) – to manage your contact details, form submissions and marketing preferences. This system also supports email campaigns and customer segmentation.

Wi-Fi infrastructure provider
– When you connect to in-venue Wi-Fi, your device and contact data is collected and may be integrated with our loyalty and CRM systems for a unified customer profile.

Event and ticketing partners
– Where required to process your registration, verify your booking or issue event access credentials

Regulatory bodies and legal authorities
– Where we are required to do so by law, or in connection with fraud prevention, enforcement of our terms or protection of our venues and customers

We do not sell your personal data.

Where any third-party service providers store data outside the UK or EEA (for example, in the United States), we ensure appropriate safeguards are in place. These may include UK adequacy decisions, the EU–US Data Privacy Framework, or standard contractual clauses to protect your data to a legally acceptable standard.

5. Cookies and similar technologies

Our websites use a combination of essential, functional, analytical and marketing cookies.

Non-essential cookies are only used with your consent, which is collected through our cookie banner. You can change your preferences at any time. Full details are available in our [Cookie Policy], which can be found in the website footer.

6. How we protect your data

We use a combination of technical and organisational measures to keep your personal data secure. These include:

Encrypted connections (HTTPS) for all web traffic
Role-based access controls and secure login procedures
Staff training in data protection and security
Regular system updates and data backups
Vetting and oversight of third-party service providers

7. How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected, or to meet legal or regulatory obligations.

Typical retention periods include:

Booking and transaction records – 7 years (for accounting and audit compliance)
Loyalty accounts – while active; deleted after 24 months of inactivity
Marketing subscribers – until you unsubscribe or your email address bounces
Wi-Fi connection logs – 12 months
Contact form enquiries and complaints – 3 years after resolution
Job applications – 6 months, unless you opt in to our talent pool

If we are required to retain data for legal claims, investigations or audits, it may be kept longer and then securely deleted or anonymised.

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

Access – request a copy of the personal data we hold about you
Rectification – request corrections to inaccurate or incomplete information
Erasure – ask us to delete your data (the “right to be forgotten”)
Restriction – request a pause on processing in certain circumstances
Portability – request your data in a machine-readable format
Objection – object to processing based on legitimate interests or for direct marketing
Withdraw consent – withdraw marketing or other consents at any time

To exercise any of your rights, contact us at contact@marketplacelondon.com. We aim to respond within one calendar month.

If you are not satisfied with how we handle your data, you can also lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk.

9. Automated decision-making

We do not use your personal data to carry out any automated decision-making or profiling that has a legal or similarly significant effect on you.

10. External links

Our websites may contain links to third-party websites, services or platforms (such as booking systems, event partners or social media accounts). These services operate independently of us and may have their own privacy notices.

We are not responsible for the privacy practices of these external sites, and we encourage you to review their policies before submitting personal data.

11. Updates to this notice

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the platforms we use.

The latest version will always be published on our website. Where required, we will notify you by email of any significant updates.

If you have any questions about this notice, please contact us at: contact@marketplacelondon.com

privacy policy

Last updated: 16 May 2025

1. Scope of this notice

2. What personal data we collect

3. How and why we use your data

4. Sharing your data

5. Cookies and similar technologies

6. How we protect your data

7. How long we keep your data

8. Your rights under UK GDPR

9. Automated decision-making

10. External links

11. Updates to this notice

Cookie Policy

1. What are cookies?

2. Types of cookies we use

3. Cookies set by third parties

4. How to manage your cookie preferences

5. Updates to this policy

Stay in the loop