CIRCE'S PRIVACY POLICY

Privacy Policy

Last updated: September 2026

Circe’s Rooftop is a trading name of Polestar Waterloo Ltd, Mercury House, 107–111 Waterloo Road, London, SE1 8UL. Polestar Waterloo Ltd is registered in England and Wales under company number 15554392.

Polestar Waterloo Ltd is the data controller responsible for your personal information. If you have any questions about this Privacy Policy or how we use your data, please contact us at info@circesrooftop.co.uk.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, make an enquiry or booking, join Rooftop Rewards, attend an event, interact with us on social media, or receive communications from us.

The information we collect

Depending on how you interact with Circe’s Rooftop, we may collect:

Your name, email address, telephone number and postal address.
Booking and event information, including booking date, party size, preferences and any information you choose to provide in relation to your visit.
Payment information. Payments are processed securely by our payment providers; we do not store full card details.
Marketing preferences and records of communications with us.
Website and technical information, such as IP address, browser type, device information and how you use our website.
Rooftop Rewards information, including your wallet pass or membership ID, points balance, rewards earned or redeemed, visit and transaction activity, and date of birth where you choose to provide it for birthday rewards.

Please do not send us special category personal data, such as health information, unless it is necessary for a specific request. Where this is needed, we will only use it to help deliver your booking or visit safely.

Rooftop Rewards and COMO

Rooftop Rewards is Circe’s loyalty programme and is powered by COMO. When you register for Rooftop Rewards or use your wallet pass, we and COMO process relevant personal and loyalty information to administer your membership, provide rewards, calculate points, verify eligibility, personalise your experience and communicate programme-related updates.

COMO acts as a service provider on our behalf and is required to handle your information securely and only in accordance with our instructions and applicable data protection law.

How we use your information

We use your personal data where we have a lawful basis to do so, including to:

Process and manage bookings, orders, enquiries, events and payments.
Operate Rooftop Rewards, including issuing wallet passes, awarding points, administering rewards and responding to loyalty queries.
Communicate important service information, such as booking confirmations, changes or safety updates.
Send marketing communications where you have consented, or where we are permitted to do so under applicable law.
Improve our website, customer experience, food and drink offering, events and marketing activity.
Prevent fraud, protect our business and comply with our legal obligations.

You can opt out of marketing at any time by using the unsubscribe link in our emails, updating your preferences where available, or emailing info@circesrooftop.co.uk. Opting out of marketing will not stop essential service messages about an existing booking or Rooftop Rewards account.

Who we share your information with

We only share personal data where necessary and with appropriate safeguards in place. This may include trusted service providers who help us run our business, including:

COMO, which powers Rooftop Rewards and wallet passes.
Our website, hosting and IT providers.
Our booking and reservations provider.
Our email and customer relationship management provider.
Payment providers, including Stripe where used.
Professional advisers, insurers, regulators, law-enforcement agencies or other parties where required by law.

We do not sell your personal data.

International transfers

Some of our suppliers may process personal data outside the UK or European Economic Area. Where this happens, we ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.

Cookies and website analytics

Our website uses cookies and similar technologies. Some cookies are essential for the website to function; others help us understand how visitors use the site, remember preferences, or measure and improve advertising.

When you first visit our website, you can manage your preferences through our cookie banner. You can also change your browser settings to control or delete cookies. For a fuller breakdown of cookies used on the website, please see our Cookie Policy.

Non-essential cookies require clear information and appropriate consent under PECR. ICO guidance on cookies explains this in more detail.

Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including to manage bookings and Rooftop Rewards, meet legal, accounting and tax requirements, resolve disputes and enforce our agreements.

The retention period will vary depending on the type of data and our legal obligations. When personal data is no longer required, we will securely delete or anonymise it.

Keeping your information secure

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to people and suppliers who need the information to carry out their work.

No system is completely secure, but we take data security seriously and will act promptly if we identify a breach that may affect your rights and freedoms.

Your rights

You have rights in relation to your personal data, including the right to:

Ask for access to the information we hold about you.
Ask us to correct inaccurate or incomplete information.
Ask us to delete your information in certain circumstances.
Object to, or ask us to restrict, certain processing.
Withdraw consent at any time where we rely on consent.
Ask for your data to be transferred to another organisation where applicable.
Complain to the Information Commissioner’s Office.

To exercise any of these rights, contact info@circesrooftop.co.uk. You can also contact us by post at Polestar Waterloo Ltd, Mercury House, 107–111 Waterloo Road, London, SE1 8UL.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office.