Who we are

Sheet Metal Music Limited, company number 01886705, trading as We-Link Studios, is the controller of the personal data described in this notice. Our registered office and trading address is 212 Ilderton Road, London SE15 1NT.

What personal data we collect

Enquiries, viewings and waitlists: name, email, phone number, preferred contact method, unit or space interests, intended use, budget, timing, availability and your message.
Applications: contact and business details, proposed activities and hours, visitors and noise considerations, and identity or address evidence where requested.
Contact and rights requests: correspondence, support history, request type and information needed to verify identity and respond.
Licensee and portal records: account details, assigned unit, emergency contact, licence dates, documents, support requests and access information.
Licence, administration and payment records: signed agreements, fees, deposits, invoices, receipts and payment history. The website does not provide online checkout.
Marketing and attribution data: marketing preferences and, when present in a link, gclid, gbraid, wbraid and UTM campaign parameters.
Technical information: cookie choices, page and event information sent through our Google tag, device/browser information, IP address and security or diagnostic logs generated when the site and portal are used.
CCTV: images of people entering or using monitored common areas.

Why we collect personal data

To answer enquiries, arrange viewings, assess applications and manage waitlists.
To prepare for, enter into and administer licence agreements, accounts, access, billing, payments, documents and support.
To communicate about requests and services, keep records, prevent misuse, secure the website and premises, and establish or defend legal claims.
To understand campaign performance and improve our website where the law requires and you have provided the relevant cookie consent.
To meet accounting, tax, safety, regulatory and other legal duties.

Legal basis for processing

Contract and steps before a contract: to handle an application or requested viewing and to administer a signed licence.
Legitimate interests: to respond to general enquiries, operate and improve our business, maintain records, protect our systems and premises, manage relationships and defend legal claims. We balance these interests against your rights.
Legal obligation: including accounting, tax, safety and regulatory requirements.
Consent: for optional cookies and direct marketing where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.

Who we share data with

Lovable provides the website platform and hosting, and Supabase provides the managed database, authentication and storage. They process data for us under appropriate contractual controls. We also use Google Ads and its Google tag to measure website visits and successful viewing enquiries under Consent Mode; see our Cookie Policy.

We may disclose information to professional advisers, insurers, regulators, courts, law enforcement and other authorities where reasonably necessary or legally required. We do not sell personal data.

External services and links

Our site links out to WhatsApp, Instagram and Google Maps. These are third-party destinations rather than embedded data-collection tools on our site. If you follow a link or contact us through one of those services, that provider will process information under its own terms and privacy notice.

International transfers

Some service providers may process data outside the UK. Where UK data-protection law requires it, we rely on an adequacy decision or approved contractual safeguards, together with supplementary measures where appropriate. You may contact us for more information about the safeguard relevant to your data.

How long we keep data

Viewing enquiries and waitlists: up to 24 months, or sooner after a valid withdrawal or deletion request where no overriding need applies.
Unsuccessful applications: 12 months.
General correspondence and support: 24 months.
Signed licences, invoices, deposits and payment records: 7 years, or longer where legally required or while a dispute or claim remains active.
Identity documents: during application or occupation and for 12 months after it ends, unless needed for a dispute, claim or legal duty.
Marketing records: until consent is withdrawn or after 24 months of inactivity. We action opt-outs promptly and may keep a minimal suppression record so we respect them.
CCTV: normally 30 days, unless footage must be preserved for an incident, insurance claim, legal matter or law-enforcement request.

CCTV

CCTV may operate in common areas for safety, security, incident investigation and the protection of people and property. Access is limited to authorised people and footage is disclosed only where justified, including to insurers or law enforcement. CCTV does not grant us access to private activities inside an occupied unit.

Data security

We use reasonable technical and organisational measures designed to protect personal data, including access controls and restricted administrative access. No system is completely secure; please contact us promptly if you suspect unauthorised access.

Your rights

Depending on the circumstances, you may ask for access to your data, correction, erasure, restriction or portability, or object to processing based on legitimate interests or direct marketing. You can withdraw consent at any time. These rights can have legal exceptions.

Use our Data Request form or email info@welinkstudios.com. We may verify your identity. You may also complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

Children and safeguarding

Website enquiries and applications are intended for adults. Licensees are responsible for safeguarding, supervision, permissions and any DBS or similar checks required for their own activities, staff, clients or visitors, including where minors are involved.

Automated decisions

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects.

Cookies

See our Cookie Policy. You can change your preferences at any time from the “Cookie Settings” link in the footer.

Changes to this policy

We may update this policy from time to time. The “Last updated” date will reflect any changes.

Privacy Policy