Jin Bo Law Privacy Notice

Last updated: 16 September 2026

1. Who we are

Jin Bo Law is operated by JIN BO LAW UK LIMITED, which is the data controller for the personal information described in this notice.

Privacy enquiries: reservations@jinbolaw.co.uk

2. What this notice covers

This notice explains how we collect and use personal information when you:

visit our website or contact us;
make a reservation, buy a voucher or ticket, or enquire about an event or private hire;
attend Jin Bo Law or take part in an activity at the venue;
complete a consent, acknowledgement, incident or feedback form;
appear in photographs or video where consent or another lawful basis applies;
interact with our advertising, social media or marketing; or
otherwise deal with Jin Bo Law as a guest, prospective guest, supplier or business contact.

3. Information we collect

Depending on your interaction with us, we may collect:

identity and contact details, including your name, email address, telephone number, company, job title and signature;
reservation and event details, including dates, times, guest numbers, event type, budget, food and drink requirements, special requests and correspondence;
transaction information, including deposits, purchases, refunds and payment status. Card details are normally processed directly by our payment provider and are not retained by us in full;
attendance and safety information, including age confirmation, participation acknowledgements, emergency information, incident reports and related correspondence;
limited health information, but only where necessary to assess participation in an activity, respond to an emergency, record an incident or manage a legal claim. We do not ask guests to provide unnecessary medical detail;
images and recordings, including photographs or video taken at the venue or submitted with your permission;
CCTV images, where CCTV is operated by or on behalf of Jin Bo Law;
marketing information, including your preferences, consent records, engagement and unsubscribe requests; and
website and device information, including IP address, browser, device, pages visited, cookie identifiers and cookie choices.

Please do not provide personal information about another person unless you are authorised to do so.

4. How we collect information

We collect information:

directly from you by email, telephone, in person or through our website and online forms;
through reservation, ticketing, voucher, payment and event platforms;
through consent and acknowledgement forms, including forms provided through Jotform;
from social media and advertising platforms when you submit an enquiry or interact with us;
from an organiser or other person making a booking on your behalf;
automatically when you use our website, subject to applicable cookie requirements; and
from staff, contractors, performers, security personnel or witnesses where an incident or operational matter must be recorded.

5. How and why we use information

We use personal information only where we have a lawful basis.

Purpose	Typical information	Lawful basis
Responding to enquiries, providing quotations and arranging viewings	Contact, event and correspondence details	Steps at your request before a contract; legitimate interests in responding to genuine enquiries
Managing reservations, tickets, vouchers, events, deposits and payments	Contact, booking and transaction details	Contract; legitimate interests in administering bookings and customer relationships; legal obligations
Operating the venue and providing requested services	Booking, attendance, preference and correspondence details	Contract; legitimate interests in delivering safe and effective hospitality services
Managing activities, consent and safety	Identity, age confirmation, signature, participation and limited health information	Consent or explicit consent where required; legitimate interests in safety and record keeping; vital interests in an emergency; establishment, exercise or defence of legal claims where applicable
Handling incidents, complaints and legal matters	Contact, incident, CCTV, correspondence and relevant health information	Legitimate interests; legal obligations; vital interests; establishment, exercise or defence of legal claims
Venue security, fraud prevention and protection of people and property	CCTV, attendance, transaction and incident information	Legitimate interests in security, safety and fraud prevention; legal obligations
Photography and video	Images, recordings and consent records	Consent where requested; legitimate interests for general venue coverage where appropriate and reasonably expected
Sending marketing	Contact details, preferences and engagement	Consent where required; legitimate interests where permitted by law
Running, securing and improving our website	Device, usage, cookie and enquiry-form data	Legitimate interests for security and essential operation; consent for non-essential cookies where required
Accounting, tax, compliance and business administration	Booking, transaction and correspondence records	Legal obligations; legitimate interests in administering and protecting our business

Where we rely on legitimate interests, we consider whether our interests are necessary and balanced against your rights and expectations.

6. Information you must provide

Some information is required to respond to an enquiry, enter into or perform a booking, verify eligibility for an activity, take payment, or meet legal and safety requirements. If you do not provide required information, we may be unable to accept a booking, allow participation or provide the requested service.

7. Special category information

Health information is subject to additional protection. Where we need to process it, we will use an applicable condition under data protection law, such as your explicit consent, vital interests in an emergency, or the establishment, exercise or defence of legal claims. We aim to record only what is necessary.

8. Marketing

We may send information about events, private hire, seasonal packages, offers and venue news.

We obtain consent where required for electronic marketing to individuals. Where the law permits marketing to existing customers or corporate contacts without prior consent, we may rely on the relevant legal rules and our legitimate interests.

You can unsubscribe at any time using the link in a marketing message or by emailing reservations@jinbolaw.co.uk. Opting out of marketing does not stop service messages about an existing enquiry, reservation, event or transaction.

9. Who we share information with

Where necessary for the purposes described above, we may share information with:

website, hosting, email and IT providers;
reservation, ticketing and voucher platforms, including DesignMyNight;
form providers, including Jotform;
point-of-sale, payment processing and financial service providers, including Square;
analytics, security and anti-spam providers, including Google Analytics and Google reCAPTCHA;
marketing, customer relationship and communications providers;
social media and advertising platforms where you interact with our campaigns;
Leonardo Hotel London Aldgate and its service providers, where necessary for venue access, security, incident response, emergency assistance or delivery of a booking or event;
performers, photographers, event suppliers and contractors where necessary to deliver a service or activity;
insurers, accountants, lawyers and other professional advisers;
police, regulators, courts and other authorities where required or permitted by law; and
a buyer, investor or successor if our business or assets are sold, reorganised or transferred.

Service providers acting on our behalf may use information only for the contracted service and must protect it appropriately. We do not sell personal information for third-party marketing.

Third-party platforms may also act as independent controllers under their own privacy notices. You should read the privacy information provided by any platform you use.

10. International transfers

Some service providers may process information outside the United Kingdom. Where UK data protection law requires safeguards, we use an approved transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with additional safeguards where appropriate.

11. How long we keep information

We keep information only for as long as reasonably necessary for the relevant purpose, including legal, tax, accounting, safety and claims requirements. Our usual periods are:

unconfirmed enquiries and quotations: up to 12 months after the last meaningful contact;
confirmed booking, event, payment and accounting records: up to six years after the end of the relevant financial year;
activity consent and participation records: up to six years after the activity, or longer where reasonably required for an incident or claim;
incident, complaint, insurance and legal-claim records: for the applicable limitation period and while a matter remains active;
CCTV: normally up to 31 days, unless footage is required for an incident, investigation or legal claim;
marketing records: while you remain subscribed and engaged, with periodic review; and
suppression records: for as long as needed to ensure we respect an unsubscribe or objection.

Cookie and analytics information is retained according to the relevant cookie setting and provider configuration. We may retain anonymised information that no longer identifies you.

12. Cookies and similar technologies

Our website uses technologies required for operation and security and may use analytics, embedded booking, voucher, video and social-media services. These services may set or access cookies or similar identifiers.

Where consent is required, non-essential technologies should be used only after you have made a choice through the website's cookie controls. You can also control cookies through your browser. Disabling some technologies may affect website functions.

13. Security

We use appropriate technical and organisational measures designed to protect personal information from unauthorised access, alteration, disclosure, loss or destruction. Access is limited to people who need the information for legitimate business purposes.

No system is completely secure. Please avoid sending unnecessary sensitive information by ordinary email.

14. Your rights

Depending on the circumstances, you may have the right to:

Your right to object: You may object to processing based on legitimate interests. You have an absolute right to object at any time to the use of your personal information for direct marketing.

request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of information;
request restriction of processing;
object to processing based on legitimate interests;
object at any time to direct marketing;
receive certain information in a portable format;
withdraw consent at any time where processing relies on consent, without affecting the lawfulness of processing carried out before withdrawal; and
complain to the Information Commissioner's Office.

These rights are not absolute and legal exceptions may apply. To exercise a right, email reservations@jinbolaw.co.uk. We may ask for information needed to verify your identity.

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects on you.

15. Children

Jin Bo Law is an 18+ venue. We do not knowingly collect personal information from children through our guest services or marketing. Contact us if you believe a child has provided information to us.

16. Complaints

To raise a concern, contact reservations@jinbolaw.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/

17. Changes to this notice

We may update this notice when our services, systems or legal obligations change. The current version will be published on our website with its latest revision date.

JIN BO LAW UK LIMITED is registered in England and Wales under company number 11252678. Registered office: 8 Minories, First Floor, London, England, EC3N 1BJ.

Privacy Policy