Privacy Policy

Introduction

This Privacy Policy sets out how Frameless London Limited uses and protects any information that you give us when you use this website. Frameless London Limited is the Data Controller and we are committed to providing you with relevant information and control over how we process your personal information.

This policy explains what personal information we may record, why we do so, how you may control the use of your information and how we protect your information. Details of your legal rights and how to exercise them are also set out below.

This policy was last updated on 11 November 2026 and any future changes to our policy will be reflected here.

Contacting us

Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed by email to [email protected] or by post to Frameless c/o Data Protection Officer, 6 Marble Arch, Marble Arch Place, London W1H 7AP.

What is personal data?

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) and the Data Protection Act 2018 (collectively, “the Data Protection Legislation”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data and other online identifiers.

What personal data do we collect?

The types of personal data collected by this website or through a third-party are:

• Device information including IP address, browser type and version, operating system and cookie IDs. The data is used to understand how people interact with the website and for other purposes as described below.
• Usage information such as how frequently and how long you use our site and the content you view, which may be used to tailor our website, perform analytics and provide advertising as further described below.
• Contact information you provide to us such as name, email address, postal address and ticketing information.
• Booking and transaction information, such as the experience or ticket purchased, transaction status, redemption or attendance information, refunds or chargebacks, where relevant.
• Marketing preference and consent information, including whether you have opted in to or opted out of particular communications.

We rely on different lawful bases depending on how and why we process your personal data. These may include your consent, our legitimate interests, performance of a contract with you, and compliance with our legal obligations. Where consent is required for cookies, tracking technologies or direct marketing, we will ask for it in the appropriate way.

When you purchase tickets for FRAMELESS, your booking may be processed through Fever, our Official Ticketing Partner. Depending on where you make your booking and the processing activity involved, FRAMELESS and Fever may each act as separate and independent data controllers in relation to certain personal data associated with your purchase.

Where you purchase through FRAMELESS sales channels developed or managed by Fever, information including your name, surname and email address may be shared between FRAMELESS and Fever in connection with the provision of ticketing and related services.

Where you purchase through Fever sales channels, Fever may provide FRAMELESS with information including your name, surname and email address and, where lawfully available and relevant, booking, ticketing, sales, transaction, redemption, attendance, refund, chargeback, CRM, marketing preference and consent information.

We may use information received through Fever to fulfil and manage your booking and visit, send necessary service or operational communications, provide customer support, carry out financial reporting, reconciliation, analytics and service optimisation, and, where permitted by applicable law and the relevant permissions or consents, for marketing activity.

Where Fever collects additional information, such as a phone number, solely and explicitly on our instruction, FRAMELESS remains the controller for that processing and Fever acts as our processor.

Where Fever acts as an independent data controller, it is responsible for its own processing of your personal data. Please refer to Fever’s privacy notice for further information about how Fever processes personal data.

You may object to or opt out of FRAMELESS marketing communications at any time by using the unsubscribe link in our emails, following any opt-out instructions provided in a message, or contacting us using the details at the beginning of this policy. Opting out of FRAMELESS marketing communications does not prevent us from sending essential service or operational communications relating to a booking or visit.

How we use your personal information and why

We may use your personal data for the purposes listed below. The lawful basis depends on the particular processing activity and may include consent, legitimate interests, performance of a contract or compliance with a legal obligation:

Marketing purposes. We may send promotional emails, text messages or other electronic marketing where you have consented to receive them or where another lawful route under applicable electronic marketing rules, such as the customer “soft opt-in”, applies. Where we rely on the customer soft opt-in, we will only do so where the relevant legal conditions are met. Where Fever collects a marketing preference or consent intended to permit FRAMELESS marketing, we will only use that information where the wording presented to you and applicable law allow us to do so.

Internal record keeping for financial reasons and/or for improving our products and services.

Analytical purposes to understand how you and other visitors use our website, for example recording in what order pages are visited and how long is spent on each, so that we may improve the website in future. We may use the information to customise the website according to your interests.

CCTV Monitoring

We use CCTV at our premises for security, safety, and crime prevention. This processing is based on our legitimate interests.

In very limited cases, authorised technical staff may access footage to investigate operational or technical issues (e.g. equipment faults). Access is strictly controlled and only where necessary. CCTV is not used for behavioural profiling or any visitor analytics.

Footage may include images of individuals and is retained for 30 days, unless required for investigation, after which it is permanently deleted.

Access is restricted to authorised personnel only, although footage may be shared with law enforcement where required. You have the right to request access to your personal data and we ask that you email us on [email protected] to proceed with this. You can also lodge a complaint with the Information Commissioner’s Office.

Photography at The Art of You

The Art of You Photo Experience

We host a photo experience called The Art of You at FRAMELESS, operated on our premises by a third-party company, Epic Photo Co. Limited.

If you choose to take part, your photograph is taken at the installation and processed using artificial intelligence to create an image inspired by the style of a well-known artist. You can then choose to purchase a print, a digital copy, or both.

Who is responsible for your photograph?

Epic Photo Co. is the data controller responsible for operating The Art of You photo experience. This includes taking and processing your photograph, fulfilling your purchase, sending you a digital copy where requested, retaining the photograph for a limited period, and responding to queries about the service. You can find out more in Epic Photo Co.’s privacy notice at epic-photo.co/privacy or contact them at [email protected].

FRAMELESS is a separate data controller where you choose to give us permission to use your photograph for our own marketing purposes. Consent given to Epic Photo Co. does not automatically apply to FRAMELESS, and vice versa. You will be asked separately whether you are happy for each organisation to use your photograph for its own purposes. You can answer these questions differently or decline both. Your decision will not affect your ability to purchase your photograph.

What information does FRAMELESS receive?

FRAMELESS only receives your photograph where you have specifically consented to us using it for marketing purposes.

If you do not give this consent, your photograph will not be provided to FRAMELESS.

Where you do consent, we receive:

• your photograph; and
• a record of the consent you provided, including when it was given and the wording presented to you at the time.

We do not receive your name, email address or payment details as part of this process.

How we use your photograph

Where you have given us permission, we may use your photograph to promote FRAMELESS and its experiences. This may include use on our website, social media channels, digital advertising and printed promotional materials.

Our lawful basis for this processing is your consent under Article 6(1)(a) of the UK GDPR.

We do not use photographs received through The Art of You to identify you. We do not carry out facial recognition or biometric identification using these photographs, and we do not match them against CCTV footage or other records.

How long we keep your photograph

Epic Photo Co. retains photographs in accordance with its own retention policy. You can find more information about how long Epic Photo Co. keeps your photograph in its privacy notice at https://www.epicbooth.co.uk/privacy

Where you have consented to FRAMELESS receiving your photograph for marketing purposes, we will keep it only for as long as necessary for the purposes for which you gave your consent.

If you withdraw your consent, we will stop using your photograph and remove it from our marketing library. Where it has already been published on a website, social media account or other channel we control, we will remove it where reasonably possible, as explained below.

Withdrawing your consent

You can withdraw your consent for FRAMELESS to use your photograph at any time by emailing [email protected].

If you withdraw your consent, we will stop making new use of your photograph and remove it from our marketing library. Where it has already been published on websites, social media accounts or other channels we control, we will remove it where reasonably possible.

Withdrawing your consent does not affect the lawfulness of any use that took place before you withdrew it. We may also be unable to remove copies that have already been downloaded, shared or reposted by third parties.

Withdrawing your consent from FRAMELESS does not withdraw any separate consent you may have given to Epic Photo Co. If you would also like to withdraw consent from Epic Photo Co., please contact them separately at [email protected].

Photographs of more than one person and photographs of children

A photograph may sometimes include more than one identifiable person. We will not treat one person’s consent as permission on behalf of everyone shown in the photograph and will only use group photographs for marketing where the appropriate permissions are in place.

Where an identifiable child appears in a photograph, FRAMELESS will obtain consent from a parent or guardian where required before using the photograph for marketing purposes.

Your rights

You have rights under data protection law in relation to your personal data, including the right to withdraw your consent at any time.

For more information about your rights, how to exercise them, and how to contact the Information Commissioner’s Office (ICO), please see the Your rights section of this Privacy Notice.

How long will you retain my personal data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements.

In some circumstances we may anonymise your personal data (so that it can no longer be associated to you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

You can ask us to delete your data by contacting us using the methods outlined at the start of this policy.

Cookies

We use cookies to see how you use our website and to give you a better browsing experience. We provide the ability to accept or reject cookies when you first visit the website and these preferences can also be changed at a later date. More details can be found by reading our Cookie Policy.

Do you share my personal data?

We may share personal data with carefully selected partners, service providers, ticketing and distribution partners and advertising networks where necessary for the purposes described in this policy.

Fever is one of our ticketing and distribution partners. In relation to certain ticketing and customer data, FRAMELESS and Fever may each act as separate and independent data controllers. This means Fever may process certain personal data for its own purposes and responsibilities under data protection law, rather than solely on FRAMELESS’ instructions. In other circumstances, Fever may act as a processor on our behalf.

We will only share personal data where we have an appropriate lawful basis and where the sharing is consistent with applicable data protection and electronic communications law.

In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, the instructions of a government authority, or to prevent fraud and protect the security of our site.

Data transfers

The personal information collected while you use this website may be transferred to countries outside the European Economic Area (EEA). This may happen, for example, when the computer servers used to host the website or our advertising and marketing systems are located in a country outside the EEA. If we transfer your personal information outside of the EEA in this way, we will take steps to ensure that your privacy rights continue to be appropriately protected.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow a third-party to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Your rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us at [email protected].

More information about these rights is available from the ICO website: https://ico.org.uk.

Time limit to respond

We aim to respond to all legitimate requests within one month. Occasionally it may take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Complaints

To exercise all relevant rights, queries or complaints please in the first instance contact [email protected].

You also have the right to contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF. Before doing so, however, we would encourage you to first contact us directly to allow us an opportunity to resolve any concerns you may have.