top of page

Privacy Policy – The Oubliette

​

We only collect the minimum data necessary to confirm your booking, verify your age, and ensure guest safety. We handle all personal data with discretion and confidentiality appropriate to an adult-oriented private venue.

​

Last updated: October 2025

​

This Privacy Policy explains how The Oubliette (“we”, “us”, “our”) collects, uses and protects your personal information when you book or stay at our private studio rental in England, UK.

​

We respect your privacy and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. Who we are

The Oubliette
Email: oubliette@agonyandecstasy.co.uk
Location: England, United Kingdom
(Full address provided to confirmed guests only for security reasons.)

We are the data controller for the personal data we collect about our guests and website visitors.

2. What information we collect

We collect and process the following information:

  • Name and contact details (email, phone if provided).

  • Booking details (dates, selected options, special requests).

  • Verification data (via Veriff) – this may include your ID document and selfie, used solely for age and identity verification.

  • CCTV footage from external cameras for safety and security.

  • Any communications you send to us (such as by email or contact form).

  • Payment confirmation details (bank transfer records – we do not store card data).

We may also receive limited metadata automatically when you use our website (e.g. your IP address).

3. How we collect data

  • Directly from you when you book, communicate or provide information.

  • Through Veriff, our secure verification partner, for age and ID checks.

  • Automatically via cookies or analytics if you accept them (see Section 10).

4. Why we collect and use your data

We use your personal data for the following purposes:

  1. To verify your identity and age before confirming a booking.

  2. To manage bookings and communicate with you about your stay.

  3. To ensure guest and property safety, including external CCTV for security.

  4. To establish liability in case of property or equipment damage.

  5. To cooperate with law enforcement if a crime occurs on the property.

  6. To comply with legal requirements regarding age-restricted services.

  7. To send optional updates or marketing emails (only if you opt in).

5. Lawful bases for processing

We rely on the following lawful bases under the UK GDPR:

  • Contract – to fulfil your booking and provide the service you requested.

  • Legitimate interests – to protect our property, prevent fraud, and ensure guest safety.

  • Legal obligation – to verify age for adult-only services.

  • Consent – for processing biometric or sensitive data (via Veriff), and for optional marketing communications.

6. ID verification via Veriff

We use Veriff to verify your identity and confirm that all guests are over 18.
Veriff securely processes your ID data and biometric information (such as facial images) on our behalf.
We do not download or store copies of your ID documents ourselves.

  • Verification data is stored securely by Veriff for up to 3 years, after which it is deleted automatically.

  • We only access verification results (pass/fail and confirmation) and do not retain ID copies.

  • You can learn more about Veriff’s data security here:
    🔗 How Veriff keeps your data safe

7. CCTV and security

External CCTV cameras operate around the property and entrance for legitimate security purposes.
No cameras are installed inside guest areas or private rooms.
CCTV footage is kept for a limited period and may be shared with the police if necessary.

8. Data retention

We keep personal data only for as long as necessary for the purposes described above:

  • Booking and guest records: 3 years after your stay.

  • Veriff verification data: up to 3 years (stored by Veriff).

  • CCTV footage: typically 30 days, unless needed for an investigation.

  • Email correspondence: up to 3 years for record-keeping.

After these periods, data is securely deleted or anonymised.

9. Data sharing

We only share data when necessary:

  • With Veriff, for ID verification.

  • With law enforcement authorities, if a crime occurs or legal obligation requires it.

  • With our co-owner, who may access business records remotely from the EU (data remains stored in the UK).

We do not sell or share data with advertisers or other third parties.

10. Cookies and website analytics

Our website may use cookies and simple analytics to understand visitor activity.
You can manage or refuse cookies through your browser settings.
No profiling or behavioural advertising is performed.

11. Marketing emails and consent

We occasionally send updates or offers about The Oubliette by email.
We only send marketing emails to people who have explicitly consented by completing our digital sign-up form on our website.

When you join our mailing list:

  • You provide your email address and confirm that you wish to receive marketing from us.

  • Your consent and contact details are securely stored within our website and email system (operated by Wix.com Ltd).

  • Wix acts as our data processor for these communications and complies with UK GDPR and industry-standard security practices.

  • You can withdraw your consent at any time by clicking “unsubscribe” in any marketing email or by emailing us at oubliette@agonyandecstasy.co.uk.

We will never share or sell your email address to third parties for their own marketing.

For more information on how Wix protects your data, visit https://www.wix.com/about/privacy.

12. International data access

Your data is primarily stored within the UK.
However, one of our business owners may access information from the EU, which has UK data adequacy recognition under GDPR.

13. Your rights

You have the following rights regarding your personal data:

  • To access a copy of your data.

  • To request correction or deletion.

  • To object to processing or withdraw consent.

  • To request restriction or data portability.

To exercise these rights, contact us at
📧 oubliette@agonyandecstasy.co.uk

If you are unhappy with our response, you may contact the Information Commissioner’s Office (ICO):
https://ico.org.uk/

14. Changes to this policy

We may update this Privacy Policy periodically to reflect legal or operational changes.
Updates will be posted on this page with a revised “Last updated” date.

​

​

bottom of page