Privacy Policy

Introduction

This is the Privacy Policy for The Office Group Properties Limited (“The Office Group”, “we”, “us” and “our”). This Privacy Policy explains how The Office Group collects, uses, shares, and protects personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and, where applicable, the Data (Use and Access) Act 2025.

We are committed to protecting your privacy both online and offline. We appreciate that you expect the personal information you provide to us to be handled legally and fairly. This policy explains how we collect information, what we do with it and what controls you have.

This policy covers all our interactions with our customers, business partners and anyone who is not an employee or contractor of The Office Group where The Office Group determines the purposes and means of the processing and therefore acts as a data controller. This policy covers how we collect and process personal data via https://www.theofficegroup.com/ (“Site”) and the cookies we apply and use on our Site. It also applies to how we process personal data generally in our business.

The Site is operated by The Office Group Properties Limited and all its group companies. A list of relevant The Office Group group entities and their registered addresses is available on request.

For the purposes of UK data protection laws (the “Data Protection Laws”), the data controller is The Office Group Properties Limited, registered in England and Wales, with its registered office at 89 Wardour Street, London, United Kingdom, W1F 0UB.

If you have any queries about this Privacy Policy or how we or any other The Office Group entities may collect, store or use your data, please contact our Data Protection Officer by email at [email protected].

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it

Information we may collect from and about you

Information you give us

This is information about you that you give us by filling in forms on our Site or by corresponding with us by phone, email or otherwise. It includes information you provide when you register to use our Site, subscribe to our service, search for a product, place an order on our Site, participate in discussion boards or other social media functions on or via our site, enter a competition, promotion or survey, and when you report a problem with our Site.

This also includes information you provide when you interact with AI‑enabled sales agents acting on our behalf. These AI agents are used to respond to enquiries, ask qualification questions and, where appropriate, arrange viewings or hand your enquiry over to a human sales consultant. You will be informed when you are interacting with an AI agent, and you may opt out or request human involvement at any time.

The information you give us may include:

• your name, email address and telephone number;
• links to social media profiles you choose to provide (e.g. LinkedIn);
• job title, employer, industry, skills and expertise;
• The Office Group locations you use in connection with your membership;
• communications you send to us;
• your name and email address when you connect to the Wi‑Fi network in one of The Office Group’s locations;
• responses to surveys, promotions or competitions.

In limited circumstances, we may receive special category data (for example dietary requirements for events, which may reveal health or religious information). Where we do so, we process it only where necessary and with appropriate safeguards.

You are under no obligation to provide any of the information listed above. However, if you choose to withhold requested information, we may not be able to provide you with some or all of our services or to work with you.

Information we collect about you

When you visit our Site or Applications, or when you visit us in person, we may automatically collect:

• technical information (IP address, browser type and version, operating system, device identifiers);
• information about your visit (URLs, pages viewed, interactions, response times);
• security and operational information when you visit The Office Group locations (for example CCTV images or access‑control logs).

Information we collect when you call us

We use call-tracking software, ResponseTap (now part of Infinity), which may combine call information with browsing session information to understand the customer experience and tailor our services.

We may also record inbound calls for training, quality assurance, and service improvement purposes.

Information we collect from clients

• Information to meet our obligations under money laundering regulations, we may process information including but not limited to your full name, residential address, date of birth, photograph, utility bills, bank statements and certain other government issued documents (e.g. your passport) in order to verify your identity;
• information about your debit/credit card, bank account information and payment status that we require for the purpose of recording and processing your membership application and administering your membership. This may include information about you received from our payment processor or bank, for example if a payment has been declined;
• information about your use of our buildings, including location data for example, the times and dates of your access to our buildings, who you are visiting or who is visiting you, events you attend and what services you make use of.

Information we receive from other sources

• This is information we receive about you from third parties, for example parties that refer you to us or provide us with services relating to you. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, and search information providers). We will notify you when we receive information about you from them and the purposes for which we intend to use that information.

How we use your information

The main purposes for which The Office Group processes your data are:

• Membership and service administration (onboarding, billing, access to The Office Group locations)
  Lawful basis: performance of a contract; legitimate interests
• Security, safety and operations (access control, CCTV where applicable, incident management)
  Lawful basis: legitimate interests; legal obligation where applicable
• Legal and regulatory compliance (AML and identity verification)
  Lawful basis: legal obligation
• Marketing communications
  Lawful basis: consent (and soft opt‑in where permitted under The Privacy and Electronic Communications Regulations (PECR))
• Website functionality and optimisation
  Lawful basis: strictly necessary cookies (necessary); analytics/marketing cookies (consent)

Further detail on these activities is recorded in our internal Records of Processing Activities maintained under Article 30 GDPR.

Specifically, we use information held about you in the following ways:

• Information you give to us. We will use this information:
  • to carry out our obligations arising from any contracts entered between you and us and to provide you with the information, products and services that you request from us. Legal basis for this processing is that it is necessary for performance of the contract between us;
  • to provide you with information about goods or services we feel may interest you, if you have ticked the relevant box situated on a The Office Group form on which we collect your data indicating your consent to receiving marketing material from us. Legal basis for this processing is your consent;
  • to notify you about changes to our services. Legal basis for this processing is that it is necessary for performance of the contract between us;
  • to ensure that content from our Site and Applications is presented in the most effective manner for you and for your computer or device. Legal basis for this processing is that it is in our legitimate interests. Where this purpose is pursued using cookies, this processing is subject to the cookies section of this policy and for non-essential cookies the legal basis is your consent.
• Information we collect about you. We will use this information:
  • to administer our Site and Applications under our terms and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes. Legal basis for this processing is that it is in our legitimate interests. Where this purpose is pursued using cookies, this processing is subject to the cookies section of this policy and for non-essential cookies the legal basis is your consent;
  • to improve our Site and Applications to ensure that content is presented in the most effective manner for you and for your computer. Legal basis for this processing is that it is in our legitimate interests. Where this purpose is pursued using cookies, this processing is subject to the cookies section of this policy and for non-essential cookies the legal basis is your consent;
  • to allow you to participate in interactive features of our services, when you choose to do so. Legal basis for this processing is that it is necessary for performance of the contract between us;
  • to keep our premises, Site and Applications safe and secure. Legal basis for this processing is that it is in our legitimate interests;
  • to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you. Legal basis for this processing is that it is in our legitimate interests. Where this purpose is pursued using cookies, this processing is subject to the cookies section of this policy and based on your consent;
  • to make suggestions and recommendations to you and other users of our Site and Applications about goods or services that may interest you or them, subject to your stated preferences. Legal basis for this processing is that it is in our legitimate interests. Where this purpose is pursued using cookies, this processing is subject to the cookies section of this policy and based on your consent;
  • to enter into, and to perform, contracts with you or the person that you work for. Legal basis for this processing is that it is necessary for performance of the contract between us or a third party.
• Combining information we receive from multiple sources. We will combine information about members and prospective customers that we gather from different sources to build profiles of those individuals, to make our service offering more bespoke and relevant. Legal basis for this processing is that it is in our legitimate interests, subject always to your rights and expressed preferences.

Disclosure of your information

We share your personal information with:

• Any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.
• Selected third parties including:
  • business partners, suppliers and subcontractors for the performance of any contract we enter into with you. This includes the use of the enterprise version of Microsoft Copilot. Legal bases for this disclosure are performance of a contract and legitimate interests;
  • analytics and search engine providers that assist us in the improvement and optimisation of our Site and Applications and subject to the cookie section of this policy and your consent;
  • credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you. Legal basis for this disclosure is that the processing is legitimate interest;
  • anti-money laundering (AML) services providers for the purpose of conducting customer due diligence checks. Legal basis for this disclosure is that the processing is necessary for compliance with a legal obligation to which we are subject;
  • if you submit your details via a form on our Site, we may share this information with Uniti AI, a third-party provider of an AI sales agent platform. Legal basis for this disclosure is legitimate interest.

We will disclose your personal information to third parties:

• in the event that we sell or buy any business or assets, in which case it is our legitimate interest to disclose your personal data to the prospective seller or buyer of such business or assets subject to the terms of this privacy policy. Legal basis for this processing is that it is in our legitimate interests.
• if The Office Group, or substantially all of its assets, is acquired by a third party, in which case it is in our legitimate interest for the personal data it holds about its customers to form part of the transferred assets. Legal basis for this processing is that it is in our legitimate interests.

if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of supply and other agreements with you. Legal basis for this disclosure will depend upon the nature of the disclosure but may be the fulfilment of a contract with you or a third party, compliance with a legal obligation; or the pursuit of our legitimate interest to protect the rights, property, or safety of The Office Group, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud and financial crime protection, and credit risk reduction.

External Links

The Site and Applications may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or the content of such sites. Please check these policies before you submit any personal data to these websites.

Security

We place great importance on the security of all personally identifiable information associated with our users. We have security measures in place to protect against the loss, misuse, and alteration of personal information under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal information. Whilst we cannot ensure or guarantee that loss, misuse, or alteration of information will never occur, we use all reasonable efforts to prevent it.

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site or Applications; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

It is advisable to close your browser when you have finished your user session to help ensure others do not access your personal information if you use a shared computer or a computer in a public place.

Where we store your personal data

All information you provide to us is stored securely on servers provided by trusted third parties. All our third-party providers are carefully vetted for data protection compliance. Any payment transactions will be encrypted using industry approved technologies. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

If you are based in the UK or in the European Economic Area (“EEA”) note that your Personal Information may be transferred, processed and stored outside of the UK or EEA, for example in connection with our use of cloud hosted IT systems. In the event that your Personal Information is transferred to, maintained or processed by other parties located in the United States or otherwise outside of the UK or EEA, all such transfers will be made in compliance with applicable law to afford you the same levels of protection as you enjoy within the UK or EEA.

Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, contractual and operational requirements.

Retention periods vary depending on the category of data and processing activity and are set out in our internal retention schedule.

For the purpose of marketing communications, we retain personal data until you decide to unsubscribe. We may retain personal data for as long as necessary to identify issues, resolve disputes, or deal with legal proceedings. We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from aggregate information retained or used for these purposes.

Your rights

You have the following rights under certain circumstances:

• to be provided with a copy of your personal data held by us;
• to request the rectification or erasure of your personal data held by us;
• to refuse to provide consent, and to withdraw consent at any time, without affecting processing already carried out lawfully before withdrawal;
• to request not to be subject to any automated decision-making that produces legal effects concerning you or similarly significantly affects you;
• to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example);
• to request that your data be transferred to a third party in a structured and machine-readable format;
• to raise a complaint with us;
• to take legal action and to lodge a complaint with the relevant data protection regulator.

You are also entitled to object to the processing of your personal data:

• at any time, if your personal data is used for direct marketing purposes; and based on grounds relating to your particular situation, if your personal data is processed for other purposes.

We will inform you (before collecting your data) if we intend to use your data for marketing purposes or if we intend to disclose your information to any third party for such purposes by checking certain boxes on the forms we use to collect your data. You can also object to receiving further marketing at any time without detriment.

You can also exercise the rights listed above at any time, raise a query about this policy, or amend your preferences, by contacting us at: [email protected]

If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority.

Google Ads

We use Google Ads to promote our spaces and services online and to understand how effective our advertising is. This may involve the use of personal data such as your name, email address and telephone number to help us link your interaction with our adverts to subsequent engagement with us (for example, where you make an enquiry or booking). In some cases, we use features such as Google Customer Match, which may involve securely hashing this information before it is shared with Google for matching and measurement purposes.

This processing may involve transfers of personal data outside the United Kingdom or European Economic Area; where this occurs, appropriate safeguards are in place in line with applicable data protection laws. Where we use cookies or similar technologies for advertising purposes, we rely on your consent. We otherwise process this information on the basis of our legitimate interests in marketing our services and improving our advertising performance.

Cookies

Our Site and Applications use cookies to distinguish you from other users of our Site and Applications. This helps us to provide you with a good experience when you browse our Site and Applications and allows us to improve them.

Cookies are pieces of information that a website transfers to your hard drive to store and sometimes track information about you.

Some of the cookies and other similar technologies used by the Site and Applications are set by us, and some are set by third parties who are delivering services on our behalf. We may use the following types of cookies:

1. Necessary cookies
2. Performance cookies
3. Marketing cookies
4. Functional cookies

Necessary cookies

Necessary cookies are cookies that are essential for the operation of our website. These cookies enable core functions such as security, network management and accessibility. Necessary cookies are automatically activated and you can only disable these cookies by changing your browser settings, but this may affect the way the website works.

Performance Cookies

Performance cookies serve the purpose of optimising the performance of the website and improving the experience for the user. For this purpose, performance cookies are used to collect and analyse information about the use of the website by visitors. This information includes details about the browser and operating system used, the URL from which users came to our website, the pages accessed or the time a user spent on these pages. Performance cookies are not used to create user profiles.

Marketing Cookies

We use marketing cookies on our website to show you advertisements that correspond to your interests. Marketing cookies are also used to evaluate the efficiency of advertisements. In addition, they limit the number of times a particular advertisement is displayed to you. In some cases, we also pass on the data collected with marketing cookies to third parties. These third parties may combine this information with other information about you that you have provided to them or that they have collected as part of your use of the Services.

Functional cookies

Functional cookies are primarily used to make the use of our website as pleasant as possible for the user by storing information that has already been entered - for example language selection or login data - so that you do not have to re-enter this information each time you visit our website. Furthermore, this data enables us to personalise the use of the website for you, for example by adjusting the corresponding currency details. Finally, we require functional cookies for certain functions on the website, such as playing videos.

Overview of cookies currently used on our website

You can see a full table of the cookies we currently use on our website here. This particularly includes information on the cookie category, the lifespan of the cookie as well as its purpose. Further, the table indicates the provider of the cookie and the personal data processed in relation to the cookie.

We will only set cookies (except for necessary cookies) with your consent. If you do not activate non-necessary cookies, these cookies will not be set, and we will not process your personal data. Please see below for some more information on our use of Google Analytics cookies.

The legal basis for our collection of personal data through the use of necessary cookies is that it falls within our legitimate interests. Our use of all other cookies is based on your consent (which you can withdraw at any time by updating your browser settings).

Please note that this table may regularly be updated if we delete cookies or implement new cookies.

Further information on Google Analytics

Every time someone visits our website, software provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA generates cookies.

These cookies can tell us whether you have visited the site before. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the United States and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The corresponding evaluation of your surfing behaviour is made available to us in anonymised form.

Your browser will tell us if you have these cookies and, if you don’t, we generate new ones. This allows us to track how many individual users we have, and how often they visit the site.

We have activated the IP anonymisation function on this website. As a result, your IP address is truncated by Google within member states of the European Union or other Contracting States to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases the full IP address will be transmitted to a Google server in the United States and truncated there. The IP address transmitted by Google Analytics as part of Google Analytics will not be merged with other Google data.

We have entered into a data processing agreement with Google. Google relies on the European Commission’s Standard Contractual Clauses (SCCs) for transfers of personal data out of the European Economic Area, the UK or Switzerland.

For more information on the handling of user data at Google Analytics, see the Google Privacy Policy.

Cookie settings

Necessary cookies are automatically set when you visit our website. Other non-necessary cookies are deactivated and will only be dropped if you give your prior consent. You may continue with only these necessary cookies by clicking “Continue with necessary cookies only” in the cookie banner. Alternatively, you can consent to all non-necessary cookies by pressing the button "Accept all cookies" in the cookie banner. In addition, you may select the different cookie categories individually by changing the respective toggles on the cookie preference page in the cookie banner. Your settings will be saved accordingly.

Most web browsers allow a certain control of many cookies over the browser settings. For more information about cookies, including how to see which cookies have been set, please visit www.aboutcookies.org or www.allaboutcookies.org.

Please note, however, that by blocking or deleting cookies used on the Site or Applications, you may not be able to take full advantage of the Site or Applications (as the case may be). Methods for disabling the most common cookies on the most common browsers are set out below.

Disabling cookies

The effect of disabling cookies depends on which cookies you disable, but in general the Site and/or Applications may not operate properly if cookies are switched off. You can either disable cookies by adjusting your preferences on the cookie preference page.

Further, you may disable cookies by changing your browser settings to reject cookies. How you can do this will depend on the browser you use.

For Microsoft Edge:

1. Choose the menu “Settings”.
2. Click on “Privacy, search, and services”.
3. Select the appropriate setting.

For Google Chrome:

1. Choose “Settings”.
2. Under “Privacy and security” click “Third-party cookies”.
3. Select the appropriate setting.

For Safari:

1. Choose “Settings”.
2. Click on “Advanced”.
3. Select the appropriate setting.

For Mozilla Firefox:

1. Choose the menu “Tools” then “Options”.
2. Click on the icon “Privacy”.
3. Find the menu “Cookie” and select the relevant options.

For Opera:

1. Click the Opera logo > “Settings”.
2. Click on “Privacy & security” > “Third-party cookies”.
3. Select the “Block third-party cookies”.

Where you have not set your permissions, we may also separately prompt you regarding our use of cookies on the Site.

Changes to this policy

Any changes we make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Policy. This policy was last updated on 23 June 2026.

Complaints

We take any concerns or complaints about how we handle personal data seriously and aim to resolve them fairly, transparently, and without delay.

If you have a concern, enquiry or complaint about how your personal data is being used, or about how we have handled a request relating to your data protection rights, you should contact us in the first instance so that we have the opportunity to investigate and address the issue.

You can raise a complaint by contacting our Data Protection Officer at [email protected].

Please provide sufficient information to allow us to understand and investigate your concern, such as your name, contact details, and a description of the issue.

We aim to respond to complaints without undue delay and, in most cases, within one month of receipt. Where a complaint is complex or we receive a high volume of requests, we may need additional time, in which case we will explain the reasons for any delay and keep you informed.

If you are not satisfied with our response, or believe that we have not handled your personal data in accordance with data protection law, you have the right to raise a concern with the relevant supervisory authority.

For the UK, this is the Information Commissioner’s Office (ICO). Further information about how to raise a concern is available on the ICO’s website:
https://ico.org.uk/concerns/handling/

Contact Us

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to: [email protected].