Privacy notice — The Making Rooms

Who we are

The Making Rooms is the data controller for the information described here. We are a Fab Lab and maker space in Blackburn.

Questions, or any request about your data: [email protected]

What we collect and why

Information	Why	Our lawful basis
Name, email, date of birth	To create and run your membership	Contract
Phone number (optional)	To contact you about a booking	Legitimate interests
Sign-in and sign-out times, equipment used	Knowing who is in the building, fire safety, and reporting to our funders in aggregate	Legitimate interests
Induction and safety training records	To confirm you are trained on equipment before using it	Legal obligation, legitimate interests
Workshop and room bookings	To manage your place and contact you about changes	Contract
Badges, projects you publish	To record your skills and share your work if you choose to	Contract, consent
Marketing preferences	To send you news and events, only if you asked us to	Consent
Photo and video permission	To use images from events in our publicity	Consent
Password, PIN and security settings	To keep your account secure. These are stored scrambled, never as readable text	Legitimate interests

Marketing email

We only send news and events to people who have ticked the box asking for them. You can stop them at any time — every email has an unsubscribe link that works without logging in, or you can change it in your account.

Unsubscribing does not stop emails about things you have booked, such as workshop confirmations or a cancellation. Those are not marketing, and you need them.

Who we share it with

We do not sell your information or share it for anyone else's marketing. We use these services to run the Fab Lab:

Brevo — sends our email. Based in the EU.
Square — takes workshop payments. Based in the US, under approved transfer safeguards.
Cloudflare — protects and routes our website.
IONOS — hosts our server, in the EU.

We may also share information where the law requires it, or where there is a serious risk to someone's safety.

How long we keep it

We keep your membership record while you are an active member and for a period afterwards, so that returning members do not have to start again. Our retention schedule is under review; if you want your record removed sooner, ask us and we will do it.

Young people

Some of our members are under 18. If you are under 13, a parent or guardian needs to agree before you can sign up for our emails. We ask for date of birth so we know when a young person needs a responsible adult involved, and so we can run age-appropriate sessions.

Your rights

You can ask us to:

Give you a copy of your information
Correct anything that is wrong
Delete your information
Stop or limit how we use it
Send your information to another organisation
Stop using it for something you previously agreed to

If you have an account you can download your data or ask for deletion from your account page. Otherwise email us. We will respond within one month, and it is free.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.