WeWork
Our Menus

Privacy policy

Last updated: 08/09/26

Who we are

Boulevard Works is operated by Boulevard Events Ltd (company no. 07124563). When you create an account, join our loyalty scheme, sign up at one of our venues, or order from us, Boulevard Events Ltd (company no. 07124563) is the data controller responsible for your personal information.

Contact: wework@boulevardevents.co.uk

What information we collect

When you create an account, join our loyalty scheme, or sign up using a QR code at one of our venues, we collect:

  • Your name and email address
  • Your phone number, job title and company, when you sign up at a venue
  • Anything you tell us in the free-text box about the food and drink you would like to see
  • Dietary preferences and allergens you choose to tell us about
  • Your workplace or group membership, if you join through a company or event link
  • Loyalty activity (stamps and rewards)
  • Your marketing preference (only if you opt in)

We do not collect or store payment card details. If and when you pay through our ordering partner, your card is handled directly by the payment provider.

Why we collect it

We use your information to:

  • Run your account and loyalty card
  • Flag dishes containing allergens you have told us to avoid
  • Manage group benefits arranged by your employer or group organiser
  • Send you service emails (sign-in links, confirmations)
  • Send you news and offers, only if you opted in - you can opt out any time
  • Understand which workplaces and teams use our venues, so we can plan menus and events for them
  • Read your feedback to improve what we serve

The allergen filter is an aid, not a guarantee

We use your food profile to flag dishes based on our recipe data. It is not a substitute for telling the team about your allergies - always speak to staff, especially about severe allergies. Dishes are prepared in kitchens that handle all allergens.

Legal basis for processing

  • Contract: your name and email run your account and loyalty card.
  • Legitimate interest: essential service messages about your account.
  • Legal obligation: allergen information supports our duties under UK food information law.
  • Consent: marketing email, only when you tick the box; you can withdraw it any time from your account or the unsubscribe link. The box is never pre-ticked, and leaving it blank does not affect anything else you have asked us for.
  • Legitimate interest: your job title and company help us plan for the workplaces we serve; you can ask us to remove them at any time.

Who we share your data with

  • OrderMango provides and hosts the account and loyalty platform on behalf of Boulevard Events Ltd (company no. 07124563).
  • Resend delivers our emails.
  • Our database and media hosting providers store data securely within the platform.
  • If you join through a company or group, the group's organiser can see your name, email, and membership status - never your dietary or allergen details.

We do not sell your data to any third party.

How long we keep your data

We keep account information while your account is active and for as long as reasonably necessary afterwards for operational, accounting, and legal purposes. You can ask us to delete your account at any time.

If you sign up at a venue and never create an account, we keep your details for as long as you remain opted in to marketing, or for 24 months after your last contact with us if you did not opt in, then delete them.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct any inaccurate information
  • Delete your personal data (where we have no legal obligation to keep it)
  • Object to processing based on legitimate interest
  • Receive your data in a structured, commonly used format

To exercise any of these rights, email wework@boulevardevents.co.uk. We will respond within 30 days. If you ask us to delete your account, we remove your personal details; anonymised records of loyalty activity may be retained.

Children

We do not knowingly collect personal data from children under 16 without parental consent.

Changes to this policy

We may update this policy from time to time. The latest version always lives on this page, with the date above.