Controller and contact
PENTAGON 5 LTD operates PENTAGON FIVE. We are registered in England and Wales under company number 15554782. Our registered office is 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE. Email: bookings@pentagon5.bar. Telephone: +447985755053. This is also our business contact address. Office visits are by appointment. This company is the controller of personal information collected through this website. Contact bookings@pentagon5.bar for privacy questions or to exercise your rights.
Information collected
We receive your name, email, optional phone number and message when you contact us. A booking request also records the selected reservation option, currency, country of residence, requested date, guest count, requested duration, the organiser’s confirmation that they are at least 18 and any notes you provide. We retain a snapshot of the accepted terms and item descriptions. Our server also processes IP addresses, browser request information, session identifiers and security logs. Do not submit identity documents, health information, payment card numbers, classified information or other sensitive material through public forms.
Purposes and legal bases
We use enquiry and order information to take steps at your request before a contract, and to perform an accepted contract. Our legitimate interests in operating a reliable service and preventing abuse support limited security monitoring and relevant business correspondence, after considering your rights. We keep required business records to meet legal obligations. Marketing is not enabled on this website; we do not treat an enquiry as marketing consent. Where consent is required for a future optional purpose, we will request it separately and explain how to withdraw it.
Recipients and payments
Information is accessible to authorised people working for the company and service providers that support website hosting, email and IT operations. Where a booking is accepted, necessary booking details are shared with people responsible for providing the confirmed venue service. Card payments, where offered, are processed on Stripe’s hosted checkout page. Stripe receives payment, billing and transaction information and processes it under its applicable privacy terms (https://stripe.com/privacy). We receive transaction identifiers, amount, currency and payment status; we do not receive or store complete card numbers or card security codes. We may disclose information where legally required or needed to establish, exercise or defend legal claims. We do not sell personal information or use advertising trackers.
International processing
Our service providers may process information outside your country. Where UK or EEA transfer rules require safeguards, the company must use an applicable adequacy arrangement or approved contractual safeguards with any required supplementary measures. Contact us for information about the current hosting location, recipients and applicable transfer safeguards. If an EEA representative is legally required for the company’s activities, its details must be supplied with the applicable service information before that activity begins.
Retention
General enquiries are normally retained for up to 12 months after resolution. Unaccepted, unpaid requests are normally removed after 90 days. Accepted order and business records are normally kept for six years where needed for accounting or legal purposes. Information needed for an active dispute, legal hold or mandatory retention period may be kept longer. Temporary rate-limit records expire after the applicable short security window; routine server logs should be rotated within 30 days. Retention reviews and the maintenance process are the company’s responsibility.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. These rights have legal conditions and exceptions. You can withdraw consent without affecting earlier lawful processing. We normally respond to a rights request within one month, subject to permitted extensions and proportionate identity checks. You may complain to the UK Information Commissioner at https://ico.org.uk/make-a-complaint/ or the relevant EEA supervisory authority. Contacting us first is welcome but is not required.
Security, children and decisions
Access to administration is password-protected and payment card entry, where offered, takes place with the payment provider. No transmission or system is guaranteed completely secure. This website is not directed at children and we do not knowingly seek their information. We do not make solely automated decisions with legal or similarly significant effects through this website. The payment provider may carry out its own fraud and security checks.
Providing information and changes
Contact details are needed to answer an enquiry; order and delivery fields marked as required are needed to process the requested service. Without necessary information we may be unable to proceed. We update this notice when the website’s processing changes and show the revision date on this page.