Privacy Notice and Cookie Policy
Effective Date: 18 May 2026
Welcome to 180 The Thames. We’re committed to protecting your privacy and being transparent about how we handle your personal information. This notice explains what data we collect, why we collect it, how we use it, and the choices you have.
Who We Are
New Quarter Holdings Ltd. (UK Company no. 16207557) with its subsidiaries Jones & Co Ltd (trading as St. Clement, The Health Club, Lunette and Level 10) and Warm Bread Roll & Co. Limited (trading as Corner Shop, Bobbi’s Bar and Café Clement) and Store Holdings South Ltd (UK Company no. OE034268) (trading as “180 The Thames Apartments”), together 180 The Thames (“we“, “us” or “our”).
As a visitor to www.180thethames.com, www.stclement.co.uk and www.cornershoplondon.com (the “Websites”), or as a guest or potential guest at our premises at 7 Arundel Street, London WC2R 3DA and 10-12 Temple Place, London WC2R 2NF, your personal data will be processed as described in this notice.
Data Controller
180 The Thames Companies are registered with the Information Commissioner’s Office (ICO) as data controllers for the personal data that they process. The registered addresses for these purposes are:
- for Store Holdings South Ltd: 28 Esplanade, St Helier, Jersey, JE2 3QA; and
- for New Quarter Holding and its subsidiaries: C/O Williams Stanley & Co, 144 Great Portland Street, London, Greater London, England, W1W 6QT.
You can contact us by email at: [email protected]
Our ICO registration numbers are:
- New Quarter Holdings Ltd: ZB887465
- Warm Bread Roll & Co. Limited: ZB887579
- Jones & Co Ltd: ZB887585
The type of personal data we collect
We collect and process the following types of personal data:
For users of the Website:
- Information concerning your use of our Websites and/or services.
- Personal information including, for example, your name, address and contact details.
For guests of 180 The Thames:
- Personal information including, for example, your name, address and contact details.
- Other identifying or personal information to allow us to personalise your stay and offer a more tailored service and experience, including (where relevant) aliases/nicknames, date of birth, marital status, names of friends, affiliates and family members travelling with you and your interests and preferences.
- Passport information and information such as your transaction history, reservation information, products/services purchased, obtained or considered, and financial and transaction data, including bank account and payment card details and information about payments from you.
- Health data, for example, as may be relevant to your dietary requirements or to help ensure your stay with us is as comfortable and safe as possible.
For members and users of The Health Club:
- Health and fitness information, including details of any medical conditions, physical capabilities or health goals you share with us in connection with your use of our facilities or services.
- Membership information, including attendance records, class bookings and usage data.
For event organisers and corporate clients:
- Business contact information including your name, job title, company name and contact details.
- Event-related information including the nature, size and requirements of your event, and the personal data of attendees provided to us in connection with event planning and delivery.
For prospective purchasers registering interest in residential apartments at 180 The Thames:
- Personal information including, for example, your name, address and contact details.
- Information about your property requirements and preferences, including budget range, desired apartment size or type, intended use (e.g. primary residence, second home, investment) and timescales for purchase.
- Records of your enquiry and communications with us, including any viewing requests, correspondence and marketing preferences.
- Where relevant, the name and contact details of any professional adviser or agent enquiring on your behalf.
How we collect your personal data
Whether a guest of 180 The Thames or a visitor to our Websites, most of the personal data we hold is provided to us directly by you. If you are part of a group of guests, it may be provided by one of the other members of your party.
For guests of 180 The Thames, we may also receive personal data from the following sources:
- Travel agents and online travel agents.
- Assistants or representatives our guests may appoint to act on their behalf.
- Professional adviser or agent enquiring on your behalf.
Cookies and tracking technologies
We use cookies and similar technologies (such as pixel tags and web beacons) on the Website. This section explains what we use them for and how you can control them.
Strictly necessary cookies are essential for the Website to function — for example, to maintain your session or enable a booking form to work. These do not require your consent under the Privacy and Electronic Communications Regulations 2003 (PECR).
Functional cookies remember your preferences (such as language or location) to provide a more personalised experience.
Performance and analytics cookies help us understand how visitors use the Website so we can improve it. We use Google Analytics and Klaviyo for this purpose. Information collected is aggregated and anonymised.
Marketing and targeting cookies are set by our advertising partners to show you relevant content on other websites based on your browsing activity.
Some cookies are also set by third-party services we use, including Meta, Google Analytics, Seven Rooms, SiteMinder, Mews, Unifocus, Event Temple, Daily Point, Klaviyo, and Alliants. These third parties operate under their own privacy policies, which we encourage you to review.
When you first visit the Website, you will be asked for your consent to non-essential cookies via our cookie management tool. You can update your preferences at any time by clicking Privacy and Cookies at the bottom of any page. You can also manage cookies directly through your browser settings — for guidance, visit www.allaboutcookies.org.
Why we process your personal data
Principal uses of your personal data
For visitors to the Website and guests of 180 The Thames, we will use your personal data to interact with you regarding your use of the Website and to respond to any questions you may have about us and our services.
For guests, we will use your personal data to interact with you regarding your visit to 180 The Thames and in relation to its hospitality and other services that you have used, have requested, or may be interested in. This will include the provision of hospitality and accommodation, as well as more tailored services and special requests.
Other uses of your personal data
For visitors to the Website and guests of 180 The Thames, we will also use your personal data for some or all of the following purposes.
- To offer our services to you in a personalised way.
- To communicate with you about our services, including services you have requested from us and other information which we consider may interest you or be relevant to you. This may include communications by email or SMS. If you provide a U.S. phone number when making a reservation, we will request your consent to send reservation-related SMS messages in line with applicable U.S. messaging regulations. You have the right to opt out of direct marketing communications at any time — see “Your data protection rights” below.
- To notify you about changes to our services.
- To deal with any enquiries or complaints you or others make.
- To administer all other aspects of our relationship with you, including to keep business and accounting records, to carry out office administration, to administer and process payments you make, to verify your identity where required to use any of our services, and as otherwise required or permitted by law or in connection with running our business.
- To analyse and understand how people use our Website and/or services and to improve and develop our relationships with our guests.
- To comply with applicable laws and regulations and requests from relevant agencies and/or authorities.
- To protect our rights, interests and/or property, and/or that of our partners, you or others.
- To protect, enforce or defend our legal rights.
Sharing your personal data with others
We do not sell your personal data to third parties.
We may share your personal data with some or all of the following.
- Organisations that store and process information on our behalf, such as carefully selected service providers who work with us to help provide our services or to provide complementary services that support what we do (including administrative support and services, IT/data storage providers, maintenance services, security services, ancillary or supplementary hospitality services, and marketing/PR agencies).
- Other members of any corporate group to which 180 The Thames belongs.
- For guests of 180 The Thames, banks and payment services providers to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.
- For guests of 180 The Thames, law enforcement officials, health professionals or others in order to comply with a legal obligation or duty of care to which we are subject, or in order to protect your vital interests or the vital interests of another person.
- Our insurers and/or professional advisers (such as lawyers and accountants) insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice.
- IT service providers, website and IT/database server providers.
- For guests of 180 The Thames, fraud prevention and credit reference agencies in connection with the exchange of information for fraud protection and credit risk reduction.
- For guests of 180 The Thames, and at our guests’ explicit request only, third-party vendors when providing concierge services (e.g. booking restaurants, travel and entertainment). We will only share personal data, contact information and payment information with such vendors with your explicit prior consent.
Exceptional situations
We may also disclose your personal data in the following cases:
- Where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
- If it is necessary in connection with the transfer of all or part of our business to a third party or in connection with the transfer of all or some of our rights and duties relating to the provision of products or services to you.
Whenever your personal data is transferred to a third party, we will ensure that appropriate safeguards are in place to protect it.
International transfers of your personal data
Some of the third-party platforms we use — including Seven Rooms, SiteMinder, Mews, Unifocus, Event Temple, Daily Point, Klaviyo, and Alliants — may process personal data outside the United Kingdom. Where this is the case, we will ensure that any such transfer is subject to appropriate safeguards in accordance with UK GDPR, such as the use of UK International Data Transfer Agreements or transfers to countries that benefit from UK adequacy regulations. Further details of the safeguards in place for specific transfers are available on request by contacting us at [email protected].
Lawful bases for processing your personal data
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing your personal data are:
- Contractual necessity:where processing is necessary for the performance of our contract with you (applicable to guests and others with whom we enter into contracts).
- Legal obligations:where processing is necessary to comply with our legal obligations, such as health and safety laws, equality legislation and other regulatory requirements.
- Legitimate interests:where processing is necessary in connection with our legitimate interests and those interests are not overridden by your interests or fundamental rights and freedoms. This includes communicating with you about our services and using your personal data in connection with our own legal and compliance risk management.
- Consent:where we seek your consent, we will ensure that it is freely given, specific, informed and unambiguous. You may withdraw or modify your consent at any time by emailing us at [email protected].
Where we process personal data that constitutes a special category of personal data under Article 9 of UK GDPR (such as health data in connection with dietary requirements or health club services), we will seek your explicit consent to that processing. Where you withhold or withdraw such consent, we may not be able to provide you with certain services.
Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects, unless we have informed you separately and given you an opportunity to request human review.
How we store your personal data
Any personal data 180 The Thames holds on its own servers is securely stored in the United Kingdom.
We use a number of third-party platforms to deliver our services. Visitors and guests may wish to review the privacy notices of those platforms, which can be accessed at the following links:
We retain the personal data of guests for the duration of our relationship and as long as it is required to fulfil the relevant purposes described in this privacy policy.
We retain the personal data of Website visitors for a period of 6 months following their last visit to the Website.
We will dispose of your personal data by shredding hard copy documents and deleting all electronic records. If you would like your personal data to be deleted sooner, please contact us in writing using the details below.
Your data protection rights
Under data protection law, you have the following rights:
- Access— you can ask for a copy of your personal data.
- Rectification— you can ask us to correct inaccurate personal data and to complete incomplete personal data.
- Erasure— you can ask us to erase your personal data in certain circumstances.
- Restriction of processing— you can ask us to restrict the processing of your personal data in certain circumstances.
- Object to processing— you can object to the processing of your personal data in certain circumstances, including where we rely on legitimate interests as our lawful basis. You also have an unconditional right to object to your personal data being used for direct marketing purposes.
- Data portability— you can ask that we transfer your personal data to another organisation, or to you, in certain circumstances.
- Withdraw consent— where we rely on consent as our lawful basis, you can withdraw that consent at any time by emailing [email protected].
- Make a complaint— you can complain to the Information Commissioner’s Office (ICO) about our processing of your personal data (see below).
You are not required to pay any charge for exercising your rights. We will endeavour to respond to all requests promptly and within any legally prescribed timeframes.
These rights are subject to certain limitations and exceptions. You can learn more at ico.org.uk.
Please contact us using the details set out below if you wish to exercise any of your rights or if you have any questions about this notice.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us at [email protected].
You also have the right to complain to the ICO if you are unhappy with how we have handled your personal data.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk