Privacy Notice

Last updated: [25 February 2026]

This Privacy Notice explains how Castle Forum uses personal information when you visit our website, sign up for updates, contact us, or engage with our event communications.

1. Who we are

Castle Forum is currently an unincorporated UK non-profit initiative.

Until a company or charity is formally registered, Castle Forum is currently operated by Nathan Castle and Micael Johnstone, who are jointly responsible for how personal data is used for the purposes described in this notice (the “controllers”).

Contact details
Email: info@castleforum.co.uk
Postal address: 52 Glenloch Road, London, NW3 4DL, United Kingdom
Website: castleforum.co.uk

If you have any questions about this Privacy Notice or how we use your personal data, please contact us using the details above.

2. What this notice covers

This notice applies to personal data we process in connection with:

  • the Castle Forum website

  • newsletter and email updates

  • event announcements and speaker announcements

  • enquiries sent to us by email or via the website

  • links to external event registration platforms (including Eventbrite)

3. The personal data we collect

Depending on how you interact with us, we may collect and use:

  • Identity and contact data (such as your name and email address)

  • Subscription data (such as when you subscribed, mailing list status, and unsubscribe status)

  • Communications data (such as emails or messages you send us)

  • Event-related data you provide directly to us (if applicable)

  • Technical and usage data from website use (for example browser/device information, IP-related technical logs, and website analytics data, where used and permitted)

We do not intentionally collect special category personal data for newsletter subscriptions.

4. How we collect your personal data

We collect personal data:

  • directly from you, for example when you subscribe to updates, contact us, or use our website

  • from existing Castle Debates subscriber records, where you previously subscribed to receive updates and Castle Forum is continuing communications following the rebrand from Castle Debates to Castle Forum

5. Why we use your data and our lawful basis

We use personal data for the following purposes:

A. To send newsletter and event updates (including speaker announcements and Castle Forum news)

  • Personal data used: name, email address, subscription status

  • Lawful basis (UK GDPR): Consent (where you have subscribed to receive email updates)

B. To manage unsubscribe requests and maintain suppression lists

  • Personal data used: email address, unsubscribe status

  • Lawful basis (UK GDPR): Legal obligation and/or Legitimate interests (to comply with direct marketing rules and ensure we do not send marketing emails to people who have opted out)

C. To respond to enquiries and communications

  • Personal data used: name, email address, message content

  • Lawful basis (UK GDPR): Legitimate interests (running and administering Castle Forum communications)

D. To operate, secure and improve our website

  • Personal data used: technical and usage data

  • Lawful basis (UK GDPR): Legitimate interests, and where required, Consent (for non-essential cookies or similar technologies)

For marketing emails, we also comply with applicable UK electronic marketing rules (PECR), including identifying ourselves and providing an unsubscribe option.

6. Marketing emails and your choices

You have the right to stop receiving marketing emails from us at any time.

You can do this by:

  • clicking the unsubscribe link in any marketing email we send, or

  • contacting us at info@castleforum.co.uk

If you unsubscribe or object to direct marketing, we will stop sending you marketing emails.

7. Withdrawal of consent

Where we rely on your consent (for example for newsletter/event update emails), you can withdraw that consent at any time by unsubscribing or contacting us.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

8. Who we share your data with

We may share personal data with trusted service providers that help us run Castle Forum, such as:

  • Squarespace (website hosting and email campaigns)

  • Google Workspace (email hosting, if used)

  • Eventbrite (where you click through and register for an event on Eventbrite)

  • professional advisers or service providers where reasonably necessary (for example IT support or legal/accounting support, if used)

These providers may process personal data on our behalf where they act as processors.

If you register for an event through Eventbrite, your data will also be processed by Eventbrite under Eventbrite’s own privacy terms and notices.

9. International transfers

Some of our service providers may process personal data outside the UK.

Where personal data is transferred outside the UK, we take steps to ensure appropriate safeguards are in place in accordance with UK data protection law.

10. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this notice.

Newsletter and mailing list data

  • We keep subscriber details while you remain subscribed.

  • If you unsubscribe, we may keep limited information (such as your email address and unsubscribe status) on a suppression list so we can ensure we do not send you further marketing emails.

Enquiries and correspondence

  • We usually keep enquiry emails and related correspondence for up to 24 months from the last substantive contact, unless we need to keep them longer for a legitimate reason (for example to deal with a complaint or legal issue).

Website and technical data

  • Retention periods depend on the relevant system/provider and the purpose for which the data was collected.

11. Cookies and similar technologies

Our website may use cookies and similar technologies.

Where we use non-essential cookies (for example analytics or marketing cookies), we will request your consent through our cookie banner/settings tool where required by law.

You can also manage cookies through your browser settings.

12. Your data protection rights

Subject to applicable law, you may have rights to:

  • access your personal data

  • correct inaccurate personal data

  • erase your personal data

  • restrict processing

  • object to processing (including direct marketing)

  • data portability (in certain circumstances)

  • withdraw consent where processing is based on consent

To exercise your rights, contact us at info@castleforum.co.uk.

13. Complaints

If you have concerns about how we use your personal data, please contact us first and we will try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.

14. Changes to this Privacy Notice

We may update this Privacy Notice from time to time.

We will publish the latest version on this page and update the “Last updated” date above.