Privacy Policy
Last updated 24 September 2026.
This policy explains what personal data Walkspace collects, why, who we share it with, and the rights you have over it. It covers three groups: the clients who buy our tours, the people who walk those tours, and the businesses we contact to offer our service.
On this page
1. Who we are
Walkspace provides photoreal 3D virtual tours of venues, embedded on our clients' own websites, with a monthly analytics report. For the data described here, Walkspace is the data controller.
You can reach us at [email protected]. Walkspace is registered for VAT in the United Kingdom, VAT number GB501919507. Our postal address is available on request. This site and its services are aimed at businesses in the United Kingdom, and we handle personal data in line with the UK GDPR and the Data Protection Act 2018.
2. What we collect and why
If you are a client (you buy a tour)
We collect the business and contact details we need to run your account: your name, your business name, email address, phone number where you give it, the venue details, and the address of the person who receives your monthly report. Payment is handled by Stripe; we do not see or store your full card details, only a record that an invoice was raised and paid. We use this to deliver the service, bill you, and support you. The legal basis is performance of our contract with you, and our legitimate interest in running and improving the service.
If you walk a tour
When someone views a Walkspace tour embedded on a client's website, we record how the tour is used so we can give the venue its monthly report: for example the number of visits, how long people stayed, roughly where they moved within the space, and which links or details they opened. We also keep the path a visitor took and the direction the view was facing, shown to the venue as an anonymous replay with no name, device or time of day attached. When a visitor follows a link from a tour to the venue's own enquiry page, the link carries a source tag and a random click reference so the venue can see the enquiry began in the tour; if the venue has added our confirmation tag to its enquiry page, that page tells us the reference was confirmed; neither identifies the visitor. We also process technical data that any website receives, such as an IP address, browser and device type, handled by our hosting provider to serve the tour and keep it secure.
We do not ask tour visitors for their name, email or any account, and we do not try to identify individual visitors. The report a venue receives is about patterns, not people. The legal basis is our legitimate interest, and our clients', in understanding how their tour performs and in running the service securely.
If we contact you about our service
We keep a list of businesses that may benefit from Walkspace, so we can introduce ourselves. The details are business contact details, such as the business name, a business email address, a website and a public address, gathered from public sources like company websites, public directories and the Companies House register. We use this to decide who to contact and to write a relevant message. The legal basis is our legitimate interest in marketing our service to relevant businesses. You can object at any time; see Marketing and outreach below. For a venue we have contacted we keep the business contact details and a short note of what we sent and any reply, only while the venue may still be relevant, and you can write to [email protected] to have them deleted at any time. We also note when the demo page we made for the venue is opened, as a count and the times, with no cookies and nothing about the person who opened it.
Some of the public data we use asks to be credited. Map data comes from OpenStreetMap contributors, under the Open Database Licence (ODbL). Grant data comes from 360Giving, under CC BY 4.0.
3. Cookies and analytics
Our marketing site and the tour use only what they need to work. We do not use third-party advertising cookies and we do not track you across other websites. A tour may keep a small amount of information in your browser to remember your place or a setting during a visit. A client's report is reached through a private link and reads its own settings from that link and from your browser, not from a shared profile of you.
4. Who we share it with
We do not sell your data. We share it only with the service providers we need to run Walkspace, and only for that purpose, with one exception below that is not a provider of ours. Each recipient is bound to protect it.
| Recipient | What for |
|---|---|
| Cloudflare | Hosting the site, the tours and the platform, and keeping them secure. |
| Stripe | Taking payment and issuing invoices. |
| Sending and drafting email from our own mailbox, and calendar scheduling. | |
| Anthropic | An AI assistant that helps us draft and prioritise our own work. We do not send it tour-visitor identities. We also use it to read the public text of a business's own website when we are deciding whether to contact them, with email addresses and phone numbers removed first. |
| Typesafe | Runs Jev, a tool that helps us sort which businesses to contact and why. It sees public business text about a venue, such as the headings on its website and the source of a reason to write to it, never a person's contact details. |
| The venue whose tour you walked (not a service provider of ours) | The source tag and click reference on the link you followed, and it may send the reference back to confirm an enquiry; no name, email or device data. |
We may also share data if the law requires it, or to protect our rights, or as part of a sale or reorganisation of the business, in which case any new owner would be bound by this policy.
5. Where your data is held
Some of the providers above are based outside the United Kingdom, including in the United States. Where data leaves the UK, we rely on the safeguards the law provides, such as the UK's adequacy decisions or standard contractual clauses, so it stays protected.
6. How long we keep it
- Client account and billing records: for as long as you are a client, and then for as long as we must keep them by law, which for tax and accounting records in the UK is six years.
- Tour usage data: kept while it is useful for your reports, and then aggregated or removed. If you cancel, your tour stays live for 90 days and is then taken down.
- Outreach lists: kept while a business may still be relevant to us, and removed when you ask us to or when it is no longer relevant.
7. Your rights
Under UK data protection law you can ask us to: give you a copy of the personal data we hold about you; correct it if it is wrong; delete it; restrict or object to how we use it; or provide it in a portable form. Where we rely on your consent, you can withdraw it at any time. To exercise any of these, email [email protected]. We will respond within one month.
8. Marketing and outreach
When we contact a business to introduce Walkspace, we write from a personal mailbox, one message at a time, and every message tells you how to say no. If you tell us you are not interested, we stop and we keep a note only so that we do not contact you again. You can opt out at any time by replying to any message or emailing [email protected]. We do not send automated bulk marketing.
9. Security
We protect data with encryption in transit, access controls, and by keeping credentials out of our code and out of public view. Report links are private and carry their access in the part of the link that is never sent to our servers in a request log. No system is perfectly secure, but we take reasonable steps to keep yours safe and we will tell you and the regulator if a breach requires it.
10. Children
Walkspace is a service for businesses. It is not intended for children and we do not knowingly collect data about them.
11. Changes to this policy
We may update this policy as the service changes or the law requires. The date at the top shows when it last changed. If a change is significant, we will tell affected clients directly.
12. Contact and complaints
For any question about this policy or your data, email [email protected]. If you are not satisfied with our response, you can complain to the UK's Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.