Privacy Notice

Introduction

This is the privacy notice of Meeting Store. In this document, “we,” “our,” or “us” refer to Meeting Store.
Meeting Store is a trading name of 21st Century AV Ltd, company number 03700669,
registered in England & Wales. Our registered office is Unit 4 Thames Court, 2 Richfield Avenue, Reading, England, RG1 8EQ.

21st Century AV Ltd is the data controller of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR)
and the Data Protection Act 2018. This privacy notice explains how we collect, use, store, and protect your personal data, and it outlines your rights.

How to contact us

For all privacy and data protection queries (including requests to exercise your rights), please contact:

• Email: info@meetingstore.co.uk
• Post: 21st Century AV Ltd, Unit 4 Thames Court, 2 Richfield Avenue, Reading, England, RG1 8EQ

1. The personal data we process

We may collect and process the following types of personal data:

• Identity Data – for example, name, title and (where relevant) job role.
• Contact Data – billing address, delivery address, email address and telephone number(s).
• Account Data – username, password (stored in encrypted/hashed form), account preferences.
• Transaction Data – details about payments made to and from you, and details of products and services you have purchased.
• Technical Data – IP address, browser type and version, device information, operating system, time zone, and other technical identifiers.
• Usage Data – information about how you use our website, products and services.
• Marketing & Communications Data – your marketing preferences and your interactions with marketing communications.

Payment information: We do not store full payment card details. Card payments are processed by PCI-DSS compliant payment providers.

2. Special category data

We do not intentionally collect or process special category data (such as health information, political opinions, religious beliefs,
biometric data, or data relating to criminal convictions).

3. Where we get personal data from

• Directly from you (for example, when you create an account, place an order, request a quote, or contact us).
• Automatically from your use of our website (for example, via cookies and similar technologies, subject to your choices).
• From service providers who help us operate our website and deliver our services (for example, payment and delivery providers).

4. How we use your personal data (purposes and lawful bases)

We only use your personal data where the law allows us to. The UK GDPR lawful bases we rely on include
contract, legal obligation, legitimate interests, and consent.

• To process and fulfil orders and provide services – Contract; Legal obligation.
• To create and manage your account – Contract; Legitimate interests.
• To manage payments, prevent fraud and protect our business – Legitimate interests; Legal obligation.
• To respond to enquiries and quote requests – Legitimate interests; Contract (pre-contract steps).
• To improve our website, services and customer experience – Legitimate interests and/or Consent.
• To send marketing communications – Consent and/or legitimate interests (where permitted by PECR).
• To comply with legal and regulatory obligations – Legal obligation.

Legitimate interests

Our legitimate interests include operating and improving our business, providing customer support, preventing fraud,
ensuring network and information security, understanding how customers use our website, and promoting our products and services
where permitted. We balance these interests against your rights and freedoms.

5. Marketing

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting
info@meetingstore.co.uk.

Opting out of marketing will not affect service communications such as order confirmations or account notifications.

6. Cookies and similar technologies

We use cookies and similar technologies to operate our website, remember preferences, and analyse usage.
Non-essential cookies (including analytics and marketing cookies) are used only with your consent via our cookie consent controls.

7. Data sharing

We do not sell your personal data. We may share it with trusted third parties, including payment providers, delivery partners,
IT and hosting providers, analytics and marketing providers (subject to consent), professional advisers, and authorities where required by law.

8. International transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations,
the UK International Data Transfer Agreement (IDTA), or the UK Addendum to EU Standard Contractual Clauses.

9. Data retention

• Order and invoice records: typically retained for 6 years.
• Account data: retained while your account remains active.
• Marketing data: retained until you withdraw consent or opt out.
• Customer service records: retained for a reasonable period.

10. Your rights

• Access your personal data
• Correct inaccurate data
• Request erasure (where applicable)
• Restrict processing
• Object to processing and direct marketing
• Request data portability
• Withdraw consent at any time

11. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

12. Security of your personal data

We use appropriate technical and organisational measures to protect personal data, including encryption, access controls,
and security monitoring.

13. Third-party links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy notices.

Last updated: 03 January 2026