Privacy Policy

Showcase respects your privacy and is committed to protecting your personal data.

This privacy policy explains how we collect, use, share and protect your personal data when you use the Showcase website, create or use a Showcase membership, book or attend one of our events, shop with us online or in-store, communicate with us, or otherwise interact with Showcase.

Showcase operates members-only physical and online sample-sale events in partnership with a range of brands in the United Kingdom, European Economic Area, United States and Australia.

This website and our services are not intended for children and we do not knowingly collect personal data relating to children.

1. Important information and who we are

The Showcase group

Showcase operates internationally through the following companies:

Region	Showcase company
United Kingdom	Showcase Group Limited
European Economic Area	ShowcaseCo Group EEA Limited
United States	Showcase.co Group Inc.
Australia	Showcase Group Pty Ltd

Showcase Group Limited is the UK parent company and determines the principal purposes and means by which customer personal data is processed across the Showcase group, including the operation of our common membership and technology infrastructure.

Our regional Showcase companies operate local physical and online sales, events and related services and may also be responsible for processing personal data where required by applicable local law or in connection with their local legal obligations.

For simplicity, references in this policy to “Showcase”, “we”, “us” or “our” refer to Showcase Group Limited and, where relevant to the service you are using, the applicable Showcase group company.

We use common technology platforms, policies and service providers across our regional operations. Customer accounts and personal data are assigned to the relevant Showcase region and our systems are configured to maintain regional separation of customer records and communications.

Marketing and customer communications are ordinarily managed within the region associated with your Showcase account. Personal data may be accessed or processed across the Showcase group where reasonably necessary for legitimate group purposes, such as operating and securing our common technology infrastructure, providing customer support, meeting legal or regulatory requirements or administering our business, subject to applicable data-protection and international-transfer requirements.

You do not need to determine which Showcase company to contact to exercise your privacy rights. You may contact us using the details below and we will ensure that your request is handled appropriately.

Contact us

For questions about this privacy policy, how we use your personal data or your data protection rights, please contact:

Data Protection Officer
Showcase Group Limited
167-169 Great Portland Street, 5th Floor
London, W1W 5PF
United Kingdom

Email: [email protected]

Depending on where you are located, you may also have the right to make a complaint to the relevant privacy or data-protection regulator.

Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes to our services, systems, business practices or legal obligations.

The date at the bottom of this policy shows when it was most recently updated.

It is important that the personal data we hold about you is accurate and current. Please update your account information or contact us if your personal information changes.

Third-party links

Our website may contain links to third-party websites, services or applications.

Those third parties may collect or process information independently of Showcase. We do not control their processing and encourage you to review their privacy information when using their services.

2. The personal data we collect

Personal data means information relating to an identified or identifiable individual.

Depending on how you interact with Showcase, we may collect, use, store or otherwise process the following categories of personal data.

Identity Data includes your first name, last name, title, date of birth or age information and, where provided, gender.

Contact Data includes your email address, telephone number, billing address, delivery address and other contact information.

Membership and Account Data includes your Showcase user or membership ID, username, membership type or status, account settings and preferences.

We securely store authentication information required to operate your account. Passwords are stored using appropriate technical security measures and are not available to our staff in readable form.

Event and Booking Data includes events you book or attend, booking dates and times, ticket or barcode information and related event activity.

Transaction Data includes information about online and in-store purchases, orders, payments, refunds, receipts and products or services purchased from us.

Financial Data may include payment information necessary to process transactions. Payment card information may be processed directly by our payment providers rather than stored by Showcase.

Marketing and Communications Data includes your marketing preferences, unsubscribe or suppression status, marketing communications sent to you and information relating to your interactions with those communications.

Customer Support Data includes correspondence with our customer service or support teams and information you provide when raising an enquiry, complaint or request.

Technical Data may include your IP address, login information, browser type and version, device information, operating system, time zone, approximate location or region and other technical information associated with your use of our website or services.

Technical or location information may be generated automatically and may not always accurately reflect your actual physical location.

Usage Data includes information about how you use our website, membership, events and services.

Referral and Campaign Data may include information contained in links through which you arrive at Showcase, such as referral source, campaign identifiers and UTM or similar tracking parameters.

Visual Data may include photographs, CCTV footage or other images where these are collected at Showcase premises or events.

Feedback and Survey Data includes information you choose to provide in reviews, surveys, competitions or other feedback.

We may also create aggregated or anonymised information for statistical, reporting and analytical purposes. Information that has been irreversibly anonymised so that it no longer identifies an individual is not personal data.

Special category data

We do not routinely collect special categories of personal data such as information about race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, health, genetics or biometrics.

There may be limited circumstances where you voluntarily provide information of this nature, for example when requesting an accessibility adjustment. Where this occurs, we will only process that information where permitted by applicable data-protection law and will limit its use to what is necessary for the relevant purpose.

We do not routinely collect information about criminal convictions or offences.

3. How we collect your personal data

Information you provide directly

You may provide personal data to Showcase when you:

create or manage a Showcase account or membership;
book or attend a Showcase event;
purchase products online or at a physical Showcase event or store;
provide information at our point of sale, including where you request an electronic receipt;
contact our customer service or support teams;
enter a competition, promotion or survey;
update your marketing preferences;
communicate with us by email, telephone, online form, post or in person; or
otherwise interact with Showcase.

Partner-brand referrals

Showcase operates sample-sale events in partnership with a range of brands.

A partner brand may tell its own customers about an upcoming Showcase event and provide a link to the Showcase website.

Unless we tell you otherwise, personal data that you subsequently provide when registering or booking on the Showcase website is provided directly to Showcase. The fact that a brand has directed you to Showcase does not by itself mean that the brand has transferred its customer information to us.

Where a partner brand does provide personal data to Showcase, we will only use that information where there is an appropriate lawful basis and applicable transparency requirements have been met.

Automated collection

When you use our website or online services, we may automatically collect Technical, Usage and Referral and Campaign Data through server logs, cookies and similar technologies.

Please see our Cookie Policy for more information about the technologies we use and the choices available to you.

Service providers and other sources

We may receive information from organisations that support our services, including payment and banking providers, ecommerce and point-of-sale providers, website and infrastructure providers, analytics and security providers, delivery and logistics providers, and other service providers involved in delivering our services.

4. How we use your personal data

We only use personal data where we have an appropriate lawful basis.

Depending on the activity and applicable law, this may include:

performance of a contract, where processing is necessary to provide a service you have requested or take steps at your request before entering into a contract;
legitimate interests, where processing is necessary for our legitimate business interests and those interests are not overridden by your interests, rights or freedoms;
legal obligation, where processing is necessary to comply with a legal or regulatory requirement; or
consent, where the law requires us to obtain your consent or we otherwise choose to rely upon consent.

Electronic marketing and similar communications are also subject to applicable electronic-marketing laws in the relevant region.

Our main processing activities

Purpose	Types of personal data	Main lawful basis
Creating and administering your Showcase membership/account	Identity, Contact, Membership and Account	Performance of a contract
Registering you for events and administering bookings, tickets and attendance	Identity, Contact, Membership and Account, Event and Booking	Performance of a contract
Processing online and in-store purchases, payments, refunds and receipts	Identity, Contact, Transaction, Financial	Performance of a contract; legal obligation where applicable
Delivering transactional and service communications	Identity, Contact, Membership, Event and Booking, Transaction	Performance of a contract and/or legitimate interests
Providing customer service and handling enquiries, complaints and requests	Identity, Contact, Membership, Transaction, Event and Booking, Customer Support	Performance of a contract and/or legitimate interests
Sending eligible members/customers information about upcoming Showcase sample-sale events	Identity, Contact, Membership and Account, Event and Booking, Marketing and Communications	Legitimate interests where permitted, subject to applicable electronic-marketing law
Maintaining marketing preferences, objections and suppression records	Identity, Contact, Marketing and Communications	Legitimate interests in respecting customer preferences and ensuring marketing compliance
Administering and protecting our website, systems and business, including fraud prevention, troubleshooting and security	Identity, Contact, Technical, Usage, Membership and Account, Transaction	Legitimate interests; legal obligation where applicable
Understanding how customers use our website, events and services and improving them	Technical, Usage, Membership and Account, Event and Booking, Transaction	Legitimate interests and/or consent where required
Complying with accounting, tax, regulatory and legal requirements	Identity, Contact, Transaction, Financial	Legal obligation
Establishing, exercising or defending legal claims	Relevant information depending on the circumstances	Legitimate interests and/or legal obligation

The precise lawful basis may differ where required by the laws applicable to a particular Showcase company, customer or processing activity.

5. Direct marketing

Showcase sale-event marketing

Showcase operates members-only sample-sale events featuring a range of partner brands.

We may use your name, email address, membership information, event or booking information and marketing preferences to tell you about upcoming Showcase sample-sale events.

The rules governing electronic marketing vary between regions. We will only send direct electronic marketing where permitted under the laws applicable to the relevant communication.

Regional marketing

Showcase membership and marketing records are segmented by region.

We ordinarily send marketing relating to the Showcase region in which your account is registered and do not use membership of one regional Showcase service as a basis for routine marketing by another Showcase regional company.

If you move to another region or otherwise ask to use Showcase services in another region, we may update the region associated with your account or ask you to update your preferences as appropriate.

Electronic marketing is sent in accordance with the privacy and electronic-marketing requirements applicable to the relevant region.

UK customers

Where permitted by the Privacy and Electronic Communications Regulations 2003 (“PECR”), we may send sale-event marketing using the products and services soft opt-in.

We only rely upon the soft opt-in where the applicable requirements are satisfied, including where:

the relevant Showcase entity obtained your contact details directly from you in connection with a sale or negotiations for a sale of its products or services;
the marketing concerns its own similar products or services;
you were given a clear opportunity to opt out when your details were collected; and
you are given a clear and simple opportunity to opt out in each subsequent marketing communication.

Showcase sample-sale events may feature different partner brands. Where we rely upon the soft opt-in, the marketing is limited to our own similar services, including communications about upcoming Showcase sample-sale events.

Where UK GDPR applies, our lawful basis for processing personal data for this form of direct marketing is our legitimate interests in informing existing Showcase members and customers about upcoming Showcase sample-sale events and promoting our services.

Customers in other regions

For customers outside the UK, we will send electronic direct marketing only where permitted by applicable local law, including any requirements concerning consent, existing customer relationships, identification of the sender and opt-out or unsubscribe mechanisms.

Your marketing choices

You can opt out of Showcase direct marketing at any time by:

selecting an available marketing opt-out when registering;
using the unsubscribe link contained in our marketing emails;
using any available marketing preference controls in your Showcase account; or
contacting us.

Where applicable data-protection law gives you a right to object to direct marketing, we will honour that right.

When you opt out, we may retain the minimum information necessary on a suppression list to ensure that your preference continues to be honoured.

Third-party marketing

We do not provide your personal data to partner brands or other independent third parties so that they can use it for their own direct marketing unless we have an appropriate lawful basis to do so.

Where consent is legally required for such marketing or sharing, we will obtain the necessary consent.

Transactional and service communications

Opting out of marketing does not prevent us from sending communications necessary to operate your Showcase membership, administer an event booking or order, provide a ticket or receipt, respond to a customer-service request, communicate important changes to our services or otherwise administer our relationship with you.

6. How we share your personal data

Within the Showcase group

Customer data is ordinarily processed within the Showcase region associated with the customer’s account.

Our common technology infrastructure nevertheless means that personal data may be accessed by or shared with Showcase Group Limited, ShowcaseCo Group EEA Limited, Showcase.co Group Inc. and Showcase Group Pty Ltd where reasonably necessary to:

operate, support and secure our common technology and membership platforms;
manage regional events, bookings, ecommerce and in-store sales;
provide customer service;
administer customer accounts and marketing preferences;
provide group administration, finance and operational support;
analyse and improve our services; or
comply with legal, regulatory and compliance requirements.

Access to personal data across regions is limited according to operational need, our internal access controls and applicable law.

Routine regional marketing is not a purpose for which customer information is shared between Showcase regional companies.

Service providers and other recipients

We may share personal data where necessary with organisations that help us operate our business and provide our services, including:

website hosting, cloud infrastructure and IT providers;
membership and booking systems;
email marketing providers;
transactional email and communications providers;
ecommerce and point-of-sale providers;
payment processors and banking providers;
delivery, logistics and fulfilment providers;
customer-support and ticketing systems;
analytics, security and fraud-prevention providers;
professional advisers, including accountants, auditors, insurers and lawyers;
tax authorities, regulators, courts, law-enforcement agencies and other public authorities where required or permitted by law; and
prospective buyers, investors or advisers in connection with a merger, acquisition, restructuring or sale of all or part of our business.

Where a service provider processes personal data on our behalf, we require it to handle the information appropriately and in accordance with applicable data-protection requirements.

Some organisations may act as independent controllers for their own processing, for example certain payment providers, financial institutions or regulatory authorities. Their own privacy information will apply to that processing.

We do not sell personal data for monetary consideration.

7. International operations and transfers

Showcase operates internationally through group companies in the United Kingdom, European Economic Area, United States and Australia.

We use common technology platforms and service providers across these regional operations.

This means personal data may be stored, accessed or processed in countries outside the region in which it was originally collected, including by other Showcase group companies and by our service providers.

Where applicable data-protection law restricts international transfers of personal data, we use an appropriate lawful transfer mechanism.

Depending on the countries and organisations involved, this may include:

transfers to countries or organisations recognised as providing an adequate level of protection;
applicable adequacy or data-bridge arrangements;
approved contractual safeguards, including applicable standard contractual clauses, the UK International Data Transfer Agreement or UK Addendum; or
another transfer mechanism permitted under applicable law.

We also require our service providers to protect personal data appropriately and comply with applicable data-protection requirements.

You may contact us for further information about safeguards applicable to international transfers of your personal data.

8. Data security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to personal data is limited to employees, contractors, group companies, service providers and other authorised persons who require it for legitimate purposes.

Those persons are required to handle personal data appropriately and, where applicable, are subject to confidentiality and data-protection obligations.

We maintain procedures for identifying, investigating and responding to suspected personal-data breaches and will notify affected individuals and relevant regulators where required by applicable law.

No internet-based service can be guaranteed to be completely secure, but we regularly review our security arrangements and take measures appropriate to the nature of the information we process.

9. Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing our services and satisfying applicable legal, accounting, tax, regulatory and reporting requirements.

Different categories of personal data are therefore retained for different periods.

When determining an appropriate retention period, we consider:

the nature, amount and sensitivity of the personal data;
the purposes for which it is processed;
whether those purposes can be achieved in another way;
the risk associated with unauthorised use or disclosure;
our relationship with you; and
applicable legal, accounting, tax and regulatory requirements.

Certain transaction, accounting and tax records may need to be retained for statutory periods after a transaction or customer relationship ends. This does not necessarily mean that all information associated with your membership or account will be retained for the same period.

Customer-service and complaint records may be retained for an appropriate period where necessary to manage the matter, demonstrate how it was handled or establish, exercise or defend legal claims.

Where you object to or opt out of direct marketing, we may retain limited identifying information on a suppression record for as long as reasonably necessary to ensure that we continue to honour your preference.

Where personal data is no longer required, we will delete or anonymise it in accordance with our retention practices, subject to applicable legal or regulatory requirements.

We may retain irreversibly anonymised information for statistical or analytical purposes.

10. Cookies and similar technologies

Our website uses cookies and similar technologies.

Some technologies are strictly necessary for our website or services to operate. Others may be used for analytics, functionality, personalisation or advertising where permitted.

Where applicable law requires consent before a cookie or similar technology is placed or accessed, we will request that consent through our cookie controls.

You can review or change your available cookie choices through those controls.

Please see our Cookie Policy for information about the cookies and similar technologies currently used by Showcase, their purposes, providers and duration.

11. Automated decision-making and profiling

We may use data to understand how our customers use Showcase and to improve our services and communications.

We do not currently use solely automated decision-making that produces legal effects, or similarly significant effects, on individuals.

If this changes, we will provide the information required by applicable data-protection law about the processing involved and the rights available to you.

12. Your privacy rights

The privacy rights available to you may depend on where you live and which Showcase service you use.

Depending on applicable law and the circumstances, these may include rights to:

request access to personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion or erasure of personal data;
request restriction of certain processing;
object to certain processing, including direct marketing;
obtain or request portability of certain personal data;
withdraw consent where processing is based on consent; and
complain to the relevant privacy or data-protection regulator.

UK and EEA customers

Where UK GDPR or EU GDPR applies, you may have rights of access, rectification, erasure, restriction, data portability and objection as provided by applicable law.

Your right to object to processing of your personal data for direct-marketing purposes is absolute. If you exercise that right, we will stop processing your personal data for that purpose.

Where we rely upon legitimate interests for other processing, your right to object depends upon the circumstances and we may continue processing where permitted by law.

Customers in other regions

Where applicable US federal or state privacy law or Australian privacy law provides additional or different rights, we will handle eligible requests in accordance with those requirements.

Exercising your rights

You do not need to determine which Showcase group company holds particular information before contacting us.

You may contact our Data Protection Officer using the details in this policy. We will identify the relevant Showcase company, processing activity and applicable law and coordinate the response where necessary.

We may request information reasonably necessary to verify your identity before responding. This helps prevent personal data being disclosed to someone who is not entitled to receive it.

We will respond within the time period required by applicable law.

13. Regional privacy requirements

Showcase operates in a number of jurisdictions and applicable privacy requirements may differ depending on your location and the services you use.

Our processing may therefore be subject, as applicable, to laws including:

the UK GDPR, Data Protection Act 2018 and applicable electronic-communications and marketing laws in the United Kingdom;
the EU GDPR and applicable national privacy and electronic-marketing laws in the European Economic Area;
applicable federal and state privacy and marketing laws in the United States; and
the Privacy Act 1988, Australian Privacy Principles and applicable marketing laws in Australia.

Where applicable local law gives you additional rights or protections beyond those described in this policy, we will apply those requirements to the relevant processing.

14. Contact us

For questions about this privacy policy, how Showcase uses your personal data or to exercise your privacy rights, please contact:

Data Protection Officer
Showcase Group Limited
167-169 Great Portland Street, 5th Floor
London, W1W 5PF
United Kingdom

Email: [email protected]

We will coordinate with the appropriate Showcase group company where your enquiry relates to one of our regional operations.

Last updated: October 2026