Privacy Policy

Depending on how you use our services, we may collect:

• Identity data — your name
• Contact data — email address and phone number
• Booking data — dates, times, activities, number of players, and payment amounts
• Account data — password (stored as a secure hash, never in plain text)
• Marketing preferences — whether you've opted in to receive offers from us
• Technical data — IP address, browser type, and pages visited (via cookies — see Section 6)

We do not collect any special category data (such as health data or ethnicity).

We only send marketing emails if you've explicitly ticked the opt-in box when booking or creating an account. We'll never add you to a mailing list without your consent.

You can unsubscribe at any time — every marketing email has an unsubscribe link at the bottom, or you can contact us and we'll remove you straight away.

We share your data only where necessary:

• Worldpay — to process card payments securely. We never see or store your full card number.
• Supabase — our database and authentication provider, hosted on AWS in the EU.
• Mailchimp — to send marketing emails if you've opted in.

We do not sell your data to third parties. We do not share it with advertisers.

Where we use processors based outside Jersey, we ensure they provide an equivalent level of protection — either through adequacy decisions or standard contractual clauses.

We use a small number of cookies:

• Session cookies — to keep you logged in while you browse and book. These are essential and cannot be disabled.
• Preference cookies — to remember your theme preference (light / dark).

We do not currently use advertising or third-party tracking cookies. If that changes, we'll update this policy and ask for your consent.

Booking records are kept for 7 years for accounting and legal compliance purposes.

If you delete your account, your profile data is removed. Booking records linked to your account are anonymised rather than deleted, as we need them for financial records.

Marketing opt-in records are kept until you unsubscribe, and then retained for a further 2 years as evidence of your prior consent.

Under the Data Protection (Jersey) Law 2018 you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to legal retention obligations)
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — at any time for processing based on consent (e.g. marketing)

To exercise any of these rights, please contact us. We will respond within one month.

If you're unhappy with how we've handled your data, you have the right to complain to the Jersey Office of the Information Commissioner (JOIC).