Privacy Policy

At Puffin Padel, we respect your privacy. We only collect the personal data we need to provide our services — like booking courts, sending you updates, or improving your experience. We never sell your data. You're always in control and can contact us anytime about your information.

1. Who We Are

This website (puffinpadel.com) is operated by:

Puffin Padel Limited. Registered in England & Wales.
Registered address: 128 City Road, London, EC1V 2NX, United Kingdom.
Email: hello@puffinpadel.com.
Company number: 16474440.

We are the data controller, which means we’re responsible for deciding how and why your personal data is used.

2. What Information We Collect

We may collect and process the following personal data:

a) Information you provide:

Your name, email address, and address.
Billing and shipping address.
Payment details (via secure providers – we don’t store card data).
Booking details.
Account login credentials.
Messages or enquiries sent via contact forms.
Survey responses or competition entries.

b) Information we collect automatically:

IP address, browser type, device, and operating system.
Pages you visit and actions on the site.
Cookies and other tracking data (see Section 6).

3. Why We Use Your Information

We only use your personal data when legally allowed. Here’s what we use it for and why:

To take bookings and process payments - Contractual necessity.
To communicate with you - Consent or legitimate interest.
To send you marketing (if you opt in) - Consent.
To improve our website and services - Legitimate interest.
To comply with legal requirements - Legal obligation.
To prevent fraud and ensure security - Legitimate interest / legal obligation.

4. Who We Share It With

We only share your data with trusted third parties who help us operate our services. These may include (partner - purpose - location):

Stripe / PayPal - Payment processing - EU / US (SCCs used).
Calendly - Booking management - US (SCCs used).
Mailchimp - Marketing email delivery - US (SCCs used).
Google Analytics - Website usage tracking - US (IP anonymised).
Cloud hosting - Secure website infrastructure - UK / EU.

We ensure these partners handle your data with care and only as instructed. No data is sold to anyone, ever.

5. International Transfers

Some of our service providers (like Mailchimp and Calendly) are based outside the UK and EU. When data is transferred internationally, we ensure it is protected using:

UK and EU-approved Standard Contractual Clauses (SCCs).
Additional safeguards, where required.
Regular risk assessments of these providers.

You can contact us to request a copy of these safeguards.

6. Cookies and Tracking

We use cookies and similar technologies to:

Remember your preferences and login status.
Analyse how our site is used.
Show relevant offers (if you’ve opted into marketing).

Cookie Categories

Essential - Needed for core site functionality - No consent required.

Analytics - Helps us improve our site - Consent required.

Marketing - Personalised ads or email tracking - Consent required.

7. How Long We Keep Your Data

We don’t keep personal data longer than necessary (data type and retention period):

Booking and purchase records - 7 years (for tax/accounting).
Enquiries - 12 months (unless you request deletion).
Marketing subscriptions - Until you unsubscribe.
User accounts - Until deletion or 2 years of inactivity.

We regularly review and securely delete data that’s no longer needed.

8. Your Rights Under UK & EU Law

You have full control over your data. Your rights include:

Access – Get a copy of your personal data.
Correction – Fix inaccurate data.
Erasure – Ask us to delete your data.
Restriction – Limit how we use your data.
Portability – Transfer your data to another provider.
Objection – Stop certain uses, like marketing.
Withdraw consent – Any time, for anything based on your consent.

To exercise any of these rights, email us at hello@puffinpadel.com. We’ll respond within 30 days.

You also have the right to lodge a complaint with:

UK: Information Commissioner’s Office (ICO).
EU: Your local Data Protection Authority (DPA).

9. Children’s Privacy

Our site is not intended for children under 18. If we learn we have collected personal data from a child without parental consent, we will delete it promptly.

10. How We Keep Your Data Secure

We take your data seriously and use:

Secure SSL encryption.
Two-factor authentication for admin access.
Regular software updates.
Restricted access to your data (only trained staff).
Encrypted backups stored securely.

11. Changes to This Policy

We may update this policy from time to time. When we do, we’ll:

Post the updated version here.
Update the “last revised” date.
Notify you if changes are significant (via email or banner).

12. Contact Us

If you have any questions or concerns about your data, please get in touch:

Data Protection Officer - hello@puffinpadel.com.
Address: Puffin Padel Limited, 128 City Road, London, EC1V 2NX, United Kingdom.

Change Log

13 June 2025 - Initial version published, UK/EU GDPR compliant