Privacy policy

Who we are

Park & Paddock provides booking software to venue-hire operators. This policy covers personal data we handle as the platform. Each operator you book with is a separate data controller for their own customers; the confirmed operating entity and its registered details will be named here before launch.

This website, today

The booking platform described below is being built. Right now this is a marketing site, and the only personal data it handles is what you choose to type into the enquiry form.

• What you send us through the enquiry form is delivered to us as an email and is not written to any database. There is no mailing list and nothing is stored at rest.
• We use Vercel Analytics to count visits. It is cookieless, does not fingerprint your device, and does not identify you, which is why this site shows no cookie banner.
• The demo site is sample data. Nothing you type into it is sent anywhere or kept.

What we collect

• Account details: name, email address, and phone number where you provide one.
• Booking details: the venue, dates, times, and payment status of your bookings.
• Technical data: basic logs needed to keep the service secure and working.

We do not sell personal data, and we keep it out of logs, links, and emails beyond what a message needs to do its job.

Legal basis (UK GDPR)

• Performance of a contract: to take and manage your booking.
• Legitimate interests: to keep the service secure and to improve it.
• Legal obligation: to keep records we are required to retain, such as for tax.

Where data is stored

Data is held in the United Kingdom and European Union. Our database is hosted in a London region, and we avoid routing personal data through providers outside that footprint unless there is no reasonable alternative.

Processors we rely on

• Resend: delivery of the enquiry emails from this site. In use today.
• Vercel: application hosting, and cookieless visit analytics. In use today.
• Supabase: database, authentication, and file storage. For the booking platform.
• Stripe: payment processing. For the booking platform.
• Twilio: SMS notifications. For the booking platform.

Only the first two are in use at the moment, because the rest belong to the booking platform rather than this site.

Retention

We keep booking and account records for as long as needed to run the service and to meet legal retention periods, then remove or anonymise them. The exact windows will be listed here once finalised.

Your rights

You can ask to see, correct, export, or erase your personal data, and object to certain processing. Where records must be retained for legal reasons, we anonymise rather than delete so the rest of your data still goes.

Contact

For any privacy question or request, email hello@parkandpaddock.com. We respond in writing, and we aim to do so promptly.