PRIVACY POLICY

We collect information you provide when you:

• Book catering services - Name, email, phone, event date, guest numbers, dietary requirements
• RSVP to events - Name, email, phone, number of guests
• Subscribe to our newsletter - Email address
• Order tickets or merchandise - Name, email, phone, delivery address, order details
• Contact us - Name, email, message content

We also collect:

• Website usage data - Through cookies and analytics (see Cookie Policy below)
• Technical data - IP address, browser type, device type (anonymised)

We never collect: Credit card details, payment information (handled securely by third parties), sensitive personal data (unless you voluntarily provide dietary/medical requirements for catering).

We use your information to:

• Process bookings - Confirm catering orders, event RSVPs, ticket purchases
• Communicate with you - Send booking confirmations, event reminders, respond to enquiries
• Send newsletters - Only if you opted in (you can unsubscribe anytime)
• Improve our services - Understand website usage, fix technical issues
• Legal compliance - Meet our legal obligations as a registered social club

Legal basis:

• Consent - You gave explicit permission (e.g., newsletter signup)
• Contract - Necessary to fulfil bookings and services
• Legitimate interests - Running our club efficiently and safely

Website hosting: Netlify (USA)

Our website is hosted by Netlify, Inc. in the United States. We have a Data Processing Agreement (DPA) with Netlify to ensure your data is protected to UK GDPR standards, even though it's stored outside the UK/EU.

Form submissions:

• Collected via Netlify Forms and stored securely
• Protected by encryption in transit and at rest
• Accessible only by authorised club staff

International transfers: By using our website, you consent to your data being processed in the USA under appropriate safeguards (Netlify DPA, Standard Contractual Clauses).

After these periods, we securely delete or anonymise your data unless we're legally required to keep it longer.

We do not sell or rent your personal data. We only share it with:

• Service providers:
  • Netlify (website hosting and forms)
  • Google Analytics (website usage statistics)
  • Email service provider (newsletters - if applicable)
• Legal authorities: If required by law or to protect our rights
• Event partners: Only with your consent for specific events

All third parties are contractually obligated to keep your data secure and use it only for the purposes we specify.

Under UK GDPR, you have the right to:

If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk

Cookies are small text files stored on your device when you visit our website. We use cookies to:

Essential Cookies

Required for the website to function (e.g., remembering your cookie preferences). These cannot be disabled.

Analytics Cookies (Google Analytics)

Help us understand how visitors use our site (e.g., which pages are popular, how long people stay). Data is anonymised. You can opt out via the cookie banner.

Cookies We Use:

You can control cookies through your browser settings or our cookie banner. Disabling cookies may affect website functionality.

We protect your data using:

• HTTPS encryption - All data transmitted securely
• Secure hosting - Netlify's enterprise-grade infrastructure
• Access controls - Only authorised staff can access form data
• Regular backups - Data protected against loss
• Password protection - Strong passwords required for all accounts

While we take security seriously, no internet transmission is 100% secure. Please don't send sensitive personal information (e.g., medical records) via our forms.

Our website is not directed at children under 13. If you're a parent and believe your child has provided us with personal information, please contact us so we can delete it.

We may update this policy occasionally. Changes will be posted on this page with a new "Last Updated" date. Significant changes will be highlighted on our homepage.

For questions about this Privacy Policy or how we handle your data:

This privacy policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.