Privacy policy

Who we are

Park & Paddock provides booking software to venue-hire operators. This policy covers personal data we handle as the platform. Each operator you book with is a separate data controller for their own customers; the confirmed operating entity and its registered details will be named here before launch.

What we collect

• Account details: name, email address, and phone number where you provide one.
• Booking details: the venue, dates, times, and payment status of your bookings.
• Technical data: basic logs needed to keep the service secure and working.

We do not sell personal data, and we keep it out of logs, links, and emails beyond what a message needs to do its job.

Legal basis (UK GDPR)

• Performance of a contract: to take and manage your booking.
• Legitimate interests: to keep the service secure and to improve it.
• Legal obligation: to keep records we are required to retain, such as for tax.

Where data is stored

Data is held in the United Kingdom and European Union. Our database is hosted in a London region, and we avoid routing personal data through providers outside that footprint unless there is no reasonable alternative.

Processors we rely on

• Supabase: database, authentication, and file storage.
• Vercel: application hosting.
• Stripe: payment processing.
• Resend and Twilio: email and SMS notifications.

Retention

We keep booking and account records for as long as needed to run the service and to meet legal retention periods, then remove or anonymise them. The exact windows will be listed here once finalised.

Your rights

You can ask to see, correct, export, or erase your personal data, and object to certain processing. Where records must be retained for legal reasons, we anonymise rather than delete so the rest of your data still goes.

Contact

For any privacy question or request, email lucas@lucasyoung.com. We respond in writing, and we aim to do so promptly.