Privacy Policy

Cheshire Padel Rentals ("we", "us", "our") is a provider of padel ball machine hire, equipment sales and community services operating across Cheshire and the North West of England.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, contact us at our contact page.

Under UK GDPR Article 6, we rely on the following legal bases to process your personal data:

• •Contract (Art. 6(1)(b)) — processing your booking, order, or payment data to fulfil our contract with you
• •Legal obligation (Art. 6(1)(c)) — retaining records for tax, accounting and regulatory compliance
• •Legitimate interests (Art. 6(1)(f)) — fraud prevention, referral tracking, and improving our services
• •Consent (Art. 6(1)(a)) — marketing emails, analytics cookies, and marketing cookies (where you have opted in)

You can withdraw consent at any time by changing your cookie preferences or unsubscribing from marketing emails.

When you create an account, we collect and store:

• •Your name and email address
• •Your mobile phone number
• •Your account role (customer, affiliate, partner club, admin)
• •Password (encrypted — we never store plain-text passwords)

We use this data to authenticate your identity, manage your account and provide access to our services.

When you make a booking, we collect:

• •Your name, email and mobile number
• •Hire package, date, time and venue details
• •Delivery address (where applicable)
• •Payment status and booking history

This data is used to process your booking, coordinate delivery/collection and provide customer support.

When you place a shop order, we collect:

• •Your name, email and delivery address
• •Order items, quantities and pricing
• •Payment status and fulfilment tracking

We use Stripe as our payment processor. We do not store your full card details on our servers. Stripe handles all payment information securely and in accordance with PCI-DSS standards.

We store transaction references, payment status and pricing breakdowns for accounting and audit purposes.

When you visit our site via an affiliate referral link, we collect:

• •Your IP address — used to attribute referral clicks and prevent fraud
• •Your user agent (browser and device type) — used for analytics and security
• •The referral code clicked and the timestamp of the visit

This data is retained for 30 days for referral attribution purposes and is processed under our legitimate interests (Art. 6(1)(f)). It is not used to identify you personally unless you subsequently create an account or make a booking.

If you apply to our Ambassador Programme, we collect:

• •Your name, email and mobile number
• •Applicant type (player, coach, content creator, etc.)
• •Social media profiles and audience size
• •Promotion plan and reasons for joining
• •Commission rate and payout method

If you apply as a partner club, we collect:

• •Club name, contact name, email and mobile
• •Club address, number of courts and court type
• •Member base and current booking platform
• •Partnership interest and revenue share rate

We use analytics tools to understand how visitors use our website. This includes data such as page views, session duration and referral sources. Analytics data is aggregated and does not identify individual users.

Analytics cookies are only set after you have given consent via our cookie banner. You can withdraw consent at any time.

We send transactional emails including booking confirmations, payment links, order updates and notifications. We also send optional marketing emails — you can unsubscribe at any time.

We log email delivery status for audit and troubleshooting purposes.

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations:

• •Account data: retained whilst your account is active and for 6 years thereafter for tax/audit purposes
• •Booking and order data: retained for 6 years for accounting compliance
• •Affiliate and partner applications: retained for 2 years after application
• •Referral click data (IP, user agent): retained for 30 days
• •Email logs: retained for 12 months
• •Analytics data: retained for 26 months
• •Cookie consent records: retained for the lifetime of the consent plus 12 months

Under UK GDPR, you have the right to:

• •Be informed about how your data is used
• •Access your personal data
• •Rectify inaccurate data
• •Erase your data (subject to legal exceptions)
• •Restrict or object to processing
• •Data portability

To exercise any of these rights, contact us at our contact page and include "Data Subject Request" in your message. We will respond within one month of receiving your request.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We do not sell your personal data. We may share data with:

• •Stripe (payment processing — UK/EEA)
• •Our hosting and email service providers
• •HMRC and other regulatory bodies where legally required
• •Partner clubs (for booking coordination only)

Your personal data is primarily processed and stored within the United Kingdom and European Economic Area (EEA).

Where any data is processed outside the UK (for example, by our hosting or email providers), we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses, to protect your data to UK GDPR standards.

Our use of cookies is described in our Cookie Policy. You can manage your cookie preferences at any time using the cookie banner on our website.

We take appropriate technical and organisational measures to protect your personal data, including:

• •Encryption of data in transit (HTTPS/TLS)
• •Row-level access controls restricting data to authorised users only
• •Secure payment processing via Stripe (PCI-DSS compliant)
• •Regular security reviews of our systems and access controls

In the unlikely event of a data breach, we will notify you and the ICO within 72 hours where required by law.