Privacy Policy

Last Updated: June 03, 2026

[Club Name/Company Name] ("we," "our," or "us") operates the [App Name/Platform Name] application. This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our club services, slot booking features, event booking systems, wallet circle points, and payment functionalities.

We process your data in compliance with the General Data Protection Regulation (GDPR) and secure your data interaction paths in adherence to the Payment Card Industry Data Security Standard (PCI-DSS).

1. Data We Collect

To provide efficient club management and booking experiences, we collect the following categories of Personal Data:

• Identity Data: Full name, date of birth, membership ID, and profile photos.
• Contact Data: Email address, mobile phone number, and physical billing address.
• Club Activity Data: Slot booking histories, sports/amenity preferences, and event attendance logs.
• Wallet Circle Points Ledger: Balance history, earning actions, redemption logs, and loyalty tier status.
• Technical Transaction Data: Razorpay Order IDs, Payment IDs, refund references, IP addresses, and application logs.

2. Payment Data and Financial Security (PCI-DSS Compliance)

We do not store, process, or transmit credit card, debit card, or banking credentials on our application servers.

• All payment processing is handled securely by our integrated third-party payment gateway, Razorpay.
• Your interaction with payment forms is protected via secure hosted frames (iframes) or tokens, routing transaction credentials directly to Razorpay's PCI-DSS compliant infrastructure.
• Our systems only store tokenized references returned by Razorpay (such as orderId and paymentId) to verify transaction signatures, track wallet updates, and issue refunds.

3. How We Use Your Data (Legal Basis for Processing)

Under GDPR, we process your information under the following legal bases:

• Performance of a Contract: To manage your club membership, confirm slot bookings, process event payments via Razorpay, and track your wallet point balances.
• Legitimate Interests: To improve application performance, maintain security logs, and prevent fraudulent bookings.
• Consent: To send you optional promotional updates regarding upcoming club events or wallet bonus circles. You can withdraw your consent at any time.

4. Data Sharing and Third-Party Processors

We share your data with strictly vetted service providers necessary for our operations:

• Razorpay Financial Services: To process membership fees, bookings, and refunds securely.
• Cloud Infrastructure Providers: To securely host our application servers and databases using encryption-at-rest.

We do not sell, trade, or rent your personal information to third parties.

5. Your Rights Under GDPR

If you are an EU resident, or if your local jurisdiction mandates data privacy protections, you hold the following rights:

• Right to Access: You may request a comprehensive copy of all personal information we hold about you.
• Right to Rectification: You can update or correct inaccurate profile information through your app settings.
• Right to Erasure ("Right to be Forgotten"): You can request the complete deletion of your account and associated slot/event histories, subject to local financial record retention laws.
• Right to Data Portability: You can request that we export your data and wallet history in a machine-readable format.
• Right to Restrict Processing: You can object to your data being used for marketing or analytical profiling.

To exercise these rights, please contact our Data Protection Officer at: [Insert Support Email Address].

6. Data Security and Encryption

We implement robust, industry-standard administrative, physical, and technical controls to safeguard your information:

• All data transmitted between the app, backend servers, and Razorpay is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
• Databases storing member credentials and wallet point histories are protected by advanced encryption-at-rest.
• Application log files (ILogger) explicitly strip out sensitive personal identifiers to prevent accidental exposures.

7. Data Retention

We retain your personal profile, wallet ledgers, and booking histories only for as long as your club membership remains active. Transaction-related logs associated with Razorpay IDs are retained for [Insert Number, e.g., 7 years] to comply with local financial audit and tax regulations.

8. Contact Us

If you have any questions about this Privacy Policy, your rights, or our security practices, please contact us at:

• Email: [Insert Email Address]
• Address: [Insert Club Physical Address]
• Phone: [Insert Contact Number]