1. Introduction
Pull Up Basketball (“we,” “our,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
We are a youth basketball academy operating in Hertfordshire, UK. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We collect the following types of information:
- Personal identification information: Name, email address, phone number, postal address
- Child information: Child's name, date of birth, age group, medical notes
- Payment data: Payment card details (processed securely through Stripe — we never store full card numbers)
- Usage data: How you interact with our website, booking history, session attendance
- Communication data: Messages sent through our contact form, email correspondence
3. How We Use Your Information
We use your information to:
- Process and manage your bookings and payments
- Communicate about sessions, cancellations, and important updates
- Provide customer support and respond to enquiries
- Ensure the safety and safeguarding of all children in our care
- Improve our services and website experience
- Comply with legal and regulatory obligations
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance: Processing necessary to fulfil booking agreements
- Consent: Marketing communications (you can opt out at any time)
- Legal obligation: Safeguarding records, financial records required by law
- Legitimate interests: Improving services, operational communications
5. Data Sharing
We may share your information with:
- Stripe: Payment processing (their privacy policy applies to payment data)
- Resend: Email delivery for booking confirmations and notifications
- Twilio: SMS notifications (only if you opt in)
- Legal authorities: When required by law or to protect safety
We never sell your personal data to third parties.
6. Data Retention
We retain your personal data for as long as your account is active and for a reasonable period thereafter (up to 6 years) to comply with legal obligations, resolve disputes, and enforce agreements. Child safeguarding records are retained in accordance with statutory guidance.
7. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise these rights, contact us at Info.pullupbball@gmail.com.
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure data storage, and access controls. However, no method of transmission over the internet is 100% secure.
9. Contact
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at Info.pullupbball@gmail.com.