Crazy Karting – Privacy Policy
At Crazy Karting, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller Information
The data controller responsible for your personal information is:
Crazy Karting Crazy Kartin, Unit 2 Raglan St, Bolton, BL1 6NR
info@crazykarting.co.uk
01204 800 709
2. Personal Data We Collect
When you use our website or book a karting session, we may collect the following personal data:
- Booking Information:
- Name, phone number, and email address.
- Date and time of your booking.
- Payment Information:
- Payment details (e.g., credit/debit card information) are processed securely through a third-party payment provider. We do not store your financial information.
- Website Usage Data:
- IP address, browser type, device information, and pages visited (collected via cookies – see Section 6).
- Marketing Preferences:
- If you opt in, we may collect your preferences to send promotional emails or updates.
3. How We Use Your Data
We use your personal data for the following purposes:
- To manage bookings:
- Processing and confirming your reservations.
- Sending booking confirmations or reminders.
- Customer communication:
- Notifying you of any changes to your booking.
- Responding to inquiries or requests.
- Marketing and promotions:
- With your consent, sending promotional emails about offers, events, or updates.
- You can unsubscribe from marketing emails at any time.
- Improving our website:
- Analyzing website traffic to enhance user experience.
4. Legal Basis for Processing Data
We process your personal data based on the following legal grounds:
- Contractual Obligation:
- To fulfill your booking and provide the karting experience.
- Legitimate Interest:
- To improve our services and website functionality.
- Consent:
- For marketing communications (you can withdraw consent at any time).
- Legal Compliance:
- To meet legal or regulatory obligations (e.g., fraud prevention).
5. Data Sharing and Third Parties
We do not sell or rent your personal data. However, we may share it with:
- Service Providers:
- Payment processors for secure transactions.
- IT and website hosting providers.
- Legal Authorities:
- If required by law or legal proceedings.
All third parties are contractually obligated to handle your data securely and in compliance with GDPR.
6. Cookies and Tracking Technologies
Our website uses cookies to enhance your experience. Cookies are small text files stored on your device.
- Types of Cookies We Use:
- Essential Cookies: Required for the website to function properly.
- Analytical Cookies: Used to analyze website traffic and improve performance.
- Marketing Cookies: Used for personalized advertising (only with your consent).
You can manage cookie preferences through your browser settings or by using the cookie consent banner on our website.
7. Data Security and Retention
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption: Secure transmission of sensitive data (e.g., payment information).
- Access Control: Restricted access to authorized personnel only.
- Regular Security Reviews: Periodic audits to maintain data security.
Data Retention Periods:
- Booking records: Retained for 12 months.
- Marketing data: Retained until you opt out.
- Legal and financial records: Retained as required by law.
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request corrections to inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data (subject to legal obligations).
- Right to Object: Object to data processing for marketing purposes.
- Right to Data Portability: Request transfer of your data to another service provider.
- Right to Withdraw Consent: You can withdraw consent for marketing communications at any time.
To exercise your rights, contact us at: [Insert Contact Email]
9. Data Transfers Outside the EEA
If we transfer your personal data outside the European Economic Area (EEA), we will ensure it is protected by appropriate safeguards, such as:
- Standard contractual clauses approved by the European Commission.
- Transferring only to countries with adequate data protection standards.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Please review this page periodically for updates.
Any changes will be posted on our website.