Privacy Policy

Introduction

Bowlio Bowls Management System ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web-based bowls club management system.

We comply with the General Data Protection Regulation (GDPR) and all applicable data protection laws. By using our service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, and postal address
• Club Information: Club name, location, and club-specific details
• Account Information: Username, password, and account preferences
• Payment Information: Billing address and payment method details (processed securely by Stripe)
• Usage Data: How you interact with our system, features used, and access times

Automatically Collected Information

When you use our service, we automatically collect certain information, including:

• IP address and location information
• Browser type and version
• Device information and screen resolution
• Pages visited and time spent on our site
• Referral sources and exit pages

How We Use Your Information

We use the information we collect for the following purposes:

Service Provision

• To provide and maintain our bowls club management system
• To process payments and manage subscriptions
• To provide customer support and technical assistance
• To send service-related communications and updates

Service Improvement

• To analyze usage patterns and improve our service
• To develop new features and functionality
• To conduct research and statistical analysis
• To monitor system performance and security

Legal Compliance

• To comply with legal obligations and regulatory requirements
• To protect our rights and prevent fraud
• To enforce our Terms of Service
• To respond to legal requests and court orders

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our service, such as:

• Payment processors (Stripe)
• Hosting and cloud service providers
• Customer support and communication tools
• Analytics and performance monitoring services

Legal Requirements

We may disclose your information if required by law or in response to:

• Legal subpoenas or court orders
• Government requests or investigations
• Requests to protect our rights or safety
• Requests to prevent fraud or illegal activity

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections outlined in this policy.

Data Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

• 256-bit SSL/TLS encryption for all data transmission
• Secure data centers with redundant systems
• Regular security audits and vulnerability assessments
• Multi-factor authentication for administrative access
• Encrypted database storage with access controls

Administrative Safeguards

• Limited access to personal information on a need-to-know basis
• Regular staff training on data protection and privacy
• Incident response procedures for data breaches
• Regular backup and disaster recovery procedures

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry-standard practices.

Data Retention

We retain your personal information for as long as necessary to provide our service and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for a reasonable period after deactivation
• Payment Information: Retained as required for tax and accounting purposes
• Usage Data: Typically retained for 24 months for analytics and service improvement
• Legal Obligations: Some data may be retained longer if required by law

You may request deletion of your personal information at any time, subject to legal and contractual requirements.

Your Rights

Under GDPR and other applicable laws, you have the following rights regarding your personal information:

Access and Portability

• Request a copy of your personal information
• Request data in a portable format
• Access information about how your data is processed

Correction and Deletion

• Request correction of inaccurate information
• Request deletion of your personal information
• Request restriction of processing in certain circumstances

Objection and Consent

• Object to processing based on legitimate interests
• Withdraw consent for processing (where applicable)
• Request human review of automated decisions

To exercise these rights, please contact us at privacy@bowlio.co.uk.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience with our service. For detailed information about our use of cookies, please see our Cookie Policy.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, including:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions by relevant data protection authorities
• Binding corporate rules for intra-group transfers
• Certification schemes and codes of conduct

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Email notification to your registered email address
• Prominent notice on our website
• Update to the "Last Updated" date at the top of this policy

Your continued use of our service after such changes constitutes acceptance of the updated policy.