Privacy Policy and Fair Processing Notice

Last updated: 15 October 2026

This Privacy Policy and Fair Processing Notice explains how NetSide Padel Ltd collects, uses, shares and protects personal data when you visit our website, submit an enquiry or form, follow a link to a separate booking platform, book a court, register for an event or tournament, enquire about coaching, or interact with our padel club and facility. It also explains how we handle forms submitted by potential users of our website and maintained in Squarespace.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and other applicable UK data-protection law.

1. Who we are

NetSide Padel Ltd is the data controller for the personal data covered by this notice.

Company number: 16751057
Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
Website: www.netsidepadel.co.uk
Privacy contact: hello@netsidepadel.co.uk

A data controller decides why and how personal data is processed. Where another organisation processes data for us, we normally appoint it as a data processor and require it to handle personal data only under our instructions and appropriate contractual safeguards.

Please contact us using the details above if you have a question about this notice, wish to exercise a data-protection right, or believe that your data has been handled incorrectly.

2. The personal data we collect

The data we collect depends on how you interact with us. It may include:

  • Identity data, such as your name, title, date of birth or age bracket, profile photograph and parent or guardian details where relevant.

  • Contact data, such as email address, telephone number, postal address and emergency-contact details where you choose to provide them.

  • Limited account data, if a separate booking platform or future service requires an account, such as your username, customer ID, account preferences and login-related records. The website itself does not currently provide a members area. Passwords should be stored by the relevant service in a protected form; we do not normally have access to your password in readable form.

  • Customer-service and communication data, such as enquiries, feedback, complaints, correspondence, call notes and records of preferences.

  • Marketing data, such as your subscription status, consent or objection, the communications sent to you, and your interaction with those communications where applicable.

  • Technical and usage data, such as IP address, browser type, device type, operating system, approximate location, referring website, pages viewed, interaction events, session information and cookie identifiers.

  • Information about accessibility or health requirements is not currently requested proactively through the website. If you choose to provide such information, we may use it only where necessary to respond to your request or support a safe or accessible booking, coaching session or event. We will treat information that qualifies as special-category data with additional care and will explain the relevant condition for processing when it is collected.

Please do not provide information about another person unless you are authorised to do so. If you make a booking for a child or another participant, you should ensure that you have authority to provide their information and share this notice with them where appropriate.

3. How we collect personal data

We collect personal data through:

  • Direct interactions, including website contact, feedback and application forms, forms submitted by potential coaches, players or partners, emails, telephone calls and in-person contact. These forms are maintained in Squarespace.

  • Automated technologies, including server logs, cookies, pixels, tags and similar technologies used on our website.

  • Cookie and preference controls made available through Squarespace, including its built-in cookie-banner and consent functionality.

  • Information provided by someone making a registration on your behalf, such as a team captain, parent or employer.

4. Lawful bases for processing

We use one or more of the following lawful bases, depending on the purpose and the circumstances:

Performance of a contract

We process data where it is necessary to enter into or perform a contract with you.

Legal obligation

We process data where necessary to comply with a legal obligation. Examples may include accounting and tax records, responding to lawful requests from authorities, maintaining records required by law, and establishing, exercising or defending legal claims.

Legitimate interests

We may process data where it is necessary for our legitimate interests, or those of a third party, provided that those interests are not overridden by your rights and interests. Our legitimate interests may include operating and improving the club and website, preventing fraud and misuse, managing complaints, keeping systems secure, administering relationships with customers and suppliers, and sending limited service-related communications.

Before relying on legitimate interests, we consider the purpose, necessity, impact on individuals and any safeguards or reasonable expectations that apply. You may object to processing based on legitimate interests; see section 10.

Consent

We rely on consent where required by law or where we choose to ask for it. This includes non-essential analytics or marketing cookies and certain electronic marketing activities where consent is required under PECR. Consent must be freely given, specific, informed and unambiguous. You may withdraw it at any time using the controls described in section 6 or by contacting us.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Some services may not work fully if you refuse processing that is necessary for the service you have requested.

5. How and why we use personal data

We may use personal data to:

  • register and administer events, tournaments, leagues and coaching sessions;

  • process enquiries, feedback, complaints and requests for support;

  • review and respond to forms submitted by potential coaches, players and partners;

  • respond to accessibility or health-related information only where it is proactively provided by a website user and relevant to their request;

  • personalise services and remember relevant preferences;

  • understand how visitors use our website, diagnose technical issues and improve website performance and usability;

  • measure the effectiveness of communications and marketing where permitted and in accordance with your preferences;

  • send club news, tournament information, offers and other marketing where permitted by law and consistent with your choices;

  • protect the safety and security of customers, staff, visitors, premises and systems;

  • detect, prevent and investigate fraud, abuse, unauthorised access and other unlawful activity;

  • establish, exercise or defend legal claims; and

  • comply with legal, regulatory, accounting and reporting requirements.

We do not use personal data for solely automated decision-making that produces legal or similarly significant effects on you. If this changes, we will provide the information required by UK GDPR and explain how to request human intervention or challenge the decision.

6. Cookies and tracking technologies

Our website uses cookies and similar technologies. A cookie is a small file placed on your device. Some cookies are necessary for the website or a service you request to function. Others help us remember preferences, understand website usage or support marketing.

Squarespace cookie controls

We use the cookie-banner and consent functionality available through Squarespace to present information about non-essential cookies and record your choices. The consent record may include the date and time of your choice, the categories selected, the website or device context and a technical identifier needed to remember that choice.

Cookie categories

  • Strictly necessary cookies: required for core website functions, security, session management and consent preferences. These do not normally require consent.

  • Functional or preference cookies: used to remember choices and improve functionality. Where required, we ask for consent before using them.

  • Tracking or analytics cookies: used to understand website usage or measure performance. These are non-essential and will be placed only where the required consent has been obtained.

  • Marketing or advertising cookies: used to support or measure marketing and advertising activity. These are non-essential and will be placed only where the required consent has been obtained.

The current cookie-preference interface is provided through Squarespace. The preference centre presents grouped information about cookie and tracking categories, such as essential, functional, tracking or analytics, and marketing, rather than necessarily displaying every cookie individually. Further information about the technologies used can be requested from us.

You can withdraw or change consent at any time by reopening the cookie-preference controls on the website. You can also delete cookies or restrict them through your browser settings, although this may affect website functionality.

7. Direct marketing

We may send service messages that are necessary to provide our services to you. These are not marketing messages and cannot necessarily be opted out of while you continue to use the relevant service.

We may send marketing about club news, tournaments, coaching, offers and related activities where permitted by PECR and where we have a lawful basis. Depending on the circumstances, this may be based on your consent or the limited soft opt-in for existing customers, where the legal conditions are met and you were given a clear opportunity to opt out when your details were collected and in every subsequent message.

Every electronic marketing message will include a straightforward unsubscribe or preference-management option. You may also contact us at hello@netsidepadel.co.uk. We will retain a limited suppression record where necessary to ensure that an opt-out is respected.

8. Data sharing and third-party disclosures

The website is hosted and its forms are maintained through Squarespace. A separate booking platform is planned and will be linked from the website in the future.

We may share personal data with the following categories of recipients, only where necessary and proportionate:

  • Squarespace, which hosts the website, maintains website forms and supports related website functionality.

  • Professional advisers, insurers, auditors and service providers who need information to provide services to us and are subject to confidentiality or data-protection obligations.

  • Courts, regulators, law-enforcement bodies, government authorities or other third parties where disclosure is required by law or necessary to protect rights, safety or property.

  • A buyer, investor or successor organisation in connection with a proposed or completed business sale, restructuring or transfer, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal data. We require processors to use personal data only for authorised purposes, maintain appropriate security and assist us with data-protection obligations.

9. International data transfers

Some of our suppliers, including technology, analytics, hosting, communications or payment providers, may process personal data outside the UK or the European Economic Area.

Where a transfer is subject to UK transfer rules, we will use an applicable lawful mechanism and appropriate safeguards, such as:

  • a UK adequacy regulation or other recognised adequacy decision;

  • the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses; and/or

  • another lawful transfer mechanism under UK GDPR.

Where required, we will also consider whether supplementary technical, contractual or organisational measures are necessary. You may contact us for more information about the safeguards applicable to a particular transfer, subject to the protection of confidential and security-sensitive information.

10. Data security and retention

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction. Measures may include access controls, authentication, role-based permissions, supplier due diligence, secure configuration, backups, logging, staff awareness and incident-management procedures. No internet transmission or electronic storage system can be guaranteed to be completely secure.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, tax, reporting, dispute and security requirements. Retention depends on the type of data, the sensitivity and volume of data, the likelihood and impact of a claim, whether the relationship remains active, and applicable legal or regulatory requirements.

Indicative retention principles include:

  • website enquiry and form data: for as long as needed to respond to the enquiry or application and for a proportionate period afterwards to deal with queries, disputes, fraud prevention and legal claims. If a future booking platform requires an account, its account data will be retained for the relevant service and claims period;

  • booking, event and coaching records: for as long as needed to administer the service and then for a proportionate operational, safety or claims period;

  • enquiries, complaints and correspondence: for as long as needed to resolve the matter and for a proportionate period afterwards;

  • marketing data: until you unsubscribe, withdraw consent or become inactive, except for a limited suppression record needed to prevent further marketing; and

  • cookie and consent records: for the period needed to demonstrate and administer your choices, subject to applicable legal requirements and the provider’s configuration.

When retention is no longer necessary, we securely delete, anonymise or irreversibly de-identify the information. Backups may retain information for a limited period until they are securely overwritten.

11. Your data-protection rights

Subject to legal conditions and exemptions, you may have the right to:

  • request access to your personal data and information about how we process it;

  • ask us to correct inaccurate or incomplete personal data;

  • ask us to erase personal data where there is no good reason for us to continue processing it;

  • ask us to restrict processing in certain circumstances;

  • object to processing based on legitimate interests, including profiling based on those interests;

  • object at any time to direct marketing, including related profiling;

  • receive certain personal data in a structured, commonly used and machine-readable format and ask us to transmit it to another controller where the right to data portability applies; and

  • withdraw consent where processing is based on consent.

These rights are not absolute. For example, we may need to retain information to comply with a legal obligation, establish or defend a legal claim, or maintain a suppression record. We may ask for information to verify your identity and may request clarification where necessary to locate the relevant data.

To exercise a right, contact hello@netsidepadel.co.uk. We will normally respond within one month of receiving a valid request, although this period may be extended by up to two further months for complex or multiple requests. We will tell you if an extension is necessary. We do not normally charge a fee, but we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive, as permitted by law.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Postal address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concern first, but you have the right to contact the ICO at any time.

12. Changes to this Privacy Policy

We may update this notice from time to time to reflect changes to our services, suppliers, technology, legal requirements or processing activities. The latest version will be published on this page with its effective date. Where a change is material, we will take additional steps to bring it to your attention where required.

13. Further information

This notice is intended to provide a clear summary of our main processing activities. Additional information may be provided at the point of collection, in booking or membership terms, in cookie-preference tools, on facility signage or in event-specific notices. If there is a conflict between this notice and a specific statutory notice, contract or legal requirement, the applicable specific notice, contract or requirement will govern to the extent of the conflict.