Privacy notice

Who we are

SKRATCH Indoor Golf Limited (SKRATCH GOLF) is committed to protecting and respecting your privacy. For the purposes of UK data protection law, the data controller is SKRATCH Indoor Golf Limited, registered number 15811260, with registered office at 6 Hinchwick Court, Dorridge, Solihull, England, B93 8DF. Our data protection contact is Paul Dakin, CEO, contactable at admin@skratch-golf.co.uk.

Information we collect

• Your name.
• Your date of birth, to provide the correct membership or pricing and to take adequate measures to protect our guests.
• Your email address, for booking confirmations and internal marketing purposes only.
• Your home address, to link a registration to you. It is not used for any other internal purpose or sold to any third parties.
• Your mobile number, to provide information about your bay booking, such as your bay allocation and bay PIN, and to send you links to this notice, our terms and our safety leaflet.
• Social handles and comments on our social media channels.
• Certain information from your mobile device, such as your mobile identifier, device type and IP address.

How we use it

• Responding to your requests for information or services, including newsletters and marketing programmes you have opted into.
• Enabling online bookings to reserve a bay.
• Telling you about new products, services, events, competitions and offers, where you have opted in.
• Displaying a member's username on leaderboards in the venue and on digital platforms.
• Enhancing guest experiences, analysing customer behaviour and trends, and measuring the effectiveness of our marketing.

If you send an enquiry through this website, we use your details to answer it. We only add you to our marketing list if you tick the box asking to hear about events, offers and what's on. We do not sell or rent your personal information to third parties. You can unsubscribe from marketing at any time using the link in those emails or by contacting us; allow up to 72 hours for the change to take effect.

Our lawful bases

UK data protection law requires a lawful basis for each use of your personal data. Ours are:

• Performance of a contract, or steps taken at your request before one: processing bookings, memberships and enquiries you send us.
• Legitimate interests: running and securing the venue (including CCTV), preventing fraud and misuse, and understanding how our services are used.
• Consent: marketing communications, which you can withdraw at any time.
• Legal obligation: where we must keep or share information to comply with the law, for example age verification and licensing requirements.

Cookies

This website sets no cookies of its own. Two optional things do set cookies, and neither loads until you allow it in the cookie banner:

• Analytics: Google Analytics, which we use to see which pages are visited and how the site is used. IP addresses are anonymised. Google's cookies (such as _ga) last up to two years.
• Interactive map: by default we show a static map image that sets no cookies. If you allow it, an interactive Google map replaces it; Google sets its own cookies when that loads and handles that data under Google's privacy policy.

You can change your choice at any time using the Cookie settings link in the footer. Choosing essential only removes the analytics cookies we can reach; your choice itself is remembered in your browser's local storage, not in a cookie. Booking takes place on Alba's own website, which is governed by Alba's own cookie and privacy policies.

Sharing your information

• Bookings are made on Alba, our booking platform. Personal data you provide during booking is collected on Alba's platform and handled under Alba's own privacy policy as well as this notice.
• Enquiries and event sign-ups sent through this website are stored in our customer relationship system, provided by HighLevel Inc., which processes that data only on our behalf.
• For events with limited places, the number of places taken per session is counted in a store provided by Upstash, Inc. Only a running total is held there, never names or contact details.
• We share personal information with other service providers, such as email providers, only for the purpose of providing our services to you. We require them to protect it and to use it only on our behalf.
• We may be required to share personal information under judicial or governmental orders, or to investigate or prevent illegal activity, fraud or threats to anyone's safety.
• In the event of a transfer or sale of some or all of our business or assets, personal information may be disclosed to those involved.

Where your data is stored, and for how long

Booking data is stored in the UK by our booking software. Enquiries are stored in our customer relationship system, provided by HighLevel Inc., a company based in the United States; where personal data is transferred to the United States, we ensure the safeguards required by UK law are in place, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.

We keep personal data no longer than necessary for the purposes described in this notice, or as required by law. Enquiry details are kept for as long as needed to deal with your enquiry and any follow-up you ask for. We review our retention periods regularly.

Security

SKRATCH takes appropriate technical, administrative and physical measures to keep your personal information confidential and to guard against its loss or misuse. No card details are stored by SKRATCH Indoor Golf Limited; payments are handled by compliant third-party providers.

Event sign-ups and children's privacy

We do not knowingly collect personal information from children under 13 without the consent of a parent or guardian.

Some of our events, such as junior taster sessions, are signed up to by a parent or guardian on this website. For those we collect the parent or guardian's name, email address and phone number, the child's first name and age, the session chosen, whether you have agreed to photos or video of the child being used, and whether you have asked to hear about future sessions. The parent or guardian is our contact throughout; we do not contact the child directly. We use these details to run the event, to confirm the place and send practical information beforehand, and, only where you have ticked the box to ask for it, to tell you about clubs in Warwickshire she can join and similar sessions afterwards.

Photo and video consent is optional and separate from the sign-up. You can withdraw it at any time by emailing admin@skratch-golf.co.uk, and we will stop using the material and remove it from channels we control. If you have not asked to hear about future sessions, we delete your sign-up details once the event has taken place and any practical follow-up is complete. If you have ticked the box to hear about clubs and future sessions, we keep your contact details for that purpose until you unsubscribe or ask us to stop.

Social media log-in

If you create an account or log in through a third-party social media service (Google, Facebook or X), we may collect personal data already associated with that account, such as your name and email address. If you choose to share additional information this way, you give us permission to use and store it consistently with this notice.

CCTV

We use CCTV in and around the venue for the security of our team and guests, with notice of its operation provided on site. Coverage includes the entrance, car park, cafe, corridors, walkways and bays, and is never used in personal locations such as toilets. Footage may be shared with the police to assist criminal investigations and with our insurers for evidential purposes.

Your rights

• Right to be informed about what data is collected, how it is used, how long it is kept and whether it is shared.
• Right of access to a copy of the information we hold on you.
• Right of rectification of inaccurate or incomplete data.
• Right to be forgotten: in certain circumstances you can ask us to erase your personal data.
• Right of portability: in some circumstances you can ask us to transfer your data to another company.
• Right to restrict processing in some circumstances.
• Right to object to certain types of processing, such as direct marketing.
• Rights related to automated decision-making and profiling.

To exercise any of these rights, or to update or verify your information, contact us as below. We may need to retain certain information where required or permitted by law.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113, though we would welcome the chance to resolve any concern with you first.

Changes & contact

We may update this notice from time to time; changes will be reflected on this page. For questions or privacy requests, email admin@skratch-golf.co.uk or write to us at 40 Ludgate Hill, Birmingham B3 1ER.