Privacy
How the Business Club intends to use, protect and retain personal information.
This useful working notice is not yet the approved production privacy notice. The club must confirm the data-controller contact, lawful bases and retention periods before real personal information is collected.
What we use information for
We intend to use contact and business details to answer enquiries, assess registrations, administer approved membership and provide secure account access.
Business-directory publication and marketing messages are separate choices. Withdrawing publication should remove a profile promptly; withdrawing marketing permission should stop optional marketing.
Booking, attendee, payment-status, ticket, dietary and benefit-request information is intended only for delivering the requested service, protecting capacity and keeping an audit trail.
Retention and sharing
Enquiry records, active membership records, publication choices, event bookings, payment references, dietary details, security logs and statutory financial records require different retention periods. Dietary details should be removed after the approved event-operating window. Account, audit and finance records may need longer periods for security, dispute handling or legal obligations. The committee-approved schedule will state the exact periods before launch.
Configured service providers may process limited information on the club's behalf: Vercel for hosting, Supabase for authentication and data storage, Resend for transactional email, Stripe for card checkout, and Apple or Google when a person requests a wallet pass. Providers are activated only when configured and must be covered by the approved production arrangements.
Cookies and device storage
Secure sign-in may use essential cookies to maintain an authenticated session and protect the service. Payment and wallet providers may use their own essential technologies after you choose to use those services. The current site does not intend to use advertising cookies; any future analytics or optional cookies must be documented and, where required, offered with a clear choice before activation.
Your choices and rights
You can ask what personal information is held about you, request a correction or deletion, withdraw a publication or marketing choice, or raise a concern about its use. Some information may need to be retained where there is a valid legal, security or financial reason; the approved response process will explain any such limit.
Use the contact page to raise a privacy request. The named data-controller contact and escalation route will be added only after club approval.
