What data we collect
When you use Venco, we collect the following personal data:
- Name and email address — provided when you create an account or make a booking.
- Phone number — optionally provided in your player profile.
- Booking history — records of courts booked, venues visited, amounts paid.
- Payment information — card payments are processed by Stripe. Venco does not store your card number, expiry, or CVV. Stripe retains payment data in accordance with their privacy policy.
- Usage data — pages visited, searches made, and how you interact with the platform (used to improve the service).
How we use your data
We use the data we collect to:
- Process and confirm your bookings.
- Send booking confirmation and reminder emails.
- Allow venues to contact you regarding your booking if necessary.
- Maintain your account and booking history.
- Improve the Venco platform based on how people use it.
- Comply with legal obligations.
We do not use your data for automated decision-making or profiling that has a legal or similarly significant effect on you.
Data sharing
We share your data only in the following circumstances:
- With venues — your name and contact details are shared with the venue when you make a booking, so they can manage your session.
- With Stripe — payment information is shared with Stripe to process your payment securely. Stripe is PCI DSS compliant.
- With Resend — your email address is passed to Resend (our email delivery provider) to send you booking confirmations and reminders.
- Legal obligations — we may disclose your data if required to do so by law or in response to a valid legal request.
We never sell your personal data to third parties. We never share it for advertising purposes.
Your rights under UK GDPR
As a UK resident, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your account and associated data, subject to legal retention requirements.
- Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
- Right to data portability — you can request your data in a structured, machine-readable format.
- Right to object — you can object to our processing of your data where we rely on legitimate interests.
To exercise any of these rights, email us at hello@venco.co.uk. We will respond within 30 days.
Cookies
Venco uses essential cookies only. These are required for the platform to function and cannot be disabled without breaking core features.
Essential cookies we use:
- Authentication cookies — set by Supabase to keep you logged in. These expire when you sign out or after a period of inactivity.
- Consent cookie — a simple flag stored in your browser's localStorage to remember that you've accepted our cookie notice.
We do not use advertising cookies, tracking pixels, or any third-party analytics cookies.
Data retention
We retain your personal data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (for example, transaction records).
Contact and complaints
For any privacy-related questions or to exercise your rights, contact us at hello@venco.co.uk.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
ICO registration number: [ICO-REGISTRATION-NUMBER]