Draft: final wording to come from the venue.
Acacia Ridge Squash & Fitness
Privacy policy
What this website collects about you, why, and who can see it. It describes the site as it is built; the venue adds its own final wording before the site goes live.
What we collect
- When you book a court: your name, email address and phone number, and the booking itself (the court, the time, the price and any extras, such as racket hire).
- When you send us a message: your name, your email address, your phone number if you give it, the subject, what you write and any booking reference.
- When you create an account: your name, email address and phone number. Your password is kept by the site’s sign-in service in a form no one can read back, our staff included.
- When you ask us to tell you if a booked time frees up (“Tell me if it frees up”): your email address, and the court and time you asked about. Nothing else: no name and no phone number.
- When you sign up for a round robin or the friendly comp: your name, your email address, your phone number if you give it, and the night you signed up for.
- The address of your internet connection, to limit how many bookings, messages, “Tell me” requests and sign-ups can be sent from one connection in an hour. This site’s database keeps only a scrambled form of it, for a couple of days. Cloudflare receives it with each bot check (see “Who can see it”).
Why we use it
- To take your booking, email you about it (the confirmation, any change or cancellation, and a reminder) and let you change or cancel it.
- To reply to your messages.
- To tell you if a time you asked about frees up: one email when you ask, to say we will (with a link to cancel), and one email if it frees up. We never use your address for anything else.
- To put you down for a round robin or comp night, email you about your spot (when you sign up, if you move up from the reserve list, and if your spot is cancelled), and so our staff know who’s playing and can reach you on the night.
- To stop programs from misusing the booking, message, “Tell me” and sign-up forms.
Who can see it
- Our staff, to run the courts and answer messages. The staff screens don’t show who has asked to be told if a time frees up: an address shows there only if an email to it couldn’t be sent, and only until the time it was about has passed.
- Our staff see who has signed up for each round robin and comp night (names, email addresses and phone numbers), to run the night.
- Nobody else on the website: anyone looking at the courts sees only that a time is booked, never who booked it, and anyone looking at What’s on sees only how many spots are left, never who signed up.
- Cloudflare Turnstile checks that a person, not a program, is sending the booking, message, “Tell me” and sign-up forms, or starting a live chat on a conversation’s private page. Cloudflare receives your connection’s address with each check and handles it under its own privacy policy.
Links in our emails
Our booking emails and our replies to messages carry a private link to your booking or conversation. Anyone with the link can open it, so please don’t share it. Each link stops working after a while.
Our “Tell me if it frees up” emails carry a private link to cancel the alert, which also deletes your email address straight away. It shows only the court and time you asked about, never your address, and stops working once that time has started.
Our round robin and comp emails carry a private link to your spot, where you can cancel it. It shows the night and your name, never your email address or phone number, and stops working once the night has started.
How long we keep it
A “Tell me if it frees up” request, your email address included, is deleted automatically within a few minutes of the time it was about starting. If you cancel it with the link in its email, your address is deleted at once.
A round robin or comp sign-up, your name, email address and phone number included, is deleted automatically 30 days after the night. One you don’t confirm with the link in its email is deleted once the night starts. Our change log keeps a note that a sign-up was made, changed or cancelled, with none of those details and no link to your account.
To come from the venue: how long booking, message and account details are kept, and how to ask for them to be removed.
Where it is kept
To come from the venue: the services that host the website (Vercel), its database (Supabase, in Sydney), its emails (Resend) and its bot check (Cloudflare), and where each keeps data.
Questions
Call us on (07) 3275 1962, or send us a message.