Legal

Privacy Policy

DRAFT — requires solicitor review. This page is a working placeholder and does not constitute legal advice. It is not the final policy and must be reviewed and approved by a qualified data-protection solicitor before Euro Padel Travel relies on it. Last updated 7 August 2026.

This policy explains how Euro Padel Travel (“we”, “us”, “our”) collects, uses and protects your personal data when you use our website or enquire about or book a trip. We are the data controller. We aim to comply with the UK GDPR and the Data Protection Act 2018.

Company details: EURO PADEL TRAVEL LTD is a company registered in England & Wales, company number 17431897. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Data protection contact: privacy@europadeltravel.com. We have not appointed a statutory Data Protection Officer, as we are not required to under Article 37 of the UK GDPR.

What data we collect

  • Enquiry & contact details — name, email, phone number, destination, dates, group size and any message you send us through our enquiry form.
  • Booking & member details — the information needed to organise a trip for you and your group, including each member's name, email and phone number.
  • Payment data — deposits and balances are processed by our payment provider (Stripe). We do not store full card numbers; card handling is carried out by Stripe as processor.
  • Messaging opt-ins — where you opt in, we record consent to contact you by email and/or WhatsApp, together with the type, source and timestamp of that consent.
  • Technical & cookie data — see our Cookie Policy.
  • Website usage data — where you consent to analytics cookies, how you use the site (pages viewed, how you arrived, device and approximate location) via Google Analytics, and aggregated age, gender and interest data via Google Signals. See Analytics and Google Signals below.

How and why we use it (lawful bases)

  • To respond to enquiries and organise your trip — performance of a contract, or steps taken at your request before entering a contract.
  • To take payment and manage deposits and balances — performance of a contract.
  • To send trip and account updates — legitimate interests and/or contract (transactional messages are not marketing).
  • To send marketing — only where you have given explicit, separate opt-in consent, which you can withdraw at any time.
  • To understand how the site is used — consent, given through the cookie banner and withdrawable at any time.
  • To meet legal obligations — for example tax and accounting record-keeping.

Who we share it with

We share personal data only where necessary, with processors and partners acting on our instructions or as needed to deliver your trip:

  • Payment processing — Stripe.
  • Hosting, database and authentication — Vercel (hosting) and Supabase (database and sign-in).
  • Email — Resend, who send our enquiry and booking emails.
  • Telephone enquiries — ElevenLabs, who provide the automated voice assistant that answers our “call now” line.
  • Travel suppliers — hotels, venues and other suppliers where sharing your details is needed to deliver the trip you book.
  • Website analytics — Google (Google Analytics 4 and Google Signals), only where you consent to analytics cookies.
  • Professional advisers and authorities where required by law.

We do not sell your personal data. We only market to people who have opted in.

International transfers

Some of our providers process personal data outside the UK. Where they do, the transfer is covered either by UK adequacy regulations or by the International Data Transfer Addendum to the EU Standard Contractual Clauses, which each provider offers as part of its data processing agreement.

  • Database, accounts and file storage — Supabase, hosted in the EU (AWS Ireland, eu-west-1). Covered by the UK adequacy regulations for the EEA.
  • Website hosting — Vercel, a US provider serving from edge locations worldwide, under the UK Addendum.
  • Payments — Stripe, contracted through Stripe Payments Europe Ltd in Ireland, with onward transfer to the US under the UK Addendum.
  • Email — Resend, a US provider, under the UK Addendum.
  • Telephone enquiries — if you use our “call now” line, the call is answered by an automated voice assistant provided by ElevenLabs, a US provider, under the UK Addendum. What you tell it is written into an enquiry record so that a human can call you back.
  • Website analytics — Google, a US provider, under the UK Addendum, and only where you have consented to analytics cookies.

If you want to know which safeguard applies to a particular transfer, ask our data protection contact at privacy@europadeltravel.com.

How long we keep it

We keep personal data only as long as we need it for the purposes above and to meet our legal, accounting and tax obligations, then delete or anonymise it.

  • Enquiries that do not become bookings — 24 months from your last contact with us.
  • Telephone enquiry records — 24 months, the same as any other enquiry.
  • Booking, payment and accounting records — six years after the end of your trip. That is the period HMRC requires us to keep tax records for, and it covers the three years the Companies Act 2006 requires of a private company.
  • Our marketing suppression list — kept indefinitely. If you unsubscribe, we have to keep a record of your email address for the sole purpose of never emailing you again; deleting it would let you drift back onto a list.
  • Website analytics — retained by Google for the period set on our Analytics property, and only where you consented to analytics cookies in the first place.

Your rights

Under UK GDPR you have the right to:

  • access a copy of your data;
  • have inaccurate data corrected;
  • have your data erased in certain circumstances;
  • restrict or object to certain processing;
  • data portability; and
  • withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, contact us at the address below. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd ask you to raise it with us first.

Analytics and Google Signals

Where you accept analytics cookies, we use Google Analytics 4 to measure how the site is used. IP anonymisation is switched on, and we do not send Google your name, email address or phone number.

We also have Google Signals enabled. If you are signed in to a Google account and have Ads Personalisation switched on in your own Google settings, Google may associate your visit with that account and give us aggregated reporting on the age, gender and interests of our visitors, plus the ability to recognise the same person across their devices. Google uses its own advertising cookies and identifiers to do this. We only ever see aggregated figures, not individual profiles, and Google suppresses small numbers so that individuals cannot be identified.

Our lawful basis for all of this is your consent. Nothing loads until you accept analytics cookies, and you can withdraw consent at any time from our Cookie Policy page. You can also control it on Google's side through My Ad Center. Google acts as our processor for Analytics; some of this processing takes place outside the UK — see International transfers.

Cookies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are off by default until you agree to them.

Contact

Questions about this policy, or any request to exercise the rights above, should go to our data protection contact at privacy@europadeltravel.com. By post: EURO PADEL TRAVEL LTD is a company registered in England & Wales, company number 17431897. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. You can also reach us through our contact page, but an email to the address above is the one that gets to us fastest.