Privacy Policy
Last updated: 10 September 2026
1. Who controls your information
The data controller is Dylan Gracey trading as Gimme ClubCare. Postal address: 9 Bentley Avenue, ST5 9DF. Email: gimmeclubcare@gmail.com.
2. Information we collect
We may collect your name, email, telephone number, address or postcode, account identifiers, booking and appointment details, club and service information, enquiries, repair notes, payment status and correspondence. Stripe processes card details; Gimme ClubCare does not receive or store your full card number.
3. How and why we use it
We use information to create and manage accounts and bookings, provide quotes and services, collect payment, arrange visits or collection, communicate updates, handle cancellations and complaints, prevent fraud, keep financial records and operate securely. Our lawful bases are principally performance of a contract, taking steps at your request before a contract, compliance with legal obligations and our legitimate interests in running and protecting the business. We will seek consent where consent is required, including for optional analytics or marketing.
4. Who receives information
We use service providers including Cloudflare for website hosting and security, Supabase for database and authentication services, and Stripe for payment processing. They process relevant information under their own terms and data-protection commitments. We may also disclose information where required by law or to establish, exercise or defend legal claims. We do not sell personal information.
5. International transfers
Some technology providers may process information outside the UK. Where required, transfers are protected using recognised safeguards such as adequacy regulations or approved contractual clauses.
6. Retention
We retain booking, payment and accounting records for up to six years after the relevant financial year where needed for tax, accounting or legal purposes. General enquiries that do not become bookings are normally deleted within 12 months. Inactive account information may be reviewed and deleted after 24 months, unless records are still required for an active booking, dispute or legal obligation.
7. Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict personal information, object to processing, receive portable data and withdraw consent. Email us to exercise a right. You may complain to the Information Commissioner’s Office at ico.org.uk.
8. Security
We use authentication, access controls, encrypted HTTPS connections, database security policies and server-side payment processing. No online system can guarantee absolute security.
9. Cookies
See our Cookie Policy for information about essential storage, optional analytics and managing choices.
10. Changes
We may update this notice when our services or providers change. The latest version and update date will appear on this page.