Legal
Privacy policy
Draft — to be reviewed by the club before launch
This page is a working draft for the prototype build. It has not been reviewed by a solicitor or by Jimmy White's Sports Lounge, and must not be relied on as the club's final privacy policy.
Jimmy White's Sports Lounge ("the club", "we", "us") takes your privacy seriously. This policy explains what personal data we collect when you use this website and our booking system, why we collect it, and what rights you have over it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Jimmy White's Sports Lounge, Kingfield Road, Woking, Surrey, GU22 9AA.
[Company details to be confirmed]
Contact: info@jwsl.co.uk · 01483 377147
2. What we collect, and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Account details — name, email, phone, role | Creating and running your member account, membership status | Contract (membership) / Legitimate interests |
| Booking details — table, time, guest count | Taking, confirming and managing bookings, table allocation | Contract |
| Payment details — processed by Stripe | Taking payment for bookings, memberships and counter sales. We never see or store your full card number — Stripe handles and stores card data, not the club. | Contract |
| Email correspondence — via Resend | Booking confirmations, membership renewal reminders, receipts and replies to enquiries | Contract / Legitimate interests |
| Party & events enquiries — name, email, phone, event details | Responding to enquiries about parties and group bookings | Legitimate interests / Consent (submitting the form) |
3. How long we keep it
We keep account and booking records for as long as your membership is active and for a reasonable period afterwards for accounting and dispute-resolution purposes. Party and events enquiries are kept until the enquiry is closed and for a limited period after, so we can refer back to past events. We do not keep personal data for longer than we need it.
4. Who we share it with
We use the following processors to run the club and this website:
- Supabase — hosts our database and handles account sign-in.
- Stripe — processes card payments for bookings and memberships. Stripe stores your card details; we do not.
- Resend — sends transactional emails (confirmations, reminders, receipts, enquiry replies) on our behalf.
- Vercel — hosts this website.
- Google — we display our Google Maps reviews and rating on this site; Google processes any review content you choose to publish there directly, under its own privacy policy.
We do not sell your personal data, and we only share it with the processors above as needed to run the club and this website.
5. Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you, and get a copy of it
- Ask us to correct inaccurate data
- Ask us to delete your data, where we're not required to keep it
- Ask us to restrict or object to certain processing
- Ask for your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at info@jwsl.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we handle your data.
6. Cookies
This site uses only essential cookies needed to keep you signed in and to remember your session while you book — no advertising or third-party tracking cookies are set. Because these cookies are essential to the service, they don't require a cookie consent banner under UK rules.
7. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page.