Privacy Policy
Privacy Policy
Last updated: 1st June 2026
This Privacy Policy explains how Henley Padel Ltd (“we”, “us”, “our”) collects, uses, and protects information about you when you visit henleypadel.com (the “website”) or otherwise interact with us.
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Henley Padel Ltd is a padel and Pilates club based in Shrewsbury, United Kingdom. The data controller responsible for your personal data is:
Henley Padel Ltd Registered office: 157 Lancaster Road, Shrewsbury, SY1 3NA, United Kingdom Padel centre: Unit 4 Knights Park, Knights Way, Shrewsbury, SY1 3AB Email: info@henleypadel.com Phone: 07593 822442
Henley Padel Ltd is registered with the Information Commissioner’s Office (ICO) under registration number C1946671.
If you have questions about this policy or how we handle your data, please contact us using the details above.
What information we collect
We may collect the following types of personal information:
Information you provide directly, when you fill in a form on our website (such as our pre-launch interest form or a contact form), this may include your name, email address, phone number, age range, work sector, and any additional information you choose to share with us.
Information collected automatically when you visit the website, including your IP address, browser type, device information, pages viewed, time spent on pages, and referring website. This is collected through cookies and similar technologies.
Information from third-party services if you book courts or classes via integrated platforms (such as Playtomic for padel court bookings or Momence for Pilates classes), those platforms have their own privacy policies governing the data they collect from you.
CCTV and venue security information – if CCTV is in operation at our premises, we may collect images and video footage of visitors, members, customers, staff, contractors, and other individuals at the venue. CCTV is used for safety, security, crime prevention, incident management, and to help protect our customers, staff, property, and facilities.
How we use your information
We use your personal information for the following purposes:
To send you updates, news, and offers about Henley Padel that you have consented to receive.
To respond to enquiries you submit through our contact forms or other communications.
To improve our website and services by understanding how visitors use the site.
To operate CCTV and venue security systems for safety, security, crime prevention, incident management, and protection of our customers, staff, property, and facilities.
To comply with our legal obligations.
To establish, exercise, or defend legal claims.
We will only contact you for marketing purposes if you have given us explicit consent to do so. You can withdraw consent at any time.
Legal basis for processing
Under UK GDPR, we rely on the following legal bases to process your personal data:
Consent — when you sign up to our mailing list or tick a consent box on a form. You can withdraw consent at any time.
Legitimate interests — for analytics, website improvement, responding to enquiries, and operating our business efficiently. Where we rely on legitimate interests as our legal basis for processing, we carefully consider and balance any potential impact on your rights and freedoms and ensure that our legitimate interests are not overridden by your interests or fundamental rights.
Legal obligation — where we are required by law to retain or share information.
Contract — where processing is necessary to deliver services you have requested.
Examples of how these legal bases apply include:
Marketing communications – consent.
Responding to enquiries – legitimate interests.
Website analytics & improvement – legitimate interests or consent, depending on the cookies used.
Bookings, memberships, and service delivery – contract.
Accounting, tax, insurance, and legal record keeping – legal obligation or legitimate interests.
CCTV and venue security – legitimate interests, including safety, security, crime prevention, incident management, and protection of our customers, staff, property, and facilities.
Establishing, exercising, or defending legal claims – legitimate interests.
Who we share your information with
We do not sell your personal information to third parties. We may share your data with the following service providers who help us operate our business:
Mailchimp — we use Mailchimp to manage our mailing list and send marketing emails. When you sign up to our list, your details are stored on Mailchimp’s servers. Mailchimp is operated by Intuit Inc., based in the United States, and complies with appropriate data transfer mechanisms under UK GDPR. View Mailchimp’s privacy policy at mailchimp.com/legal/privacy.
Our website host — our website is hosted by Logicrises Ltd. They process limited data such as your IP address when you visit the site.
Google Analytics — we may use Google Analytics to understand how visitors use our website. Google Analytics collects data including your IP address (anonymised), browser, device, and pages viewed. View Google’s privacy policy at policies.google.com/privacy.
Booking platforms – Playtomic for padel courts and Momence for Pilates classes may handle booking data directly under their own privacy policies. When you interact with these platforms, they may act as independent data controllers and are responsible for how they collect, use, and protect your personal data.
Service providers — we may share data with other service providers who help us operate the website and our business (for example, payment processors, IT support providers). All such providers are bound by contracts requiring them to handle your data securely and only for the purposes we instruct.
We may also disclose your information if required by law, court order, or to protect our legal rights.
How we store your information
Your personal data may be stored securely on cloud-based systems operated by us or by our trusted service providers, including website hosting, email, mailing list, booking, payment, and customer management systems. We take reasonable steps to ensure that any service providers we use apply appropriate measures to protect your data.
How long we keep your information
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.
Mailing list subscribers — we keep your data for as long as you remain subscribed. You can unsubscribe at any time using the link in any marketing email, after which your data will be removed from our active mailing list.
Contact form submissions — we keep these for up to 24 months after the enquiry is resolved, unless ongoing communication is required.
Website analytics data — typically retained for 26 months in line with Google Analytics defaults.
CCTV footage – usually retained for a short period (typically between 30-45 days), unless it is required for incident investigation, insurance, legal, safety, or security purposes, in which case it may be kept for longer where necessary.
Your rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your data (“the right to be forgotten”).
Right to restrict processing — you can ask us to limit how we use your data.
Right to object — you can object to us processing your data for direct marketing or other purposes based on legitimate interests.
Right to data portability — you can request your data in a portable format.
Right to withdraw consent — where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at info@henleypadel.com. We will respond within one calendar month.
If you are unhappy with how we have handled your data, you can lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Automated decision making
We do not use your personal data for automated decision making or profiling that produces legal or similarly significant effects.
Cookies
Our website uses cookies and similar technologies to function properly and to improve your experience. Cookies are small text files stored on your device when you visit a website. When you first visit our website, you will be presented with a cookie banner allowing you to accept or reject non-essential cookies
We use the following types of cookies:
Essential cookies — required for the website to function (e.g. for the contact form to work).
Analytics cookies — help us understand how visitors use the site (e.g. Google Analytics, if installed).
Functional cookies — enable enhanced functionality (e.g. embedded Mailchimp form behaviour).
You can control cookies through your browser settings. Disabling cookies may affect the functionality of the website.
For more details, see our Cookie Policy.
Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
Secure HTTPS encryption on our website.
Restricted access to personal data on a need-to-know basis.
Regular review of our data handling practices.
Use of reputable third-party providers who themselves comply with UK GDPR.
In the event of a personal data breach, we will assess the risk and, where required, notify the Information Commissioner’s Office (ICO) and affected individuals in accordance with UK GDPR.
While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to taking action where we identify any concerns.
International data transfers
Some of our service providers (such as Mailchimp and Google) are based outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK government, to protect your data in line with UK GDPR.
Children’s privacy
Our Website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without appropriate parental or guardian consent. If you believe we may have collected personal data from a child without appropriate consent, please contact us so we can review and, where appropriate, delete it.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the most recent change. Significant changes will be communicated via our website or by email to subscribers where appropriate.
We encourage you to review this policy periodically.
Contact us
If you have any questions about this Privacy Policy or our data practices, please contact:
Henley Padel Ltd Email: info@henleypadel.com Phone: 07593 822442 Registered office: 157 Lancaster Road, Shrewsbury, SY1 3NA Padel centre: Unit 4 Knights Park, Knights Way, Shrewsbury, SY1 3AB