Privacy Policy

The Club at Elmpark Green ("The Club", "we", "us") runs a members' club for residents and corporate employees at Elmpark Green, Dublin. This policy explains how we collect, use, store and protect your personal data when you register, sign in, or use our website and mobile app (together, the "Service"), in line with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

Data controller: The Club at Elmpark Green. Contact: hello@theclubepg.ie.

• Identity and contact details: full name, email address, phone number.
• Membership details: whether you're a resident or corporate member, and your employer if corporate.
• Account activity: event bookings, cancellations, attendance, and communication preferences.
• Technical data: device type and app usage, for push notification delivery and basic diagnostics.

We don't collect payment details — membership and events are free — and we don't knowingly collect data from children.

• To review and approve membership registrations.
• To let you book, manage and get reminders about events.
• To send you service emails (booking confirmations, waitlist updates, event reminders) and, where you've opted in, news and event announcements.
• To keep our records accurate and our Service secure and reliable.

We process your data on the basis of: performance of the membership relationship you enter into when you register (contract); our legitimate interest in running a safe, well-organised club; and, for optional marketing communications, your consent, which you can withdraw at any time.

We share limited data with service providers who help us run the Service on our behalf, under data processing agreements: our database and authentication provider (Supabase, hosted in the EU), our email delivery provider, and push notification services for mobile devices. We do not sell your data, and we don't share it with third parties for their own marketing purposes.

We keep your membership and booking records for as long as your membership is active, and for a reasonable period afterwards for record-keeping purposes. If your registration is declined, we retain the minimum data needed to record that decision and delete the rest within a reasonable period.

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data, subject to legal or record-keeping requirements.
• Object to or restrict certain processing, including marketing.
• Request a portable copy of your data.
• Lodge a complaint with the Data Protection Commission (dataprotection.ie) if you believe your rights haven't been respected.

To exercise any of these rights, email hello@theclubepg.ie.

We use industry-standard measures to protect your data, including encrypted connections, access controls limiting who can see member data, and row-level security on our database so only you and authorised administrators can access your records.

We may update this policy from time to time. If we make material changes, we'll let members know by email or in the app.

Questions about this policy or your data? Email hello@theclubepg.ie — Ruth, Club Manager.