Privacy Policy
1. Data controller
Data controller:
PADELHEIM LTD
Apartment 11 Foxglove House, Elm Road, Blythe Valley Park, Shirley,
Solihull, B90 8AZ, United Kingdom
Website:
www.padelheim.co.uk
Email (privacy / general enquiries):
[email protected]
2. What personal data do we collect?
Depending on how you use the service, we may process the following categories of personal data:
- Identity and contact data: for example, name, email address, and phone number.
- Account data: registration identifiers, password (stored in encrypted or one-way hashed form), and sign-in methods (for example, social login, if enabled).
- Loyalty programme data: points balance, tier or status, and transactions (for example, reward redemptions and verifications).
- Technical and usage data: device or browser identifiers, limited IP address retention, log data, aggregated analytics, and crash reports.
- Communications: content of customer support enquiries.
- Marketing (where separate consent applies): newsletters and promotional offers, only where you have opted in.
We do not intentionally collect special categories of personal data (such as health or biometric data), except where required by law or where you have given explicit consent.
3. Why and on what legal basis do we process your data?
- Performance of a contract (UK GDPR Article 6(1)(b)): to create and manage your account, operate the loyalty programme and app, and provide rewards.
- Legitimate interests (UK GDPR Article 6(1)(f)): security, fraud prevention, service improvement, aggregated statistics, and system stability — balanced against your rights and freedoms.
- Legal obligation (UK GDPR Article 6(1)(c)): accounting, invoicing, and regulatory compliance, where applicable.
- Consent (UK GDPR Article 6(1)(a)): for example, marketing communications, certain cookies, or optional features. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. How long do we keep your data?
We retain personal data only for as long as necessary for the purposes described in this policy. Account data is generally kept while your account remains active. Data required for accounting or legal purposes is retained for the period required by applicable law (typically up to seven years in the UK). Security logs are stored for a limited period. When data is no longer needed and there is no lawful reason to keep it, we delete or anonymise it.
5. Who do we share your data with?
We may share personal data with trusted processors that help us deliver the service (for example, hosting, cloud infrastructure, email delivery, analytics, and payment providers, where applicable), as well as with public authorities where required by law.
Where data is transferred outside the United Kingdom or European Economic Area, we use appropriate safeguards such as adequacy decisions, standard contractual clauses, or equivalent protections.
App stores and other technical platforms (for example, Apple App Store and Google Play) may also process limited technical data under their own privacy policies.
6. Automated decision-making and profiling
We do not use automated decision-making or profiling that produces legal or similarly significant effects, unless we inform you separately and have a valid legal basis. Otherwise, no such processing takes place.
7. Your rights
Under UK data protection law, you have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request erasure (“right to be forgotten”), where the conditions are met;
- request restriction of processing;
- request data portability, where applicable;
- object to processing based on legitimate interests;
- lodge a complaint with the Information Commissioner’s Office (ICO), ico.org.uk.
To exercise your rights, please contact us using the details in section 1.
8. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, or destruction.
9. Children
The Padelheim app is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
10. Changes to this policy
We may update this privacy policy from time to time to reflect changes to our services or legal requirements. Where changes are material, we will notify you appropriately (for example, in the app or by email).
Last updated: 18 August 2026