Data Processing Agreement

1. Roles of the Parties

• The Controller (you) determines the purposes and means of processing personal data.
• Booka.club acts as a Processor, processing personal data on behalf of the Controller.

2. Subject Matter & Duration

Subject Matter

The processing of personal data in connection with the provision of the Booka.club platform.

Duration

This Agreement remains in effect for as long as Booka.club processes personal data on behalf of the Controller.

3. Nature & Purpose of Processing

Booka.club processes personal data to:

• Provide booking and scheduling functionality
• Manage customer accounts
• Store and organise booking data
• Provide customer support
• Ensure platform security and performance

4. Types of Personal Data

Depending on how you use the platform, we may process:

• Names
• Email addresses
• Contact details
• Booking information (e.g. dates, times, preferences)
• Account and login data

5. Categories of Data Subjects

Personal data may relate to:

• Your staff and account users
• Your customers (e.g. players, members, or users of your venues)

6. Processor Obligations

Booka.club will:

• Process personal data only on documented instructions from the Controller
• Ensure that persons authorised to process data are subject to confidentiality obligations
• Implement appropriate technical and organisational measures to protect personal data
• Assist the Controller in responding to data subject requests (where reasonably possible)
• Notify the Controller without undue delay in the event of a personal data breach
• Delete or return personal data upon termination of services (unless legally required to retain it)

7. Controller Obligations

The Controller agrees to:

• Comply with applicable data protection laws
• Provide appropriate privacy notices to data subjects
• Ensure a lawful basis for processing personal data
• Only instruct Booka.club to process data in accordance with the law

8. Subprocessors

Booka.club may use subprocessors to provide the service, such as:

• Hosting providers
• Payment processors (e.g. Stripe)
• Infrastructure and analytics providers

We ensure that all subprocessors:

• Are subject to appropriate data protection obligations
• Provide sufficient guarantees of security and compliance

A list of subprocessors can be provided upon request.

9. International Data Transfers

Where personal data is transferred outside the UK, Booka.club will ensure appropriate safeguards are in place, such as:

• Standard contractual clauses
• Transfers to countries with adequacy decisions

10. Security Measures

Booka.club implements appropriate technical and organisational measures, including:

• Encryption of sensitive data
• Access controls and authentication
• Secure hosting environments

11. Data Subject Rights

Taking into account the nature of processing, Booka.club will assist the Controller in fulfilling obligations to respond to requests from data subjects, including:

• Access
• Rectification
• Erasure
• Restriction
• Data portability

12. Audits

Upon reasonable request, Booka.club may provide information necessary to demonstrate compliance with this Agreement.

13. Breach Notification

In the event of a personal data breach, Booka.club will notify the Controller without undue delay and provide relevant information where available.

14. Deletion or Return of Data

Upon termination of services, Booka.club will, at the Controller's choice:

• Delete personal data, or
• Return personal data to the Controller

unless retention is required by law.

15. Liability

Each party's liability under this Agreement is subject to the limitations set out in the Terms of Service.

16. Governing Law

This Agreement is governed by the laws of England and Wales.

17. Contact

If you have any questions about this Agreement, please contact:

• Email: [email protected]
• Company Name: Booka Club Ltd
• Address: 3 Warners Mill, Silks Way, Braintree, England, CM7 3GB