Privacy Policy

For a venue owner: we hold your account and business details, and we decide how they are used.

For a venue's customer — someone who books a slot — the venue decides what is collected and why. We store it on the venue's behalf and act on its instructions. If you booked a pitch and want your details removed, contact the venue; you can also contact us and we will help.

From venue owners: name, email address, phone number, business name, venue address and district, the map location you place, your grounds, prices and opening hours, and the mobile financial services or bank details you publish so your customers can pay you.

From bookings: the customer's name, phone number, and email address if given; the slot booked; the amount due and what was recorded as paid.

Automatically: basic technical information needed to run the service — request logs, and sign-in records. We do not run advertising trackers or sell profiles.

We do not store card numbers, and we never receive the money your customers pay you. Booking payments go directly to the venue, in cash or to the venue's own account. We record the amount so the booking shows as paid; we are not in the payment path.

Subscription payments to Turftix are handled by our payment provider. They receive what they need to take the payment. We receive confirmation that it succeeded, and the amount.

• To run the service you signed up for — the calendar, bookings and reports.
• To send transactional messages: a booking confirmation, a payment receipt, a password reset. These are part of the service and are not marketing.
• To take subscription payments and keep the associated records.
• To investigate a problem when you report one.
• To meet legal and tax obligations.

We use a small number of services to run Turftix:

• Brevo — sends our transactional email. It receives the recipient address and the message.
• PipraPay — processes owner subscription payments.
• OpenStreetMap — provides map tiles and place search when you set a venue's location. A place you search for is sent to them to be looked up.
• Our hosting providers — store the database and serve the site.

We do not sell personal information, and we do not share it for advertising. We will disclose information if the law requires it.

Account and booking records are kept while the account is open, and afterwards for as long as needed for tax and accounting.

Ask us to delete your account and we will, along with the personal information in it, except records we are required to keep. We will tell you what is being kept and why.

• See what we hold about you, and get a copy.
• Correct anything wrong — most of it you can edit yourself.
• Ask for deletion, subject to what we must keep.
• Turn off email notifications in your notification settings. Transactional messages about your own bookings and payments continue.

Email or call us and we will action a request within 30 days.

Traffic is encrypted in transit. Passwords are hashed, never stored in readable form. Access to the production database is limited to those who need it to operate the service.

No system is perfectly secure. If a breach affects your data, we will tell you what happened and what we did about it rather than wait to be asked.

Turftix is for businesses. We do not knowingly collect information from children. A venue may record a booking made on behalf of a young player; that record belongs to the venue and should hold no more than it needs.

If we change this policy in a way that materially affects you, we will email the address on your account before it takes effect. The date at the top always shows the current version.