Privacy Policy

We respect your privacy and are committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy explains what data we collect, how it is used, and the rights you have.

1. Data We Collect

Account & Authentication Data: Email and authentication ID collected via Supabase Auth.
Profile Data (optional): Name, photo, bio, vehicle/garage information, social links, copilot information, and other fields you choose to provide.
Community & Membership Data: Clubs you join, membership status, and the visibility settings you define.
Event Data: Registrations, attendance, event-specific info you submit (e.g., dietary preferences, passenger/copilot details).
Payment & Billing Data: Payment status, refund history, order metadata. We do NOT store full credit card numbers.All payments are processed by Stripe.
Technical Data: IP address, browser metadata, and security logs used purely for fraud prevention and service integrity.

2. How We Use Your Data

To create and secure your account.
To process event registrations and membership fees.
To display your profile according to your visibility settings.
To send service-related notifications (event updates, membership reminders).
To help club administrators manage their communities.
To maintain platform security and prevent abuse or fraud.
To meet legal obligations (e.g., accounting, taxation).

3. Legal Basis for Processing

Contract: operating your account and services you request.
Consent: optional profile fields and marketing preferences.
Legitimate Interest: security, fraud prevention, maintaining stable services.
Legal Obligation: accounting and regulatory compliance.

4. Payments

All payments are processed by Stripe, which acts as an independent data controller for payment card data. We never store credit card details.

5. Data Sharing

We do not sell or share your data with advertisers or unrelated third parties. Data is shared only with:

Club administrators of communities you join.
Stripe for payment processing.
Supabase for authentication, hosting, and storage.

6. Data Retention

We retain your personal data only as long as necessary:

Account data while your account remains active.
Financial records for the period required by law (usually 6–10 years).
Optional profile data until you delete or edit it.

7. Your Rights

Under GDPR, you have the right to access, correct, delete, export, or restrict the processing of your personal data. Requests can be made at: support@ownersclubevents.com.

8. Data Security

We use encryption, role-based access control, and secure EU-hosted infrastructure (via Supabase) to protect your data.

9. Contact

For privacy questions: support@ownersclubevents.com