Last updated: July, 19th, 2026
1. Who we are (Data Controller)
This website, https://www.brookfieldcorktennis.com (“the website”), is operated by Brookfield Leisure Limited (“we”, “us”, “our”), the data controller for the personal data described in this policy.
- Trading name: Brookfield Tennis Court
- Legal entity / registered name: Brookfield Leisure Limited
- Address: Brookfield, College Road, Cork, Ireland
- Email: [email protected]
If you have any questions about this policy or your personal data, contact us using the details above.
2. What personal data we collect
We collect only the data we need to run the tennis-court booking service:
| When | Data collected | Purpose |
|---|---|---|
| You book a court | Name, email, phone, chosen date/time, booking history | To create and manage your booking |
| You pay | Payment is processed by Stripe; we receive confirmation and limited transaction details. We do not store your full card number. | To take payment securely |
| You create an account | Email, password (stored encrypted), name, order history | To let you manage bookings |
| You use the contact form | Name, email, phone, subject, message | To respond to your enquiry |
| You subscribe to updates / set communication preferences | Email, preferences | To send booking-related or (with consent) marketing emails |
| You browse the site | Cookies, IP address, device/browser data, usage data | Site function, security, and — only with your consent — analytics (see our Cookie Policy) |
3. Legal bases for processing (GDPR Article 6)
- Contract (Art. 6(1)(b)) — to take and fulfil your booking, process payment, and manage your account.
- Consent (Art. 6(1)(a)) — for non-essential cookies/analytics and any marketing emails. You can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)) — to keep tax/accounting records.
- Legitimate interests (Art. 6(1)(f)) — to secure the website (fraud prevention, Wordfence), prevent abuse, and improve our service, balanced against your rights.
4. Who we share data with (Processors & recipients)
We share personal data only with service providers who process it on our behalf under data-processing agreements:
- Stripe Payments Europe, Ltd. — payment processing. See stripe.com/privacy.
- Google (Google Analytics 4, Google Fonts, reCAPTCHA) — website analytics (only with consent) and spam/bot protection. See policies.google.com/privacy.
- Automattic Inc. / WordPress.com (Jetpack statistics) — usage statistics. See automattic.com/privacy.
- [HOSTING PROVIDER] — website hosting.
- Cloudflare, Inc. — content delivery and security.
- Wordfence (Defiant, Inc.) — website security.
- Our email/booking tooling (WooCommerce, AutomateWoo, Contact Form 7) which run on our own site/host.
We do not sell your personal data.
5. International transfers
Some providers (e.g. Google, Stripe, Automattic, Cloudflare) may process data outside the European Economic Area, including in the United States. Where this happens, transfers are protected by appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses. You can request details using our contact information above.
6. How long we keep your data (Retention)
- Booking & transaction records: kept for [6 or 7] years to meet Irish tax/accounting obligations.
- Account data: kept while your account is active; deleted on request (subject to the above legal retention).
- Contact-form enquiries: kept for up to [12–24 months] then deleted.
- Marketing subscriptions: until you unsubscribe.
- Analytics data: per the retention set in Google Analytics ([e.g. 14 months]).
7. Your rights
Under the GDPR you have the right to: access your data; rectify inaccurate data; erase your data (“right to be forgotten”); restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). To exercise any right, contact us using the details in Section 1. We will respond within one month.
8. Complaints
If you are unhappy with how we handle your data you can complain to the Irish supervisory authority:
Data Protection Commission (DPC), 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — www.dataprotection.ie — Tel. +353 (0)1 765 0100.
9. Cookies
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies (analytics, marketing) are only set with your consent, which you can change at any time via the cookie settings link on the website.
10. Children
Our service is intended for adults and for bookings made by or with the consent of a parent/guardian. We do not knowingly collect data from children under 16 without parental consent.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date shows the latest version. Material changes will be highlighted on the website.