Privacy Policy

1. Introduction

At Maison Padel, we are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you interact with us — whether through our website (maisonpadel.ae), mobile application, waitlist registration, membership enrolment, facility visits, or any other engagement with our services.

This policy is designed to comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) and any implementing regulations, as well as applicable data protection principles and best practices.

2. Data Controller

The data controller responsible for your personal data is:

For any privacy-related inquiries, requests, or complaints, please contact us at the above email address.

3. Information We Collect

3.1 Information You Provide Directly

• Waitlist Registration: Email address.
• Membership Application: Full name, email address, phone number, date of birth, nationality, Emirates ID or passport details (for identity verification), billing address, and payment information (credit/debit card details processed securely through our payment provider).
• Court Bookings: Booking preferences, playing history, and player invitations.
• Academy Enrolment: Playing level, coaching preferences, and for junior programmes, parent/guardian contact details.
• Communications: Any information you provide when you contact us via email, phone, WhatsApp, or social media, including the content of your messages.
• Events & Social: RSVP responses, dietary preferences, and guest details for Club events.

3.2 Information Collected Automatically

• Website & App Usage: IP address, browser type, device type, operating system, pages visited, time spent on pages, referral sources, and click patterns, collected through cookies and similar technologies.
• Facility Access: Check-in/check-out times, court usage data, and facility access logs.
• CCTV & Surveillance: Video footage captured by security cameras located at building entrances/exits, reception, court areas, café, corridors, and parking areas. CCTV is never installed in changing rooms, bathrooms, or prayer rooms. Footage is retained for a maximum of 30 days. See Section 15 of our Terms & Conditions for full details.

3.3 Health Data

As part of the membership enrolment process, we collect health declaration information including disclosed medical conditions, injuries, and physical limitations relevant to your participation in physical activities. This is classified as sensitive personal data under the UAE PDPL and is processed solely for the purpose of ensuring your safety and the safety of others at the Club. Health data is stored with enhanced security measures and access is restricted to authorised staff only.

3.4 Information from Third Parties

• Payment Processors: Transaction confirmations and billing status from our payment service providers.
• Social Media: If you interact with us through social media platforms, we may receive your public profile information in accordance with that platform’s privacy settings.

4. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: To process your waitlist registration, membership application, court bookings, coaching sessions, and event registrations.
• Membership Administration: To manage your membership account, process payments, send invoices, and provide membership-related communications.
• Communications: To send you important updates about the Club, your bookings, membership status, service changes, and responses to your inquiries.
• Marketing: To send you promotional content about events, new services, special offers, and Club updates. You may opt out of marketing communications at any time (see Section 8).
• Personalisation: To tailor your experience, recommend relevant services, and improve our offerings based on your preferences and usage patterns.
• Safety & Security: To ensure the safety and security of our Members, guests, and staff, and to prevent fraud and unauthorised access.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including UAE PDPL requirements.
• Analytics & Improvement: To analyse usage trends, measure the effectiveness of our services, and improve the Club experience.

5. Legal Basis for Processing

We process your personal data on the following legal bases under the UAE PDPL:

• Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., marketing communications, waitlist registration).
• Contractual Necessity: Where processing is necessary for the performance of our membership agreement or to take pre-contractual steps at your request.
• Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving our services, ensuring security, and preventing fraud, provided these interests do not override your rights.
• Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject.

6. Data Sharing

We do not sell your personal data. We may share your information with the following categories of recipients, solely for the purposes described in this policy:

• Service Providers: Third-party companies that assist us in operating the Club, including payment processors (for secure payment handling), email service providers (for transactional and marketing communications), website hosting providers, and IT support services. These providers are contractually bound to protect your data and use it only for the services they provide to us.
• Coaching Staff: Relevant information shared with our coaching team for the purpose of delivering academy services and personalising your training.
• Legal & Regulatory Authorities: Where required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified of any such change.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Waitlist Data: Retained until the Club opens and the waitlist is fulfilled, or until you request removal, whichever comes first.
• Active Membership Data: Retained for the duration of your membership plus 3 years after cancellation or termination, for legal and administrative purposes.
• Health Declaration Data: Retained for the duration of your membership plus 1 year after cancellation. Deleted upon request if no outstanding claims exist.
• Booking & Transaction Records: Retained for 5 years from the date of the transaction, as required by UAE commercial record-keeping obligations.
• CCTV Footage: Retained for a maximum of 30 days, then automatically overwritten. Footage relevant to an incident or investigation may be retained for the duration of that matter.
• Marketing Preferences: Retained until you withdraw consent or opt out.
• Website Analytics: Aggregated and anonymised data may be retained indefinitely. Identifiable analytics data is retained for no more than 24 months.

When personal data is no longer needed, it is securely deleted or anonymised.

8. Your Rights

Under the UAE PDPL and applicable regulations, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You may request that we delete your personal data, subject to any legal retention obligations.
• Right to Restrict Processing: You may request that we limit the way we use your data in certain circumstances.
• Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of these rights, please contact us at contact@maisonpadel.ae. We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

9. Marketing & Communications

We may send you marketing communications about the Club, events, promotions, and related services. You can opt out of marketing communications at any time by clicking the “unsubscribe” link in any marketing email, or by contacting us at contact@maisonpadel.ae. Please note that opting out of marketing does not affect transactional communications related to your membership, bookings, or account (e.g., booking confirmations, payment receipts, and important service updates).

10. Cookies & Tracking Technologies

10.1 What We Use

• Essential Cookies: Required for the website and application to function properly (e.g., session management, security). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). These collect anonymised, aggregated data.
• Functional Cookies: Remember your preferences and settings to enhance your experience.

10.2 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website. Most browsers allow you to view, manage, and delete cookies individually.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure payment processing through PCI-DSS compliant providers, access controls limiting data access to authorised personnel only, regular security assessments, and secure data storage with reputable cloud service providers.

While we take all reasonable precautions, no method of data transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

12. Children’s Privacy

Our services are not directed to children under 8 years of age. We do not knowingly collect personal data from children under 8. For our Junior Academy programme (participants aged 8–17), we collect data only with the consent of a parent or legal guardian, and limit the data collected to what is necessary for the programme. For participants under the age of 13, all personal data is collected exclusively through and managed by the parent or legal guardian — we do not collect data directly from children in this age group. If we become aware that we have collected data from a child under 8 without parental consent, we will take steps to delete that information promptly.

13. International Data Transfers

Your personal data is primarily stored and processed within the United Arab Emirates. In cases where data may be transferred to service providers located outside the UAE, we ensure that appropriate safeguards are in place in accordance with the UAE PDPL, including contractual protections and verification that the receiving jurisdiction provides adequate data protection standards.

14. Third-Party Links & Services

Our website and communications may contain links to third-party websites and services (e.g., Instagram, WhatsApp, Google Maps). We are not responsible for the privacy practices of these third parties. We encourage you to review their respective privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated to registered users via email and posted on our website. The “Last updated” date at the top of this page indicates when the policy was most recently revised. Your continued use of our services after any changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

If you believe your data protection rights have been violated, you also have the right to lodge a complaint with the UAE Data Office or other relevant regulatory authority.