Privacy Policy

Who we are

The Velaré Court is operated by [legal entity name], [registered address] (“the Court”, “we”). Under the DPDP Act we are the Data Fiduciary; under the UK and EU GDPR we are the controller of your personal data. You can reach us at court@thevelarecourt.com.

What we collect

• News of the Court: your name and email address.
• Requests for an invitation: your name, email, mobile number and city; optionally your Instagram or LinkedIn profile; how you heard of the Court and any invitation code; your interest; the name of any member who nominated you; and a few lines about yourself.
• Applicants under 18: the name, email and phone number of a parent or guardian, and their consent.
• Contact messages: your name, email and message.
• Photo and film consent: whether you agree to be photographed and filmed at events.
• Visits to this site: anonymous counts of page visits and form use. See the Cookie Notice.

Payments are handled by our payment providers [Razorpay / Stripe]. We do not see or keep your card details.

Why we use it

• To consider your request for an invitation and write to you about it.
• To send letters from the Court, if you asked for them.
• To arrange your place at events, if your request is approved.
• To reply to your messages.
• To keep events safe, including the safeguarding of under-18s.

We rely on your consent, which you give on our forms and may withdraw at any time. Where the UK or EU GDPR applies, we also rely on our legitimate interest in running the Court safely and on the performance of a contract once you hold a place. [Lawyer to confirm the lawful bases.]

Children’s data

We accept applications from under-18s only with the verifiable consent of a parent or guardian, as the DPDP Act requires. We do not track, profile or target advertising at children. [Lawyer to confirm the method of verifying parental consent.]

Who we share it with

Only with the service providers who help us run the Court, under contract and for these purposes alone: [website hosting (Vercel), the applicant list (Airtable or HubSpot), email (Mailchimp or Klaviyo), payments (Razorpay or Stripe), analytics (Plausible or Google Analytics)]. We never sell your data.

Some of these providers store data outside India, the UK or the EU. Where that happens we use the safeguards the law requires. [Lawyer to confirm transfer mechanisms.]

How long we keep it

[Retention periods to be confirmed: for example, requests that are not approved are kept for [period] so you may be considered for a future Season, then deleted.]

Your rights

You may ask to see, correct, update or erase your data, withdraw your consent, or nominate someone to act for you. Where the UK or EU GDPR applies, you may also object to our use of your data, restrict it, or ask for a copy to take elsewhere. Write to court@thevelarecourt.com.

Grievances. Our Grievance Officer is [name], at [email]. If you are not satisfied with our reply, you may complain to the Data Protection Board of India, the UK Information Commissioner’s Office, or your local data protection authority in the EU.

Changes

If we change this policy, we will post the new version here with its date.