Privacy Policy

1. Data controller

Joinazo Ltd is the data controller for personal data processed to operate Joinazo. Contact: support@joinazo.com. Address region: Manchester, United Kingdom.

2. Data we collect

Depending on how you use Joinazo, we may process:

• Identity and contact data (name, email, phone, home town).
• Account and authentication data (login credentials handled via our auth provider; session information).
• Profile and listing data (group/venue details, photos, locations, opening hours, apps configuration).
• Transaction and booking data (memberships, sessions, venue bookings, payment status; payment card details are processed by Stripe).
• Communications (messages, support requests, notifications).
• Technical and usage data (IP address, device/browser type, pages viewed, approximate location if you grant it, cookies and similar technologies).

3. How we use data and lawful bases

We use personal data to:

• Provide and secure the service (contract / legitimate interests).
• Create and manage accounts, groups, venues and bookings (contract).
• Process payments and payouts with Stripe (contract / legal obligation).
• Send service emails (confirmations, security, important updates) (contract / legitimate interests).
• Show local discovery and personalisation where you enable location (consent / legitimate interests).
• Improve the product, prevent fraud and abuse (legitimate interests).
• Comply with law and respond to lawful requests (legal obligation).

4. Sharing your data

We do not sell your personal data. We share data with processors and partners only as needed to run Joinazo, including:

• Hosting and infrastructure providers (for example Vercel or equivalent).
• Database and authentication providers (for example Supabase).
• Payment providers (Stripe / Joinazo Pay).
• Email and notification delivery providers.
• Group or venue operators when you join, book, message or otherwise interact with their profile (they become independent controllers of data they receive).

5. International transfers

Some providers may process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses, as applicable.

6. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting and dispute-resolution requirements. Account data is typically retained while your account is active and for a reasonable period afterwards. You can request deletion as described in our GDPR page.

7. Your rights

Under UK GDPR you have rights including access, rectification, erasure, restriction, portability and objection in certain cases. See our GDPR & Your Data page, or email support@joinazo.com.

8. Children

Joinazo is not aimed at children under 13 creating their own accounts. Group profiles may relate to youth activities; parents or guardians should supervise where appropriate. Contact us if you believe we hold data about a child inappropriately.

9. Changes

We may update this policy. The “Last updated” date shows the current version. Significant changes may also be communicated in-product or by email where appropriate.