Privacy Policy

Who we are

UCAP Airsoft is operated by Crackingday Limited ("we", "us", "our"). We are the data controller for the personal information described in this policy. You can reach us using the contact details at the end of this policy. We are registered with the Information Commissioner's Office; our registration number is shown in the Contact section below.

What information we collect

• Account details: your name, date of birth, email address and postal address. Your password is stored only as a secure one-way hash.
• Emergency and medical information: an emergency contact name and phone number, and any medical notes you choose to give us, so our marshals can keep you safe on site.
• Children on your account: if you book for under-18s, we hold each child's name and date of birth, and you act as their guardian.
• Waivers and consents: when you sign the liability waiver, and a parental consent for each under-18, we record the version you agreed to, the date, a snapshot of the name, date of birth and address you signed with, and your on-screen signature.
• Bookings and payments: the game days you book, your tickets, the amounts paid and a payment reference. Your card details are handled entirely by Stripe and never reach our systems. We receive a payment reference and the billing address Stripe has verified.
• Attendance: whether you checked in on a game day.
• Conduct: if you are warned or restricted from our sites, we record the reason and any expiry.
• Technical: a single secure cookie that keeps you signed in.

How we collect it

Most of this you give us directly when you register, book a game, or sign a waiver. Payment and billing-address details come from Stripe when you pay.

Why we use your information, and our lawful basis

• To run your account, bookings, waivers and consents: this is necessary to perform our contract with you.
• To keep you and others safe on site, including emergency contacts, medical notes, age checks and marshalling: our legitimate interest in running a safe activity, and our legal obligations around health and safety.
• To keep records we are legally required to keep, such as financial and tax records, and signed waivers as evidence in the event of an injury claim: our legal obligations, and our legitimate interest in establishing or defending legal claims.
• To enforce restrictions and prevent misuse of our sites: our legitimate interest in the safety and integrity of our events.
• To send you marketing: only if you have opted in, and you can withdraw that consent at any time.

Children's data

Under-18s play only on a parent's or guardian's account. The guardian provides and manages the child's information and signs their waiver and parental consent. We hold the minimum needed to run the booking and keep the child safe, and we do not send marketing to children.

Who we share it with

• Stripe, our payment processor, to take card payments.
• Our hosting provider, which stores the data on our behalf.
• Our marshals and staff on site, who see only the check-in and safety information they need to run the day.
• Anyone we are legally required to share with, for example insurers or the authorities in the event of an incident or claim.

We do not sell your personal data.

Sending data outside the UK

Our payment processor, Stripe, may process your data outside the UK. Where it does, it relies on the safeguards Stripe has in place for international transfers. Stripe is currently the only third party with access to your personal data.

How long we keep it

We keep your account for as long as it is active. We keep waivers, consents and booking and financial records for six years after your most recent game day, or six years after your waiver expires, whichever is later. This reflects the six-year limitation period for bringing a legal claim. After that period we anonymise or delete the records.

Your rights

You have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. You can download a copy of your data at any time from the Privacy section of your account. To make any other request, contact us using the details at the end of this policy. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or tracking cookies.

Keeping your data secure

We protect your data with encryption in transit, hashed passwords, and access controls that limit who can see what, alongside other technical and organisational measures.

Changes to this policy

We may update this policy from time to time. The date it was last updated is shown at the foot of this page, and we will let active players know if we make a significant change.