GDPR

Privacy policy

Applicable version: 7 September 2026

Data collected

Crazy Blue only collects the data required to create accounts and club pages, process and track booking enquiries, and keep the service secure.

Your rights

You may request access to, correction, export or deletion of your data. Account deletion is available from your signed-in area. Information that must be kept by law is isolated or anonymised.

Bookings and marketing

Sending an enquiry or booking request never constitutes consent to receive marketing communications.

Recipients

Necessary contact details are shared with the relevant club after the request is approved. Stripe processes professional subscriptions; Brevo delivers transactional emails.

Retention and security

Access is separated between customers, clubs and Super Admin. Sensitive actions are logged. Technical secrets are never shown to clubs.

Internal statistics and network intelligence

Crazy Blue measures searches, displayed results, page views, useful clicks and enquiry stages solely to operate the service, identify areas without supply and produce aggregate statistics. It uses no advertising identifier or cross-site tracking. Nearby-search coordinates are immediately reduced to an approximate area, with no individual movement history. Raw events are deleted after 25 months; non-identifying aggregate indicators may be kept longer. Data is not sold and never reveals an identifiable competitor’s performance to a club.

Cookies and retention periods

Necessary cookies support login, security and language. On spot pages, Google AdSense may display ads after you consent in the Google message. Google may then process cookies, your IP address and device information to personalise and measure ads. Advertising choices are separate from Crazy Blue’s internal preferences. You can refuse or withdraw consent through Google privacy options.

Controller and respective responsibilities

Crazy Blue controls the processing required to operate the platform. Each club remains responsible for the data it uses for its own contract, safety, invoicing and customer relationship.

Purposes and legal bases

Accounts and requested services rely on contract or pre-contractual steps; security and strictly necessary improvement on legitimate interests; accounting records on legal duties; optional marketing only on separate, withdrawable consent.

Acceptance evidence and retention

Crazy Blue records the document type, version, cryptographic fingerprint, language, source and timestamp. Data is kept only for the relevant purpose and statutory limitation periods; completed guest enquiries are anonymised after 24 months.

Processors, transfers and security

Access is limited to necessary hosting, email, security and future professional-payment providers acting under contract. Transfers outside the EEA require a GDPR-recognised safeguard. Access controls, hashing, logs and proportionate backups are used.

Your rights and complaints

You may request access, correction, erasure, restriction or portability and, where applicable, object or withdraw consent. Use the secure contact form. You may complain to the CNIL or your local EU supervisory authority.