Boulderinghalls.com

Privacy Policy

Last updated: 8 May 2026

1. Introduction

At Boulderinghalls.com, we are committed to protecting your privacy and personal information. Boulderinghalls.com is a directory of indoor bouldering halls offering opening hours, day-pass prices, and human-written editorial descriptions. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using our Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, profile picture, bio, website, and an optional social handle (e.g. Twitter/X)
  • Communication Data: Messages, feedback, support requests
  • Newsletter Subscriptions: Email preferences and subscription status
  • Payment Information: Billing details processed securely through Stripe (currently used only if paid placements are enabled)

2.2 Information Collected Automatically

When you use our Platform, we automatically collect certain information:

  • Usage Data: Pages visited, time spent, clicks
  • Device Information: IP address, browser type, operating system
  • Log Data: Access times, pages viewed, referring URLs, error logs
  • Analytics Data: User behaviour patterns, performance metrics (where analytics are enabled and consent is given)
  • Cookies and Tracking Technologies: As described in our Cookie Policy

2.3 Information from Third Parties

We may receive information from third-party services:

  • Authentication Providers: Supabase Auth for account creation and management
  • Payment Processors: Stripe for transaction processing
  • Analytics Services: Website analytics for performance and usage data where enabled and consented to

3. GDPR Baseline

We do not process special-category data. Personal data is limited to email, name, optional profile fields, IP address for analytics and rate-limiting, and comment author identity. Data is processed and stored in the EU (Supabase EU region). We do not transfer personal data outside the EU/EEA, except to vetted sub-processors (Stripe for payments, Resend for transactional email) operating under appropriate safeguards (adequacy decisions or Standard Contractual Clauses).

Data Subject Access Requests (DSAR) are honoured manually within 30 days of receipt. To submit a DSAR, contact us at privacy@boulderinghalls.com.

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Service Provision

  • Provide, maintain, and improve our Platform and services
  • Enable signed-in features such as bookmarks, ratings, and comments
  • Provide customer support and respond to enquiries
  • Process payments where applicable

4.2 Communication

  • Provide newsletters and marketing communications (with your consent)
  • Notify you of important changes to our services or policies
  • Respond to your comments, questions, and support requests

4.3 Analytics and Improvement

  • Analyse usage patterns and platform performance (where consent is given)
  • Improve user experience and platform functionality
  • Develop new features and services

4.4 Legal and Security

  • Comply with legal obligations and regulatory requirements
  • Protect against fraud, abuse, and security threats
  • Enforce our Terms of Service and other policies

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Platform:

  • Supabase: Database and authentication services (EU hosted)
  • Stripe: Payment processing services
  • Resend: Transactional email delivery

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal processes, such as court orders.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

6. Photo Provenance

Cover and gallery photos on hall pages have documented sources. Photos uploaded by hall owners or our editorial team grant a non-exclusive licence post-publication. We do not accept public user-uploaded gallery photos in this version (admin-only).

7. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, access controls, and secure hosting infrastructure.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Specifically:

  • Account Information: Retained until you delete your account or request deletion
  • Payment Information: Retained as required by applicable laws
  • Analytics Data: Aggregated and anonymised data may be retained indefinitely

Newsletter subscriptions: Unconfirmed newsletter subscriptions are deleted after 14 days.

Banned accounts: Banned user accounts retain a users row for moderation continuity, but personal data (email, name, avatar) is anonymised within 30 days of the ban.

9. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a structured format
  • Restriction: Request restriction of processing of your information

To exercise any of these rights, contact us at privacy@boulderinghalls.com. We will respond within 30 days.

9.1 Marketing Communications

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails, updating your preferences in account settings, or contacting us directly.

9.2 Cookie Preferences

You can manage your cookie preferences through your browser settings or our cookie consent banner. For more information, see our Cookie Policy.

10. Children's Privacy

Our Platform is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have the information removed.

11. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of these third parties. We encourage you to read the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Back to Home