Privacy policy

Last updated 11 October 2026

This policy explains what NH47 Arena collects when you use SpotTheTurf and how it is used.

What we collect

• Your name and mobile number, to make and identify your booking.
• Your email address, if you sign in with email.
• Booking details: turf, court, date, time, amount paid and cancellations.
• Payment references from Cashfree (such as a payment ID and method). We never receive your card number, UPI PIN or bank password.
• Basic technical data (such as browser type) needed to run and secure the website.

How we use it

• To confirm, manage and cancel bookings, and to process refunds.
• To send booking confirmations and reminders by SMS, WhatsApp or email.
• To share your name, mobile number and booking with the turf you booked, so they can receive you.
• To prevent fraud and misuse.

We do not sell your personal data and do not use it for third-party advertising.

Who we share it with

Only with the turf you booked, and with service providers that help us run the service: Cashfree Payments (payments), Supabase (secure database hosting), Vercel (website hosting) and our email/SMS/WhatsApp providers. They may only use it to provide their service to us.

How long we keep it

Booking and payment records are kept as long as needed for accounting and legal requirements. You can ask us to delete your account and personal details at any time, except records we must keep by law.

Your choices

You can ask to see, correct or delete your data by contacting us.

Security

Data is sent over encrypted connections (HTTPS) and stored with access controls. Payments are handled by Cashfree, a PCI DSS-compliant payment gateway.