Legal
PRIVACY POLICY
Last updated: June 2026 · Effective: June 2026
Arena RC Experience Centre ("Arena RC", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard your data when you use our website, mobile app, or visit our venue.
1. Information We Collect
When you book a session, create an account, or contact us, we collect:
• Personal identifiers: Full name, email address, phone number, and date of birth (for age verification and birthday offers).
• Booking data: Zone selections, session dates and times, number of players, add-on preferences, and booking history.
• Payment information: We do not store card details. Payments are processed by our PCI-DSS compliant payment partner. We retain only transaction references and amounts.
• Usage data: Pages visited, features used, session duration, and device/browser information collected via analytics cookies.
• Communications: Messages sent via our contact form, WhatsApp notifications you opt into, and customer support exchanges.
2. How We Use Your Information
We use your data to:
• Process and confirm bookings, and send booking confirmation tickets (QR codes).
• Send session reminders and post-race report cards via WhatsApp (only if you opt in).
• Manage your loyalty points balance and racer profile progression.
• Send birthday offers and promotional communications (only with your consent).
• Improve our zones, pricing, and services through aggregated analytics.
• Comply with legal obligations including safety incident records.
• Respond to enquiries and provide customer support.
3. Legal Basis for Processing
We process your data under the following legal bases (as applicable under DPDP Act 2023 and GDPR):
• Contract performance: Processing necessary to fulfil your booking.
• Legitimate interests: Safety monitoring, fraud prevention, and service improvement.
• Consent: Marketing communications, birthday offers, and optional WhatsApp notifications. You may withdraw consent at any time.
• Legal obligation: Incident records, tax invoices, and regulatory compliance.
4. Data Sharing
We do not sell your personal data. We share it only with:
• Payment processors: To complete transactions securely.
• Twilio: To deliver WhatsApp notifications you have opted into.
• Analytics providers: Aggregated, anonymised data only.
• Legal authorities: When required by law, court order, or to protect safety.
All third-party processors are bound by data processing agreements and may not use your data for their own purposes.
5. Data Retention
• Booking records: Retained for 7 years for tax and legal compliance.
• Account data: Retained while your account is active, plus 2 years after deletion request.
• Marketing preferences: Until you withdraw consent.
• Safety incident records: Retained for 10 years as required by venue liability regulations.
• Analytics data: Anonymised after 26 months.
6. Your Rights
You have the right to:
• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request erasure of your data (subject to legal retention obligations).
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Opt out of marketing or WhatsApp notifications at any time.
To exercise any right, email us at privacy@arenarcexperience.com. We will respond within 30 days.
7. Cookies
We use cookies and similar technologies. See our Cookie Policy (accessible via the cookie banner) for full details. You can manage preferences at any time via the cookie settings link in the footer.
8. Security
We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, role-based access controls, and regular security audits. However, no system is 100% secure. Please notify us immediately at security@arenarcexperience.com if you suspect unauthorised access to your account.
9. Children
Arena RC welcomes junior racers! For participants under 13, a parent or guardian must create the account and provide consent. We do not knowingly collect data from children under 13 without parental consent. If you believe we have inadvertently collected such data, contact us immediately.
10. Changes to This Policy
We may update this policy periodically. Material changes will be notified via email or a prominent notice on our website at least 14 days before taking effect. Continued use of our services after that date constitutes acceptance.
11. Contact Us
For privacy-related queries:
Arena RC Experience Centre
Data Protection Officer
42 Racetrack Boulevard, Industrial Zone, Mumbai 400072
Email: privacy@arenarcexperience.com
Phone: +91 98765 43210