1. Who We Are

This website is operated by Sunbury Lodge No. 1733, a Masonic lodge operating under the United Grand Lodge of England (UGLE), meeting at the Twickenham District Masonic Centre (TDMC), 150 London Road, Twickenham, TW1 1HD.

For data protection enquiries, please contact us via the Contact Us page.

2. What Data We Collect

When you use this website — including booking tickets, registering as a member, or submitting a contact enquiry — we may collect the following personal data:

• Full name
• Email address
• Phone number (optional, provided at your discretion)
• Masonic rank (e.g. Entered Apprentice, Fellow Craft, Master Mason)
• Lodge number
• Member type (e.g. General, Freemason)
• Event booking details (tickets purchased, race entries, notes)
• Payment information — we do not store card details; payments are processed by Stripe (see Section 5)

We do not collect postal addresses.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Processing and managing ticket and event bookings
• Sending booking confirmations and payment receipts by email
• Communicating event information relevant to your booking
• Managing member profiles and lodge records
• Responding to contact form enquiries
• Sending bulk communications to registered members (where consent applies)

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

• Contract performance — to process bookings and payments you have requested
• Legitimate interests — to manage lodge membership records and communicate event information
• Consent — where you have explicitly opted in to receive communications

5. Third-Party Data Processors

We use the following third-party services to operate this website. Each acts as a data processor on our behalf:

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes described in this notice:

• Booking records are retained for a reasonable period for accounting and administrative purposes
• Member profile data is held for the duration of active membership and a reasonable period thereafter
• Contact enquiries are retained until resolved and for a reasonable follow-up period

You may request deletion of your data at any time (see Section 7).

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request corrections to inaccurate data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, please contact us via the Contact Us page. We will respond within 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data is transmitted over HTTPS. Payment data is handled exclusively by Stripe and is never stored by us.

9. Cookies

This website may use essential cookies to maintain your session and enable core functionality (such as keeping your cart or login state). We do not currently use analytics or advertising cookies.

10. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK's data protection authority:

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review it periodically.