Privacy Policy

This Privacy Policy explains how turfs.bd ("we", "us") collects, uses and protects your information when you use our platform.

Information we collect

• Account data — name, email, phone number, password (hashed).
• Business data (for merchants) — business name, contact person, venue details.
• Booking data — venues booked, dates, times, amounts.
• Payment data — processed by our payment partners; we do not store full card numbers.
• Interest requests — if you ask to be told when turfs open in your area — that area and the phone number or email you gave, used only to tell you.
• Technical data — IP address, browser type, device, and usage logs.

How we use your information

• To provide and operate the booking service.
• To process payments and send booking confirmations.
• To verify merchant accounts before activation.
• To communicate service updates, security notices and (with consent) promotions.
• To detect fraud, abuse and enforce our Terms of Service.
• To comply with legal obligations.

Sharing your information

We share information only as needed to provide the Service:

• With the Merchant whose venue you book (so they can fulfil your booking).
• With payment processors and infrastructure providers under contractual safeguards.
• With authorities when required by law.

We do not sell your personal data.

Measuring visits and ads

On our public pages we use Meta Pixel and Google Analytics to understand how people find turfs.bd and which of our ads work. They set cookies and receive the address of the page you are on, the page you came from, your browser and device details, and actions such as signing up. We never send them your name, email address or phone number. Your bookings, payments, account pages, payment and invite links, and the turf owners' portal are not measured.

You can block these cookies in your browser's settings, choose which ads you see on Facebook and Instagram in Meta's Ad Preferences, and stop Google Analytics with Google's opt-out browser add-on.

Data retention

We retain account and booking records for as long as your account is active and as required by law (e.g. for tax or accounting purposes). You may request deletion of your account at any time; some records may be retained in anonymised form.

Security

We use encryption in transit, hashed passwords, role-based access controls and audit logging. No system is perfectly secure — please use a strong, unique password and notify us of any suspicious activity.

Your rights

You may access, update or delete your account information from your profile, or request assistance at [email protected].

You may also opt out of marketing emails at any time.

Children

turfs.bd is not directed to children under 13. If we learn we have collected data from a child under 13, we will delete it.

Changes to this policy

We may update this policy. Material changes will be communicated via email or an in-app notice.

Contact

Privacy questions? Email [email protected].