Legal
Privacy Policy
1. Who We Are
The Mälu Club Limited (“we”, “us”, “our”) is a company registered in England and Wales (Company No. 15059759). We operate silverstoneF1tickets.com and provide premium hospitality experiences at the British Formula 1 Grand Prix 2026, Silverstone Circuit.
We are the Data Controller for the personal data we collect from you. If you have any questions about this Privacy Policy or how we use your data, please contact us at info@themaluclub.com.
2. What Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: Full name, title
- Contact Data: Email address, telephone number
- Transaction Data: Details of the Experience Package(s) you have purchased, payment amounts, deposit and balance records
- Financial Data: Payment card details (processed securely via Stripe — we do not store full card details ourselves)
- Communications Data: Records of any correspondence you have with us via email, phone, or our website contact form
- Technical Data: IP address, browser type, device type, and website usage data collected via cookies and analytics tools
- Marketing Preferences: Your preferences regarding marketing communications from us
3. How We Collect Your Data
We collect personal data through the following means:
- Directly from you when you complete our contact form, make a booking, pay a deposit, or contact us by phone or email
- Automatically via our website through cookies and similar technologies when you browse silverstoneF1tickets.com
- From our payment processor Stripe when you make a payment
- From Netlify, which hosts our website and processes contact form submissions
4. How We Use Your Data
We use your personal data for the following purposes and on the following legal bases:
- To process and manage your booking (contractual necessity)
- To process payments and issue invoices (contractual necessity)
- To communicate with you about your booking, event information, and logistics (contractual necessity)
- To comply with our legal obligations, including financial record-keeping (legal obligation)
- To send you marketing communications about future events — only where you have consented or we have a legitimate interest and you have not opted out (legitimate interests / consent)
- To improve our website and services via analytics (legitimate interests)
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We may share your data with the following trusted third parties, solely to the extent necessary to provide our services:
- Stripe, Inc. — our secure payment processor (privacy policy at stripe.com/gb/privacy)
- Netlify, Inc. — website hosting and form submission processing
- Silverstone Circuit Ltd — as required to register and admit guests to the Event
- F1 Paddock Club / Formula One Management Ltd — as required for Paddock Club ticket registration
- Professional advisors — accountants, lawyers, insurers — where necessary
- Government authorities — where required by law
All third parties are required to keep your personal data secure and to use it only for the purposes for which it was shared.
6. International Transfers
Some of our third-party providers (including Stripe and Netlify) may process data outside the United Kingdom and European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, to protect your data in accordance with UK GDPR requirements.
7. Data Retention
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal and accounting requirements. Booking and financial records are retained for a minimum of 6 years from the date of the Event in accordance with UK tax law. Marketing data is retained until you withdraw consent or opt out.
8. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your data in certain circumstances
- Right to restrict processing — to request we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Rights relating to automated decision-making — we do not use automated decision-making or profiling
To exercise any of these rights, please contact us at info@themaluclub.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Cookies
Our website uses essential cookies necessary for the site to function. We may also use analytics cookies (such as Google Analytics) to understand how visitors use our site, helping us to improve it. You may disable cookies in your browser settings, though this may affect certain functionality. By continuing to use our website, you consent to our use of cookies in accordance with this policy.
10. Marketing Communications
We may contact you with information about future events and experiences where you have provided consent or where we have a legitimate interest. You may opt out of marketing communications at any time by emailing info@themaluclub.com with “Unsubscribe” in the subject line, or by clicking the unsubscribe link in any marketing email.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the effective date shown at the top. We will notify you of material changes by email where we hold your contact details.
12. Contact Us
For any privacy-related queries, requests, or complaints, please contact:
The Mälu Club Limited
Email: info@themaluclub.com
Tel: +44 (0) 7496 472 028
Company No. 15059759 — Registered in England & Wales