Privacy policy

Black Box E-Sports & Cafe, PW26+PJF, Brajeshwari Extension, Greater Brajeshwari, Indore, Madhya Pradesh 452016, is the data controller for the information described below.

What we collect

• When you book — your name, phone number and, if you give one, your email address. Plus the booking itself: which station, when, for how long, what it cost.
• If you create an account — the above, plus a password hash handled entirely by our authentication provider. We never see or store your password.
• If you buy a membership or earn loyalty points — your visit and spend history, so we can apply the right discount.
• If you contact us — whatever you put in the message.
• If you register for a tournament — your team name, captain contact details and roster.

What we do not collect

• We do not store card numbers, UPI IDs or bank details. Payment providers handle those.
• We do not track you across other websites, and there are no advertising cookies.
• We do not record anything from the gaming stations themselves.

Why we collect it

• To hold your station and be able to contact you about that booking.
• To take payment and issue a receipt.
• To apply your membership discount and loyalty balance correctly.
• To keep the accounting records the law requires us to keep.

We only send marketing messages if you explicitly opted in, and every one of them has an opt-out.

Who it is shared with

• Our database and hosting providers, who store the data on our behalf.
• Payment providers, when you pay online, to process and verify the transaction.
• Messaging providers, to deliver a booking confirmation to the number you gave us.
• The owner's reporting spreadsheet. Booking, payment and customer summaries are synced to a private Google Sheet used for accounting. It is not public and is shared only with the business's own accounts.

We do not sell your data to anybody, for any reason.

How long we keep it

• Booking and payment records: as long as tax law requires, then deleted.
• Account details: until you ask us to delete them.
• Contact form messages: 12 months.

Your rights

You can ask us to:

• show you what we hold about you;
• correct anything that is wrong;
• delete your account and personal details — we keep only the anonymised financial record we are legally required to retain;
• stop sending you marketing messages.

Ask at the desk or through the contact form and we will action it.

Cookies

We set one kind of cookie: the session cookie that keeps you signed in. It is strictly necessary for the account area to work, and it is removed when you sign out. There are no analytics or advertising cookies on this site.

Security

Data is stored in a managed database with row-level access control, so one customer's records are not reachable from another customer's session. Staff access is limited by role — reception staff cannot see financial reports, and cafe staff cannot see gaming revenue. Privileged actions are recorded in an audit log.

Children

We do not knowingly hold data for anyone under 13. If a booking was made for a child, the contact details we hold should be a parent or guardian's.

Changes

If this policy changes materially we will say so on this page. Continued use of the site after a change means you accept the updated policy.