We collect your name, email, phone number, one emergency contact, and optionally an Instagram handle. We use them to run your membership and to keep you safe at events. We do not sell your data and we do not profile you. You can ask for a copy, a correction or a deletion at any time by emailing aurasocialclub.lille@gmail.com.
The data controller is Aura Social Club, an association loi 1901 registered with the préfecture du Nord under RNA W595047111, whose registered office is at 19 rue Abbé Lemire, 59110 La Madeleine. For anything about your data, write to aurasocialclub.lille@gmail.com.
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| First name, surname, email, phone | To create and run your membership, confirm bookings, and reach you if a session changes | Performance of the contract | While you are a member, then 3 years |
| Instagram handle, or another profile, if you give one | To put a face to a name when we read your application, and to recognise you at your first event | Our legitimate interest in knowing who joins a private club. Giving it is optional and membership does not depend on it | While you are a member, then deleted |
| Emergency contact name and phone | So the person hosting a physical session can call someone if you are hurt | Legitimate interest in member safety, and your vital interests | While you are a member, then deleted |
| Record of what you agreed to, and when | To show which version of the terms, privacy notice and member code you accepted | Legal obligation, and our legitimate interest in being able to prove consent | 5 years after membership ends |
| Bookings, what you paid and attendance | To run your bookings, take payment for a place and know who is expected at an event | Performance of the contract | While you are a member, then 3 years |
| Payment records (amount, date, last 4 digits, Stripe reference) | Accounting and tax, and to answer billing questions | Legal obligation | 10 years, as French accounting law requires |
| Photographs of you at events | Our Instagram and website | Your consent, which is optional and can be withdrawn | Until you withdraw consent |
| Email address for the monthly letter | To send you what is coming up | Your consent, which is optional | Until you unsubscribe |
We deliberately do not collect health data. When you join you confirm that you are fit to take part, and you tell the instructor on the day about anything relevant. That conversation stays between you and them, and we do not record it. Health data is a special category under article 9 of the GDPR, and the safest way to handle it is not to hold it.
If you give us an Instagram handle we look at it once, when we read your application, and then it sits in the member list. We do not follow you from the club account, we do not scrape or store your posts, we do not share the handle with other members, and we do not use it to advertise to you. Leaving it blank makes no difference to whether you are accepted.
That person's details are personal data about someone who is not our member, which is why we ask you to check with them first. If they contact us we will tell them we hold their name and number, why, and delete it on request.
Only the people and services we need to run the club:
We do not sell your data, rent it, or share it for anyone else's advertising.
We aim to keep everything inside the European Economic Area. Where a provider transfers data outside it, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision.
Under the GDPR you can ask us to:
Email aurasocialclub.lille@gmail.com and we will reply within one month. If you are not satisfied you can complain to the French supervisory authority, the CNIL, 3 place de Fontenoy, 75007 Paris.
This site sets no cookies at all: no advertising cookies, no analytics cookies, and nothing that follows you from one site to another.
We do count visits. We use Vercel Web Analytics to know how many people come to the site and which pages they read. It sets no cookie, stores no identifier, and builds no profile: a visit is counted and then forgotten, and we cannot tell one visitor from another or recognise you on a later visit. That is also why there is no consent banner on this site, and why you will not find one: there is nothing here to consent to.
Fonts are loaded from Google Fonts, which means your browser makes a request to Google and Google sees your IP address.
If anything that identifies or follows a visitor is added later, this notice will be updated and a proper consent banner added first, because under French rules consent is required before any non-essential cookie is set.
Access to the member list is limited to the founders. Accounts use two-factor authentication. Payment data never reaches us. [Write down who has access, review it once a year, and note here what happens in the event of a breach: the CNIL must be notified within 72 hours.]
If we change this notice we will date the new version and, for anything significant, email members. The version in force when you joined is stored with your consent record.
