Privacy policy
How we handle personal data on this website, and how personal data is handled inside Dropin.
Last updated: 10/01/2026
1. Who we are
Dropin is provided by The Software Collective, a company registered in England and Wales (company number 12014155) with its registered office at 5 Parkgate Rd, Neston, Cheshire CH64 9XF.
For anything to do with this policy or your personal data, write to info@getdropin.co.uk.
2. Two different roles
This matters, because it decides who you should contact about what.
- This website. We decide what is collected and why, so we are the data controller. This policy covers it.
- The Dropin product. When a skatepark uses Dropin, the park decides what member data it holds and why. The park is the data controller and we are its data processor — we hold and process that data on the park's instructions, under a written agreement. If you are a member of a skatepark and want to see, correct or delete your data, contact the park, not us. See section 7.
3. Data we collect through this website
- Enquiries. The name, park or company, email address, phone number and message you send us through the contact form or by email.
- Demonstrations. Anything you send us to set up a demo — for example your session times and prices. Please do not send us real member data for a demo; sample data is fine.
- Server logs. Our hosting provider records the IP address, browser type, pages requested and timestamps of visits, which we use to keep the site available and secure.
We do not use tracking or advertising cookies on this site. See section 10.
4. Why we use it, and our lawful basis
| What for | Lawful basis |
|---|---|
| Replying to your enquiry and arranging a demo | Steps taken at your request before entering a contract |
| Following up on a quote we have given you | Legitimate interests (running and growing our business) |
| Keeping the website available and secure | Legitimate interests (protecting our systems) |
| Meeting our own accounting and legal obligations | Legal obligation |
We do not send marketing email to people who have not asked for it, and any marketing we do send has an unsubscribe link that works.
5. Who we share it with
We do not sell personal data. We share it only with suppliers who help us run the business:
- Our accountants and professional advisers, where necessary
- Anyone we are legally required to disclose it to
Each supplier is bound by a contract that limits what they may do with the data.
6. How long we keep it
- Enquiries that go nowhere: 24 months from the last contact.
- Customer records: for the life of the contract and 6 years afterwards, for tax and legal reasons.
- Server logs: 90 days.
7. Personal data inside Dropin
Dropin holds the records a skatepark needs to run: member names and contact details, dates of birth, emergency contacts, photographs, signed waivers, medical notes where a member has given them, visit and purchase history, and accident reports. Some of that is health data, which gets extra protection in law and in the software.
As the park's processor, we:
- only process member data on the park's documented instructions;
- keep each park's data logically separated from every other park's;
- record every read of a medical note in an audit log the park can inspect;
- do not use member data for our own purposes, and never sell it;
- return or delete the data when the park stops using Dropin.
If you are a park member: your park is responsible for your data. Ask them for a copy, a correction or a deletion. If you contact us instead, we will pass your request to the park and tell you we have done so.
Card details. We never see or store full card numbers. Card payments are handled by the park's own payment provider; Dropin stores only a reference to the transaction.
8. Security
Passwords are hashed, session tokens are held server-side so access can be revoked instantly, credentials for payment and accounting providers are encrypted at rest, uploaded files are checked and served only to signed-in staff of the owning park, and access to member records requires a login scoped to a single park. No system is perfect; if we ever have a breach affecting personal data we will report it to the ICO within 72 hours where required, and tell affected people where the law says we must.
9. International transfers
We host data in the United Kingdom / the EEA. If any supplier processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement, and we will say so here.
10. Cookies
This marketing website sets no cookies and includes no analytics or advertising scripts, so there is no cookie banner to click through. The Dropin application itself sets one essential cookie to keep you signed in, and remembers which till a device is using; neither is used for tracking or advertising.
11. Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete it, where there is no good reason for us to keep it;
- restrict or object to how we use it;
- send it to you or another provider in a portable format;
- withdraw consent, where we relied on consent.
Write to info@getdropin.co.uk and we will respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. We would rather you came to us first so we can put it right.
12. Changes to this policy
If we change how we handle personal data we will update this page and change the date at the top. Material changes affecting customers will be sent by email.