Privacy Policy

1. Who We Are

Welcome World ("we", "us"), operating the Maison du Volley website and Programmes, is the data controller for the personal data described in this Privacy Policy. Welcome World is a French société par actions simplifiée registered with the RCS of Toulon under number 834 983 900, registered office 14 Rue des Lilas, 83210 La Farlède, France. You can contact us about privacy matters at kat@maison-du-volley.com.

2. What Personal Data We Collect

• Account: full name, email address, phone number.
• Enquiries & Bookings: programme interest, departure dates, group size, payment status, booking history.
• Payments: processed by Stripe — we do not store full card numbers on our own servers.
• Testimonials: if you choose to submit one, your name, written review, optional photo, and country.
• Contact form: full name, email, phone, and the content of your message.
• Newsletter: email address, and your subscription status.
• Technical data: IP address (for spam and abuse prevention), and bot-verification data via Cloudflare Turnstile.

3. How We Use Your Data

We use your personal data to process Bookings and payments; respond to Enquiries and contact messages; send transactional emails such as booking confirmations, payment receipts, and balance reminders; send newsletter updates if you've subscribed; moderate and display testimonials you've chosen to submit; and prevent spam and fraud on our forms. Depending on the purpose, we rely on the performance of a contract with you, our legitimate interests (for example, in preventing fraud), or your consent (for example, for the newsletter and for testimonials, including any photo submitted).

4. Who We Share It With

We use the following processors, each of which may process your data on our behalf: Stripe (payment processing); Resend (transactional and newsletter email delivery); Cloudflare (bot and spam protection on our forms); and our hosting provider, which stores the website's database and uploaded files. Where a processor is located outside the European Economic Area, we rely on an appropriate safeguard recognised under GDPR, such as the EU–US Data Privacy Framework or Standard Contractual Clauses, as applicable to that provider.

5. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Policy. Financial and accounting records are retained for the period required under French law. Where you have not converted an Enquiry into a Booking, or where you unsubscribe from our newsletter, we will delete or anonymise your data after a reasonable period of inactivity.

6. Your Rights

Under GDPR, you have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us using the details in Section 1. If you are not satisfied with our response, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), or with the data protection authority in your own country of residence if you live elsewhere in the EU.

7. Cookies

Our website uses cookies that are strictly necessary for its operation, including those set by Stripe (payments) and Cloudflare Turnstile (spam and bot protection). Where we use any additional analytics or tracking cookies, we will ask for your consent through a cookie banner before they are activated. You can manage your cookie preferences at any time through that banner.

8. Children's Data

Some Maison du Volley Programmes are open to participants who are minors. Where this is the case, the account and Booking are made and managed by a parent or legal guardian, who provides the relevant consents — including in relation to personal data and image use — as part of the Programme Agreement for that Programme.

9. Security

We use HTTPS across the site, Stripe's PCI-DSS-compliant payment processing (so we never see your full card number), and login-attempt rate-limiting to help protect accounts from unauthorised access.

10. How to Contact Us

Questions about this Privacy Policy, or requests to exercise your rights, can be sent to kat@maison-du-volley.com, or by post to Welcome World, 14 Rue des Lilas, 83210 La Farlède, France.