Privacy Notice

1. Who we are

Mile Club is a trading name of Michael Evans, a sole trader based in the United Kingdom ("Mile Club", "we", "us"). Michael Evans is the data controller responsible for personal data collected through the Mile Club websites (including mile48.co.uk and mile24.co.uk) and the Mile Club subscription service.

Payments are processed by Paddle as the Merchant of Record.

For any questions about this notice or your data, contact us at hello@mileclub.co.uk. For billing queries, use paddle.net.

2. Personal data we collect

• Account & contact data: email address provided at checkout or sign-up.
• Subscription data: plan tier, billing interval, subscription status, period start/end. Provided to us by Paddle.
• Usage & telemetry: pages viewed across Mile48 and Mile24, flight unlocks, search preferences, saved escapes, device type, browser, and IP address.
• Support communications: messages you send us at hello@mileclub.co.uk or via Paddle.

Payment card details are collected directly by Paddle and are never seen or stored by Mile Club.

3. Why we use your data and our legal basis

• Provide and operate the Mile Club service (Mile48 + Mile24) — performance of contract.
• Authenticate users and protect against fraud and abuse — legitimate interests.
• Improve the product, debug issues, and prioritise features — legitimate interests.
• Send transactional emails (receipts, subscription updates) — performance of contract.
• Comply with tax, accounting, and other legal obligations — legal obligation.

4. Who we share your data with

• Paddle.com Market Limited — our Merchant of Record. Paddle handles checkout, payments, billing, tax, invoicing, subscription management, and refund requests on our behalf.
• Hosting and infrastructure providers — to host the Mile Club applications, database, and backend functions.
• Third-party data sources we rely on for live alerts (e.g. Transport for London) — we send queries, not your personal data.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. International transfers

Some of our service providers process data outside the UK/EEA. Where this happens we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions issued by the UK Government or European Commission.

6. Retention

We keep your data only for as long as needed to provide the service and meet legal obligations. Subscription and billing records are kept for at least 6 years for tax purposes. Usage telemetry is kept for up to 24 months. Support messages are kept for up to 3 years.

7. Your rights

Under UK GDPR and EU GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data ("right to erasure").
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time, where consent is the basis.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

We aim to respond to all requests within one month. Send requests to hello@mileclub.co.uk.

8. Security

We use appropriate technical and organisational measures, including TLS encryption in transit, encrypted storage, access controls, and verified webhook signatures, to protect your personal data.

9. Cookies

Mile Club uses essential cookies and local storage to keep you signed in, remember your preferences, and operate the Mile Club unlock state across Mile48 and Mile24. We do not use advertising cookies. Paddle's checkout overlay sets its own cookies for fraud prevention and session management.

10. Changes

We may update this notice from time to time. Material changes will be highlighted on this page and, where appropriate, communicated by email.