Draft — to be reviewed before paid plans launch.

Privacy Policy

Last updated 1 October 2026

Who looks after your data

[Owner / company name], [address], is the data controller. Contact: [contact email].

What we keep, and why

• Your account — name, email, password (stored only as a one-way hash), plan.
• Your Padel4all login and card details — encrypted, used only to log in to Padel4all and book for you when you ask. Your card's security code (CVC) is never stored on disk; it's held in memory only for the booking it's needed for.
• Your bookings and activity — so we can show them to you and book correctly.
• Matches — what you post, and the names, levels and (optional) mobile and payment link you add, shown only as described on the Matches pages. Guests' names and mobiles go to the organiser only and are deleted after the match.
• Subscription — handled by Stripe; we keep only your Stripe customer and subscription references.

The lawful basis is to provide the service you've asked for (contract), and our legitimate interest in keeping it secure and working.

Who else processes it

Fly.io (hosting, UK/EU), Upstash (data store), Resend (email), Stripe (payments), and Padel4all (when we act on your account). We don't sell your data or use it for advertising.

How long

While you have an account. When you close it, we delete your details within 30 days, except what we must keep by law (e.g. payment records).

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it — contact us. You can also complain to the Information Commissioner's Office (ico.org.uk).