Privacy Policy — Padel Rally

1. Who we are

Padel Rally is a padel community platform currently operating as a closed beta for members of David Lloyd Shrewsbury. We are the data controller for the personal data described in this policy.

Questions about this policy? Email us at hello@joinpadelrally.com.

2. What data we collect and why

When you submit a beta application we collect:

Name and email address — to identify you and send your invite.
WhatsApp number (optional) — for invite coordination if needed.
Padel level and play frequency — to match you with suitable games.
How you currently organise games — to understand our users' needs.
Your biggest frustration (optional) — to improve the product.
Membership and independence confirmations — to verify eligibility.
Legal acceptance timestamp and version — to record your consent.
IP address — used transiently for rate-limiting only; not stored.

3. Legal basis for processing

We process your data on the basis of contract (to manage your beta application and access) and legitimate interests (to protect our systems from abuse). Where you have opted in to marketing emails, we process those on the basis of consent, which you may withdraw at any time.

4. How we store and protect your data

Your application data is stored in a Supabase PostgreSQL database hosted in the EU. Access is restricted to authenticated admins only. We do not use your data for advertising or sell it to third parties.

We retain your data for up to 730 days from your application date, or until you ask us to delete it, whichever comes first.

5. Who we share your data with

We use the following sub-processors, each bound by appropriate data-processing agreements:

Supabase Inc. — database hosting (EU region).
Vercel Inc. — application hosting and edge delivery.
Brevo (Sendinblue SAS) — sending invitation and account emails, which requires your email address and name.
Cloudflare, Inc. — bot protection on our sign-in and application forms, which processes your IP address to score the request.

Beyond the sub-processors listed above, we do not share your data with anyone — including David Lloyd Clubs. We never sell your data or use it for advertising.

6. What other members can see

Padel Rally is a club community, so some of your information is visible to other members of the same club. Nothing is ever visible to the public internet, and nothing is visible to members of other clubs.

Your display name and preferred side — shown on games you join and to organisers choosing players.
Your club rating and ladder position— shown on the club ladder once you have completed your placement matches. Before that you appear only as “Unranked” and no rating is shown to anyone, including you.
Your availability — if you set the times you usually play, other members can filter games by whether you are free.
Match results — results of rated games are visible to the players involved and affect the club ladder.
Your username — if you choose one, the @handle is shown beside your name wherever members appear, so people with the same name can be told apart.
Recent no-shows — if an organiser records that you did not turn up to a game, the number of such records in a recent period may be shown to organisers of games you join, are waitlisted for, or could be invited to. It is shown to organisers only, never on the ladder or to the club at large, and older records drop out of the period automatically. You can see the same figure on your own stats page.

Your sexis used solely to decide whether you can join a men’s or women’s game. It is never displayed on your profile or to other members.

Hiding your name on the ladder.You can opt out of being named on the club ladder at any time from your profile. Your entry then appears as “Anonymous”: you keep your position so the ladder stays accurate, other members cannot see who you are, and you continue to see your own name. You can turn this back on and off as often as you like, and the change takes effect immediately. Your name remains visible on games you actually join, because the other players need to know who they are playing with.

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data.
Withdraw marketing consent at any time.
Object to processing based on legitimate interests.

To exercise any of these rights, email hello@joinpadelrally.com. We will respond within 30 days.

8. Cookies

We do not use tracking or advertising cookies. The only cookies set are strictly necessary session cookies used by the authentication system.

9. Children

Padel Rally is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect immediately when the updated policy is published on this page, and the version number and “Effective date” at the top show which version is currently in force.

Where a change materially affects how we use your personal data, we will still tell you about it — by email or a prominent notice within the Service — so you can review it and exercise the rights in section 7. Because Padel Rally is an active beta, changes are applied as soon as they are published rather than after a fixed waiting period.