Privacy Policy — Padel Rally

1. Who we are

Padel Rally is a padel community platform currently operating as a closed beta for members of David Lloyd Shrewsbury. We are the data controller for the personal data described in this policy.

Questions about this policy? Email us at privacy@padelmvp.app.

2. What data we collect and why

When you submit a beta application we collect:

Name and email address — to identify you and send your invite.
WhatsApp number (optional) — for invite coordination if needed.
Padel level and play frequency — to match you with suitable games.
How you currently organise games — to understand our users' needs.
Your biggest frustration (optional) — to improve the product.
Membership and independence confirmations — to verify eligibility.
Legal acceptance timestamp and version — to record your consent.
IP address — used transiently for rate-limiting only; not stored.

3. Legal basis for processing

We process your data on the basis of contract (to manage your beta application and access) and legitimate interests (to protect our systems from abuse). Where you have opted in to marketing emails, we process those on the basis of consent, which you may withdraw at any time.

4. How we store and protect your data

Your application data is stored in a Supabase PostgreSQL database hosted in the EU. Access is restricted to authenticated admins only. We do not use your data for advertising or sell it to third parties.

We retain your data for up to 730 days from your application date, or until you ask us to delete it, whichever comes first.

5. Who we share your data with

We use the following sub-processors, each bound by appropriate data-processing agreements:

Supabase Inc. — database hosting (EU region).
Vercel Inc. — application hosting and edge delivery.

We do not share your data with David Lloyd Clubs or any other third party.

6. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data.
Withdraw marketing consent at any time.
Object to processing based on legitimate interests.

To exercise any of these rights, email privacy@padelmvp.app. We will respond within 30 days.

7. Cookies

We do not use tracking or advertising cookies. The only cookies set are strictly necessary session cookies used by the authentication system.

8. Changes to this policy

If we make material changes we will update the version number and effective date at the top of this page and, where feasible, notify beta members by email.