Privacy Policy

This Privacy Policy explains how Padelier ("we", "us", the "Club") collects, uses, and protects your personal data when you apply for membership, use the Club platform, or book sessions with our professionals. It applies to applicants, members, and professionals ("Pros") internationally.

1. Data we collect

• Identity & contact: first and last name, email address (or your assistant's), mobile number, city and country.
• Application data: your answers to our membership questionnaire, including your padel, what you do, your Instagram if you share it, and who invited you.
• Account data: authentication credentials handled by our auth provider, session tokens, and role (member, pro, admin).
• Booking & session data: sessions booked, chosen Pro, dates, city, cancellations, and no-shows.
• Messages: what you write to the Club's concierge, and the note your Pro writes to you after each hour.
• Payment metadata: Stripe customer and payment identifiers, the card brand and last four digits, amount, currency, and status. Your card is entered in Stripe's own form: we never receive or store full card numbers. A card saved with an application is charged only if the application is approved.
• Technical data: IP address, device and browser information, and basic usage logs necessary for security and abuse prevention. Stripe's card form also reads device information to prevent fraud.

2. Why we use your data & legal basis

• To review applications and manage membership — legal basis: performance of a contract and our legitimate interest in curating a private club.
• To provide bookings, cancellations, and communications — performance of a contract.
• To process payments and prevent fraud — performance of a contract and legitimate interest.
• To comply with legal obligations — accounting, tax, and responding to lawful requests.
• To improve and secure the platform — legitimate interest.

We do not sell your personal data and we do not use it for third-party advertising.

3. Processors we rely on

• Supabase — authentication, database, and file storage for the Club platform. Data may be processed in the regions supported by our Supabase project.
• Stripe — payment processing and refunds. Stripe is an independent controller for its own compliance purposes.
• Resend — transactional emails (sign-in codes, application and booking confirmations).
• Cloudflare — hosting of padelier.app.

Each processor is bound by its own agreement and data protection commitments. A current list is available on request.

4. Sharing

We share the minimum data needed with the Pro you book (your first name and booking details), with venues where required for court access, and with authorities when legally required.

5. International transfers

Because we operate internationally and rely on cloud providers, your data may be transferred to and processed in countries outside your own. Where required, we rely on standard contractual clauses or equivalent safeguards.

6. Retention

• Application data for rejected applicants: up to 12 months, then deleted or anonymised.
• Active member data: for the duration of membership plus 24 months.
• Booking and payment records: retained for the period required by accounting and tax law (typically up to 10 years).
• Security logs: up to 12 months.
• Deleted accounts: closed at once, then erased 30 days later. Payment records kept for accounting are kept without your name.

7. Your rights

Subject to applicable law, you may request access to your data, correction, deletion, restriction, portability, and objection to certain processing. You may also withdraw consent where processing is based on consent. To exercise any right, contact us at founder@padelier.app. You may also lodge a complaint with your local data protection authority.

8. Security

We use industry-standard measures including encrypted transport (HTTPS), access controls, row-level security on our database, and least-privilege service accounts. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children

The Club is not directed to children under 18. We do not knowingly collect personal data from minors.

10. Changes

We may update this Policy. Material changes will be notified by email or on the platform. The "Last updated" date at the top reflects the current version.

11. Contact

Privacy questions and requests: founder@padelier.app.