Padelier: Members Club

This Privacy Policy explains how Padelier ("we", "us", the "Club") collects, uses, and protects your personal data when you apply for membership, use the Club platform, or book sessions with our professionals. It applies to applicants, members, and professionals ("Pros") internationally.

1. Data we collect

Identity & contact: first and last name, email address, city and country.
Application data: your answers to our membership questionnaire, including padel background, availability, and referral.
Account data: authentication credentials handled by our auth provider, session tokens, and role (member, pro, admin).
Booking & session data: sessions booked, chosen Pro, dates, city, cancellations, and no-shows.
Payment metadata: Stripe customer and payment identifiers, amount, currency, and status. We do not receive or store full card numbers.
Technical data: IP address, device and browser information, and basic usage logs necessary for security and abuse prevention.

2. Why we use your data & legal basis

To review applications and manage membership — legal basis: performance of a contract and our legitimate interest in curating a private club.
To provide bookings, cancellations, and communications — performance of a contract.
To process payments and prevent fraud — performance of a contract and legitimate interest.
To comply with legal obligations — accounting, tax, and responding to lawful requests.
To improve and secure the platform — legitimate interest.

We do not sell your personal data and we do not use it for third-party advertising.

3. Processors we rely on

Supabase — authentication, database, and file storage for the Club platform. Data may be processed in the regions supported by our Supabase project.
Stripe — payment processing, refunds, and Stripe Connect payouts to Pros. Stripe is an independent controller for its own compliance purposes.
Email delivery — transactional emails (sign-in links, booking confirmations) sent via our email provider.

Each processor is bound by its own agreement and data protection commitments. A current list is available on request.

4. Sharing

We share the minimum data needed with the Pro you book (your first name and booking details), with venues where required for court access, and with authorities when legally required.

5. International transfers

Because we operate internationally and rely on cloud providers, your data may be transferred to and processed in countries outside your own. Where required, we rely on standard contractual clauses or equivalent safeguards.

6. Retention

Application data for rejected applicants: up to 12 months, then deleted or anonymised.
Active member data: for the duration of membership plus 24 months.
Booking and payment records: retained for the period required by accounting and tax law (typically up to 10 years).
Security logs: up to 12 months.

7. Your rights

Subject to applicable law, you may request access to your data, correction, deletion, restriction, portability, and objection to certain processing. You may also withdraw consent where processing is based on consent. To exercise any right, contact us at privacy@padelier.app. You may also lodge a complaint with your local data protection authority.

8. Security

We use industry-standard measures including encrypted transport (HTTPS), access controls, row-level security on our database, and least-privilege service accounts. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children

The Club is not directed to children under 18. We do not knowingly collect personal data from minors.

10. Changes

We may update this Policy. Material changes will be notified by email or on the platform. The "Last updated" date at the top reflects the current version.

11. Contact

Privacy questions and requests: privacy@padelier.app.