Privacy Policy.

PADL Club Pty Ltd ("we", "our", "us") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at padlclub.app.

By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.

Information you provide:

• Account details: name, email address, phone number (optional), profile photo
• Playing preferences: skill level (e.g., Playtomic rating), preferred playing days and times, home venue
• Match data: scores, results, self-assessments, and any notes or dispute information you submit
• Payment information: processed and stored by our payment processor; we do not store full card numbers
• Communications: messages sent through the platform, support enquiries

Information collected automatically:

• Device information: browser type, operating system, device identifiers
• Usage data: pages visited, features used, time spent on the platform
• Location data: approximate location based on IP address (not precise GPS)
• Diagnostics & crash data: when the app crashes or hits an unexpected error, we automatically capture the stack trace, browser/device state, and a session identifier through our error monitoring service to help us reproduce and fix the issue. We do not record video or screenshots of your session
• Push notification tokens: if you grant permission, we receive a device-specific token from your device's push notification service to deliver match reminders and league updates. You can revoke this at any time in your device settings

We collect this information for the purposes outlined in Section 3 below. Where possible, we will collect personal information directly from you. We will not collect sensitive information (such as health data) unless you voluntarily provide it (e.g., injury details for a refund request).

We use collected information to:

• Provide, maintain, and improve the Service
• Match scheduling: use your availability to suggest optimal match times
• Rankings and standings: calculate and display player/team performance
• AI coaching: generate personalised performance insights (if opted in)
• Notifications: send match reminders, score confirmations, and league updates
• Payments: process registration fees, tournament entries, and subscriptions
• Analytics: understand how users interact with the platform to improve the experience
• Safety: detect and prevent fraud, abuse, and terms violations

We will only use your personal information for the purposes for which it was collected, or for a directly related purpose you would reasonably expect.

We share your information only in these circumstances:

• With other players: Your name, team, match results, and rankings are visible to other league/tournament participants based on your privacy settings
• With league administrators: Moderators and club admins can view player details, availability, and match records for leagues they manage
• Service providers: We use trusted third parties to provide payments, database hosting and authentication, application hosting, AI coaching, error monitoring, court booking links, and push notification delivery. These services have their own privacy policies. See Section 5 for details on overseas data transfers
• Authentication providers: If you choose to sign in with Google or Apple, those providers share your email address, name, and profile photo with us to create your account. They do not receive your match data or activity on PADL Club
• Legal requirements: We may disclose information if required by law, regulation, or court order, or to protect the rights and safety of PADL Club and its users

We do not sell your personal information to third parties. We do not use your data for third-party advertising.

In accordance with Australian Privacy Principle 8, we disclose that your personal information may be transferred to and processed in countries outside of Australia. Our key data processing activities and the countries where your data may be processed include:

• Database & authentication: Provided by a third-party cloud platform hosted on AWS infrastructure in Sydney, Australia, with encryption at rest and in transit. Data may be accessed from other jurisdictions, including the United States, for support purposes
• Payment processing: Handled by a PCI-DSS Level 1 certified payment processor. Data may be processed in the United States, Ireland, and other countries where the processor operates
• Application hosting & CDN: Served from edge nodes globally, including in the United States
• AI coaching: When you use AI Coach features, your reflections, match notes, and prompts are processed in the United States by a commercial AI provider. Under our commercial terms with the provider, prompts and outputs are not used to train their models and are retained only as needed to provide the service
• Error monitoring: Crash reports, error stack traces, and the browser/device state at the moment of an error are sent to our error monitoring service to help us debug issues. This data is hosted in the United States and Germany

Before disclosing personal information overseas, we take reasonable steps to ensure that the overseas recipient handles your information in accordance with the Australian Privacy Principles. Where we cannot ensure this, we will seek your consent or only transfer data where it is necessary to perform our contract with you.

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure password hashing, row-level security policies on our database, and regular security reviews.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate, out-of-date, or incomplete information
• Deletion: Request deletion of your account and personal data (subject to our retention obligations)
• Portability: Request your data in a machine-readable format
• Objection: Object to direct marketing — you can opt out at any time

To exercise these rights, contact us at hello@padlclub.app. We will respond within 30 days.

Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us at hello@padlclub.app. We will investigate and respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand platform usage. You can control cookie settings through your browser.

We do not use cookies for third-party advertising or cross-site tracking.

We retain your personal information for as long as your account is active. After account deletion:

• Personal profile data is deleted within 30 days
• Match records and league history may be retained in anonymised form for the integrity of league standings
• Payment records are retained as required by Australian tax law (typically 7 years per ATO requirements)
• Support correspondence may be retained for up to 2 years

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16 without verified parental consent, we will take steps to delete that information.

If you believe a child has provided us with personal information, please contact us at hello@padlclub.app.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will notify registered users via email or in-app notification at least 14 days before the changes take effect, and update the "Last updated" date at the top of this page.

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy. If you do not agree with the changes, you may delete your account.

For privacy-related enquiries or to exercise your data rights, contact us at: