Privacy Policy
1. Introduction
This Privacy Policy explains how we collect, use, store, and protect personal data when you use our application designed for racket clubs.
We comply with the General Data Protection Regulation (GDPR) and applicable international privacy laws.
By using the service, you agree to the practices described in this policy.
2. Data We Collect
We collect only the data necessary to operate the service, including:
Account and Club Information
– club name
– contact details
– administrative users
– team member roles
User Data
– name, email, login details
– permissions and activity logs
Reservation Data
– court bookings
– player names or identifiers
– time and date of reservations
Payment Information
Payments are processed by Paddle, our Merchant of Record.
We do not store full payment details such as credit card numbers.
Technical Data
– device type
– browser information
– IP address
– usage analytics
We do not collect sensitive data (health, religion, biometrics, etc.).
3. How We Use the Data
Data is used strictly for the following purposes:
– operating the application
– managing reservations
– managing user roles and permissions
– providing analytics and dashboards
– payment processing through Paddle
– improving system performance
– customer support
– ensuring security and preventing fraud
We do not sell personal data to third parties.
4. Legal Basis for Processing (GDPR)
We process personal data under the following legal bases:
– Contractual necessity: to provide the service to the club
– Legitimate interest: security, fraud prevention, analytics
– Compliance: accounting and legal obligations
– Consent: when required (e.g., marketing opt-in)
5. Data Sharing
We share data only with essential service providers:
Paddle (Merchant of Record)
Handles payments, invoicing, compliance, and tax processing.
Hosting Providers
Ensure secure storage and system availability.
Analytics Providers
Collect usage metrics without identifying individuals.
These partners comply with GDPR and process data only for the intended purpose.
We never share data for advertising or resale.
6. International Transfers
Data may be stored or processed in countries outside the EU/EEA.
All transfers follow GDPR safeguards, such as Standard Contractual Clauses (SCCs).
7. Data Retention
We retain data only for as long as necessary:
– active customer data: as long as the subscription is active
– reservation and usage logs: up to 24 months
– billing records: 10 years (legal requirement)
– backups: limited retention cycles
Data is deleted or anonymized when no longer needed.
8. Security Measures
We implement industry-standard security practices, including:
– encrypted data storage
– HTTPS enforcement
– restricted admin access
– role-based permissions
– monitoring and intrusion prevention
– regular system updates and patches
No system is fully immune to risk, but we take all reasonable measures to protect data.
9. User Rights (GDPR)
Data subjects have the following rights:
– access their personal data
– correct inaccurate data
– request deletion (right to be forgotten)
– restrict processing
– receive a copy of their data (data portability)
– object to processing
– withdraw consent at any time (if applicable)
Requests can be made at any time by contacting support.
10. Responsibility of Clubs (Data Controllers)
For GDPR purposes:
– the club is the Data Controller
– we act as the Data Processor
The club is responsible for ensuring that:
– its member data is collected legally
– its users are informed about data usage
– data uploaded is accurate and lawful
A Data Processing Addendum (DPA) is available upon request.
11. Cookies
We may use cookies or similar technologies for:
– session management
– analytics
– improving user experience
No advertising cookies are used.
Users may disable cookies in their browser settings.
12. Changes to the Privacy Policy
We may update this Privacy Policy as needed.
Changes will be communicated in the app or on the website.
13. Contact
For questions or GDPR requests, you may contact:
MM Management Agency Sàrl
Chemin de la Musardière 5, 1131 Tolochenaz, Vaud, Suisse
support@smashup.ch