Contents
Privacy Policy
1. Introduction
This Privacy Policy explains how CourtSync ("we," "us," or "our") collects, uses, stores, and protects your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws.
2. Data Controller
CourtSync is the data controller for the personal information we collect and process. We are responsible for ensuring your data is handled lawfully, fairly, and transparently.
3. Information We Collect
3.1 Information You Provide
Username, email address, password, role (coach/player)
Date of birth (required for UK GDPR compliance)
Profile pictures, training preferences
Uploaded videos, training plans, progress data
Messages, feedback, support requests
3.2 Information We Collect Automatically
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Parental Consent
For users under 13, with verifiable parental consent
Legitimate Interests
To improve our service, ensure security, and comply with legal obligations
Legal Compliance
To meet UK GDPR and other legal requirements
5. How We Use Your Information
We use your personal information for the following purposes:
7. International Data Transfers
Your data may be stored and processed in countries outside the UK, including through our use of AWS services. We ensure appropriate safeguards are in place:
8. Data Retention
We retain your personal information for as long as:
Account Active
While your account remains active and you use our services
Service Provision
Required to provide our services effectively
Legal Compliance
Necessary for legal compliance or safeguarding purposes
Dispute Resolution
To resolve disputes or enforce our agreements
9. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Request a copy of your personal data
Export DataCorrect inaccurate personal data
Update ProfileRequest deletion of your personal data
Delete AccountLimit how we use your data
Receive your data in a structured format
Object to processing based on legitimate interests
Withdraw consent at any time
Manage Consent10. Children's Privacy
11. Security Measures
We implement comprehensive security measures to protect your data:
Data encrypted in transit and at rest
Regular security assessments and monitoring
Strong access controls and authentication systems
Regular staff training on data protection
Comprehensive incident response procedures
13. Data Breach Notification
In the event of a data breach that poses a high risk to your rights, we will notify you within 72 hours as required by UK GDPR.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes and, where required, obtain new consent.
15. Contact Information
For privacy-related questions or to exercise your rights, contact us through:
- Your account settings
- Our support channels within the application
- The data protection contact information provided during registration