Privacy policy
What we collect, why, who helps us process it, and the rights you have. Written for UK GDPR and EU GDPR.
Draft, pending legal review.
Who is responsible
The data controller is [Legal name of the owner or company] ([NIF / NIE / CIF]), [Registered address]. Contact for anything about your data: hello@padelreads.com.
What we collect
- Your email address, when you ask for the free situations or create an account.
- Your answers to our short quiz, if you give them: your level, the side you play, your playing hand and the problem that costs you most points.
- Your library activity: situations you save, add to your pre-match list or open.
- Purchase records: what you bought, when and the amount. Card details go straight to our payment provider; we never see or store them.
- Technical data: IP address, browser and device, collected in server logs for security.
Why we use it, and on what basis
- To send the free situations and our weekly email: your consent. Unsubscribe in one click at any time.
- To run your account and library: to perform our contract with you.
- To take payments and keep tax records: our legal obligations.
- To keep the service secure and fix problems: our legitimate interests.
- To measure ads, once we use them: your consent, asked for first.
Who processes it for us
Some of these providers are based in, or use sub-processors in, the United States. Where data leaves the UK or EU, transfers are covered by standard contractual clauses, the UK addendum or the EU-US Data Privacy Framework.
- Vercel (website hosting).
- Supabase (database and sign-in), EU region.
- MailerLite (email), EU.
- Stripe (payments).
- ManyChat (Instagram messages), when you message us there.
- Meta (ad measurement), only with your consent.
How long we keep it
- Email and quiz answers: until you unsubscribe, then deleted within 30 days.
- Account and library data: while your account is open, then deleted within 30 days of closing it.
- Purchase and tax records: as long as tax law requires (usually 6 years in Spain, 6 in the UK).
- Server logs: up to 30 days.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent at any time. Email us and we'll reply within one month.
You can also complain to a data protection authority: the ICO in the UK (ico.org.uk) or the AEPD in Spain (aepd.es).
Children
Padel Reads isn't meant for children under 16, and we don't knowingly collect their data.
Changes
We'll post any changes here with a new date, and tell you about important ones by email.
Questions? hello@padelreads.com