Privacy Policy

1. Introduction

FootySlots ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our facility booking platform for football clubs, including our marketing website and web application. iOS and Android apps are planned for a future release.

2. Data We Collect

We collect the following categories of data:

• Marketing site: When you use our contact form (name, email, club name, message) or register for a free trial (club name, contact name, email, member count, where you heard about us, notes).
• Platform users: When you create an account—name, email, password (hashed), and role (Club Admin, Coach, Member, Guest).
• Bookings and transactions: Booking details, payment information processed by Stripe (we do not store full card numbers).
• Club configuration: Club name, logo URL, branding colours, facility and class setup.

3. How We Use Your Data

We use your data to:

• Provide and operate the facility booking service
• Process subscription requests and set up your club
• Respond to contact form enquiries
• Authenticate users and manage accounts
• Process payments via Stripe
• Send transactional emails (e.g. password reset, booking confirmations)
• Improve our service and fix issues

4. Legal Basis

We process your data based on: (a) performance of a contract (providing the service you signed up for), (b) your consent (e.g. contact form, marketing communications where applicable), and (c) our legitimate interests (e.g. security, fraud prevention).

5. Third-Party Services

We use the following third-party services:

• Supabase: Authentication and database hosting. Data is stored in the EU where possible.
• Stripe: Payment processing. Stripe's privacy policy applies to payment data.
• Hosting: Our applications may be hosted on infrastructure (e.g. Render, Vercel) that processes requests and logs.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Contact form and registration data is retained for legitimate business purposes. You may request deletion of your data by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent
• Lodge a complaint with a supervisory authority

To exercise these rights, please contact us.

8. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS) and at rest where applicable. Passwords are hashed. Payment card data is handled by Stripe and never stored by us.

9. Children

Our service is not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us.

10. Changes

We may update this policy from time to time. We will post changes on this page and update the "Last updated" date. Significant changes may be communicated by email where appropriate.

11. Contact

For privacy enquiries, please contact us.