Privacy Policy

Last updated: 19/07/2025

Tennis Ping (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tennis court availability notification service.

Information We Collect

Personal Information

  • Email Address: Required for account creation and sending notifications
  • Password: Encrypted and stored securely for account access
  • Notification Preferences: Your selected parks, preferred times, and email notification settings

Usage Information

  • Service Interactions: Basic logs of when you access our service
  • Email Delivery Data: Success/failure status of notification emails
  • Technical Data: IP address, browser type, and device information for security purposes

Information We Do NOT Collect

  • Payment information (our service is free)
  • Social media profiles or connections
  • Location data beyond your selected parks
  • Personal details like name, phone number, or address
  • Browsing history or activities outside our service

How We Use Your Information

We use your information solely for the following purposes:

  • Service Delivery: To send you court availability notifications based on your preferences
  • Account Management: To maintain your account and preferences
  • Service Improvement: To understand usage patterns and improve our service
  • Security: To protect against unauthorized access and abuse
  • Communication: To respond to your inquiries and provide customer support

We do NOT use your information for marketing, advertising, or any commercial purposes beyond providing our core service.

Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

  • Consent: You explicitly consent to receive email notifications when creating your account
  • Legitimate Interest: We have a legitimate interest in providing and improving our service
  • Contract Performance: Processing necessary to provide the service you requested

Data Storage and Security

Data Storage

  • Your data is stored on secure servers in the European Union
  • Court availability data is automatically deleted after 12 hours
  • Account data is retained until you request deletion
  • Email logs are kept for 30 days maximum for troubleshooting

Security Measures

  • Passwords are encrypted using industry-standard hashing
  • All data transmission is encrypted using SSL/TLS
  • Access to your data is restricted to essential personnel only
  • Regular security audits and monitoring

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate personal data

Right to Erasure

Request deletion of your data

Right to Data Portability

Export your data in JSON format

Right to Withdraw Consent

Unsubscribe from notifications

Right to Object

Object to processing of your data

To exercise these rights, visit your preferences page or contact us.

Data Sharing and Third Parties

We do NOT sell, rent, or share your personal data with third parties for marketing purposes.

Limited Data Sharing

We only share data in the following circumstances:

  • Service Providers: Email delivery service (SendGrid) to send notifications
  • Legal Requirements: If required by law or to protect our legal rights
  • Security: To prevent fraud or abuse of our service

Cookies and Tracking

We use minimal cookies necessary for the service to function:

  • Authentication Cookies: To keep you signed in
  • Preference Cookies: To remember your settings
  • Security Cookies: To protect against unauthorized access

We do NOT use tracking cookies, analytics cookies, or advertising cookies.

International Data Transfers

Your data is primarily stored and processed within the European Union. Any transfers outside the EU are protected by appropriate safeguards including:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Explicit consent where required

Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the new Privacy Policy on this page. Changes become effective immediately upon posting.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Data Protection Officer: For GDPR-related inquiries, you can also contact our Data Protection Officer at the same email address.