Padel HubPrivacy Policy
The operator of Padel Hub and the controller of the personal data described here is Ivan Hlazkov. Write to [email protected] about anything on this page, including to exercise any of the rights in section 8.
Contents
1. Who we are
Padel Hub is a booking and match-finding service for padel players, clubs and coaches, available at padelhubplay.com and as a web app, a Telegram Mini App and an installable app on your phone. This policy explains what personal data the service handles and what you can do about it.
It covers the player app, the club manager console, the reception (staff) console, the coach console and the marketing website. Where a club uses Padel Hub to run its courts, both the club and the operator named above handle your data; the club is responsible for how it uses the booking and contact information it sees about its own customers.
2. What data we collect
You give us
| Data | When |
|---|---|
| Email address and password | When you create an account. Passwords are stored only as a salted hash; nobody at Padel Hub can read them. |
| Google or Apple account identifier | If you sign in with one of those instead of a password. We never receive or store your Google or Apple password. |
| Display name, full name | When you create an account or edit your profile. |
| Phone number (optional) | Only if you choose to add it, so a club can reach you about a booking you made with them. |
| City, date of birth, gender, languages, short bio, profile photo | Optional profile fields. |
| Playing level and self-assessment answers | When you set up your level or play rated matches. |
| Messages and images you send | In match chats, club chats and coach chats. |
| Playing preferences: preferred times, playing style, favourite clubs | Optional, to suggest matches and clubs that suit you. |
| Your gear collection: racket brand, model, year and specification, shoes, bags, clothing, accessories, photos, your own notes and ratings, and whether you still use an item | When you add gear. You choose who can see your collection in your privacy settings. |
| Photos of gear you list, and club reviews you write | When you post them. |
| Coaches only: legal full name, identity or tax number, certificates and qualification documents | When you sign up as a coach, so clubs can verify who they are letting onto their courts. Documents are stored in a private bucket and are not public. |
| Club staff: name and the club you work at | When a club manager creates a staff account for you. |
Created as you use the service
- Your bookings: court, club, date and time, price, who you played with, payment status.
- Your matches and results, your rating history, achievements and tasks completed.
- Friends, favourite clubs, notification settings.
- Sanctions applied to your account (for example a temporary ban after repeated no-shows) and reports other users file about you.
- Your Telegram user ID, if you link your Telegram account to receive notifications there.
- Push notification tokens for the device you allow notifications on.
- Technical logs: IP address, browser and device type, and the error reports described in section 4.
Device permissions
Padel Hub asks your device for these only when a feature needs them, and only when you allow it. You can withdraw any of them in your device settings at any time, and the rest of the app keeps working.
| Permission | What it is used for |
|---|---|
| Location | Finding clubs near you, showing roughly how far they are, and ordering search results. We do not publish your precise location to other players. |
| Camera and photo library | Only when you choose to upload something: a profile picture, a photo of your gear, a club photo, or an image in a chat. We access nothing you have not selected. |
| Notifications | Sending you booking confirmations and reminders, match invitations and the other messages listed in section 3. Delivered by Web Push from our own servers. |
If you run or work at a club
For club accounts we also hold the club's name, address and contact details, its photos, its courts, opening hours and prices, its bookings and the revenue and analytics derived from them, its staff accounts and its membership list. Club managers and the staff they authorise see the information they need to run the club, including the names and bookings of the players who book there.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create and run your account; show you courts, matches, tournaments and coaches; take and manage your bookings | Performance of a contract (Art. 6(1)(b)) |
| Send you service messages: booking confirmations, cancellations, payment reminders, match invitations, password resets | Performance of a contract (Art. 6(1)(b)) |
| Show your name, photo, level and match history to other players in matches you join, and to clubs where you book | Performance of a contract (Art. 6(1)(b)) |
| Keep the service working and secure: error monitoring, abuse prevention, handling reports and sanctions | Legitimate interests (Art. 6(1)(f)) — running a service people can trust |
| Comply with accounting, tax and legal obligations | Legal obligation (Art. 6(1)(c)) |
| Optional cookies and third-party scripts that are not strictly necessary | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
We do not sell your data, and we do not use it for advertising or profiling that produces legal effects for you.
4. Who we share it with
We share data only with the processors and partners below, and only as far as each one needs it.
What other players see. Your display name, photo, level, achievements, match history and tournament results can be visible to other users, and your gear collection can be too. How much is visible is controlled by your own privacy settings, which you can change at any time in your profile. Players can also block or report each other.
| Who | What for | Where |
|---|---|---|
| The club you book at | Your name, the booking, and your phone number if you provided one, so reception knows who is coming and can reach you about that booking | Spain / Cyprus |
| Other players in a match you join | Your display name, photo, level and the match result | — |
| A coach you sign up with | Your name and the session you joined | — |
| Supabase | Database, authentication, file storage and server functions — the core of the service | EU |
| Vercel | Hosting of the website and the app | EU / global edge |
| Cloudflare | Traffic routing and protection | Global edge |
| Sentry | Error monitoring, so we find crashes. Hosted in the EU (Germany) | Germany |
| Resend | Sending service email: confirmations, reminders, password resets | EU |
| Telegram | Notifications and the Mini App, only if you link your Telegram account | Outside the EU |
| OpenStreetMap / Nominatim | Maps and address lookup for club locations | EU |
| Payment providers (see section 5) | Card payments for court bookings | EU |
Where a partner is outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for a copy of the safeguards in place.
5. Payments
Money does not pass through Padel Hub. When you pay for a court with a card, the payment is processed by the provider the club has connected to its own account — Stripe, Redsys (including Bizum), Viva Wallet or JCC, depending on the club and the country. Your card details are entered on the provider's page and are never seen or stored by Padel Hub. We only record that a payment was made, how much, by which method and when, so the booking can be marked as paid.
When you pay in cash at reception, a member of club staff records it in the app. We store the amount, the method and which staff account recorded it.
6. Where your data is stored
The database, your files (profile photos, chat images, club photos, coach documents) and the server functions run on Supabase infrastructure in the European Union. Backups are held in the same region.
7. How long we keep it
| Data | Kept for |
|---|---|
| Your account and profile | Until you delete your account |
| Bookings and payment records | Up to 6 years after the booking, to meet accounting and tax obligations |
| Match results and rating history | Until you delete your account; afterwards results stay visible to the other players in those matches without your name |
| Chat messages | Until the match or conversation is deleted, or you delete your account |
| Coach identity documents | While the coach account is active, then 1 year |
| Reports and sanctions | 2 years, so repeat behaviour can be recognised |
| Error logs (Sentry) | 90 days |
| Notification subscriptions | Until you turn notifications off or the device unsubscribes |
8. Your rights
Under the GDPR you can ask us to:
- Access the personal data we hold about you, and get a copy of it.
- Correct anything that is wrong — most of it you can edit yourself in your profile.
- Delete your account and your data, subject to the records we are legally required to keep (section 7).
- Export your data in a portable, machine-readable format.
- Restrict or object to processing we base on legitimate interests.
- Withdraw consent for optional cookies at any time, through the Cookie settings link in the footer.
Write to [email protected]. We answer within one month.
If you are not satisfied, you can complain to your data protection authority — in Spain the Agencia Española de Protección de Datos (AEPD), in Cyprus the Office of the Commissioner for Personal Data Protection.
9. Security
All traffic is encrypted in transit (HTTPS). Passwords are stored only as salted hashes. Access to the database is restricted per user by row-level security rules, so one player cannot read another's data. Coach documents are held in a private storage bucket that is not publicly reachable. We will notify you and the supervisory authority of a personal data breach where the law requires it.
10. Children
You must be at least 16 to create your own account. If you are under 16, a parent or guardian must create the account and agree to these terms on your behalf. If we learn that a child under 16 has registered without that consent, we delete the account.
11. Cookies
See our Cookie Policy for what we store in your browser and how to change your choices.
12. Changes to this policy
Each version of this policy carries a version number and a date, shown at the top. If we make a change that affects you materially, we tell you in the app and by email before it takes effect, and ask you to accept the new version where the law requires it.
13. Contact
Privacy questions and rights requests: [email protected].
Everything else: [email protected].