Privacy Policy

PadelEco is software that helps padel clubs run scheduling, player management, subscriptions, and day-to-day operations. In this policy, "PadelEco", "we" and "us" refer to the team operating the product.

For any question about this policy or your personal data, contact us at webreathpadel@gmail.com.

Data protection law distinguishes between a controller, who decides why and how personal data is used, and a processor, who handles data on a controller's behalf. PadelEco acts in both roles, depending on the data:

• We are the controller for data about visitors to our website, people who request a demo, and the club staff who hold PadelEco accounts.
• The club is the controller for the data it stores about its players, members, coaches, and bookings in PadelEco. We process that data only to provide the service to the club and on the club's instructions. We do not use it for our own purposes and we never sell it. The processing terms are set out in section 5 of our Terms of Service.

If you are a player or member of a club that uses PadelEco, your club is responsible for how your data is used. See section 10 for how to exercise your rights.

When you visit our website

If you accept analytics cookies, Google Analytics records which pages you visit, how you arrived, and general device, browser, and approximate location information. If you do not accept, no analytics cookies are set and Google receives only limited signals without cookies or identifiers, such as a page view with its timestamp and browser type, which it uses to estimate overall traffic without recognising you across visits. Our hosting provider also keeps short-lived technical request logs needed to deliver and secure the site. Details are in our Cookie Policy.

When you request a demo

Your name, email address, club name, timezone, and any message you choose to include.

When you start a trial or use a club account

The club owner's name, email address, phone number, club name, country, timezone, and any notes provided at sign-up, plus the names, email addresses, and roles of staff users the club invites. Passwords are stored only as one-way cryptographic hashes; we cannot read them.

Data clubs store in PadelEco

Depending on the features a club uses, this can include player and member names, contact details such as phone numbers, subscription and payment records, class schedules and attendance, court bookings, and training notes. The club decides what to enter, and processes it as controller.

We do not use personal data for advertising and we do not sell it.

We rely on a small number of providers to run PadelEco. Each receives only the data needed for its task.

Some of these providers are based in, or process data in, countries outside the European Economic Area, including the United States. Where that happens, transfers rely on recognised safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

• Analytics data is kept for 14 months, then deleted automatically by Google Analytics.
• Demo requests are kept while we follow up, and deleted once it is clear no business relationship will follow.
• Club accounts and workspace data are kept for as long as the club uses PadelEco. When a trial ends without an upgrade, the workspace stays available in read-only mode so the club can upgrade or take its data with it. When a club asks us to close its account, we delete the workspace data after giving the club the opportunity to export it, except for records we are legally required to keep.

All traffic to PadelEco is encrypted in transit. Passwords are stored as salted one-way hashes. Each club's workspace is isolated so that one club cannot access another club's data, and access inside a workspace is limited by user role. No system is perfectly secure, but we take reasonable technical and organisational measures to protect the data we handle.

Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time without affecting processing that happened before.

To exercise these rights for data where we are the controller, email webreathpadel@gmail.com. We will respond within one month.

You also have the right to lodge a complaint with a data protection authority. In Spain this is the Agencia Española de Protección de Datos (aepd.es); elsewhere, it is the authority in the country where you live or work.

If your club uses PadelEco, your club is the controller of your data. Please send requests about your data, such as access or deletion, to your club directly. If you contact us instead, we will pass your request to the club and help it respond.

Our website and club accounts are intended for adults acting on behalf of a club. Clubs that manage junior players in PadelEco are responsible for having a valid legal basis for that data, including any parental or guardian consent their local law requires.

We will update this policy when our practices change. The date at the top shows when it was last revised. If a change materially affects how we use data where we are the controller, we will notify club account holders by email before it takes effect.

Questions, requests, or concerns about privacy: webreathpadel@gmail.com.