Padel Sheds – Privacy Policy

Last Updated: 29th September 2026

Operating Entity: Padel Sheds Group Ltd (“Padel Sheds”, “we”, “us”, “our”)

Platforms Covered: padelsheds.com, play.padelsheds.com, and associated web and mobile applications (collectively, the “Platform”)

Data Protection Contact: privacy@padelsheds.com

1. Introduction & Overview

1.1. Padel Sheds Group Ltd is committed to respecting and protecting your privacy. This Privacy Policy sets out how we collect, process, store, and share your personal data when you visit our website, register a player profile, book courts, join competitive or social matches, subscribe to memberships, or visit our facilities.

1.2. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.3. For the purposes of UK data protection legislation, Padel Sheds Group Ltd acts as the Data Controller for the personal data collected through your direct use of our Platform and facilities, except where specified regarding independent third-party controllers (such as PadelLevels) or specialized data processors (such as AIBALL).

2. Information We Collect About You

We collect and process personal data in the following categories:

2.1. Identity & Contact Data

• Full name, date of birth, and gender preference.
• Contact details including email address, verified mobile phone number, and postal postcode.
• Profile photograph and chosen display name.

2.2. Sporting & Matchmaking Data

• Playing attributes, including dominant hand (left/right) and preferred court side (left/right/both).
• Self-assessment questionnaire responses and provisional skill levels.
• Match records, scores, match timestamps, partner/opponent identifiers, and competitive outcomes.
• Dynamic player ratings, rankings, and calibration status synchronized with PadelLevels.

2.3. Financial & Transactional Data

• Booking transaction records, split-payment history, membership tier subscription status, and store credit/voucher balances.
• Payment Card Data: All card payments, tokenised cards on file, and recurring billing transactions are processed directly by our secure payment provider, Square. Padel Sheds does not receive, store, or process raw debit or credit card numbers.

2.4. Audio-Visual, Video Highlights & CCTV Data

• Courtside Automated Video Recordings (AIBALL): Match video footage captured by automated cameras installed on our courts to deliver automated player highlight generation, rally clipping, and AI-driven match statistics.
• Premises Security CCTV: Video surveillance footage recorded across venue entry gates, communal corridors, pro shops, lounge areas, and playing arenas.

2.5. Technical & Usage Data

• Internet Protocol (IP) address, device type, operating system, browser configuration, log-in timestamps, and interactions with our web application (play.padelsheds.com).

3. Lawful Grounds and How We Use Your Data

We process your personal information only when lawful grounds under Article 6 of the UK GDPR exist. The table below outlines how we use your data and our lawful basis:

Purpose / Activity	Type of Data	Lawful Basis for Processing
Account Registration & Authentication (Creating profile, mobile verification, managing logins).	Identity, Contact, Technical	Performance of a Contract
Court Reservations, Split Payments & Memberships (Administering bookings, recurring billing, split checkout).	Identity, Contact, Transactional	Performance of a Contract
Match Balancing & Sporting Ratings (Seeding ratings, open match pairing, calibrating skill brackets).	Identity, Sporting, Match Results	Legitimate Interests (to provide balanced, fair, and enjoyable sporting competitions)
Automated Highlights & AI Video Analytics (AIBALL) (Generating match replays, clipping rallies, computing play stats).	Audio-Visual, Sporting	Legitimate Interests & Consent (to deliver tech-enabled athletic features and player feedback)
Venue Safety & Loss Prevention (24/7 premises security CCTV, verifying access credentials).	CCTV Footage, Identity	Legitimate Interests & Legal Obligation (premises safety, crime prevention)
Operational Service Communications (Booking confirmations, match invitations, rain/cancellation alerts via SMS/WhatsApp).	Contact, Transactional	Performance of a Contract
Direct Marketing & Newsletters (Promotions, event updates, clinic announcements).	Contact, Preferences	Consent (optional, with immediate opt-out available at any time)

4. Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal data. We share your information only with trusted third parties strictly necessary to deliver our services:

4.1. Level Technologies Limited (“PadelLevels”) — Independent Data Controller

• Integration & Purpose: Match results, player information, and related sporting data are shared with Level Technologies Limited (“PadelLevels”) for the purposes of generating player ratings, rankings, match balancing, and related sporting services.
• Data Controller Status: PadelLevels acts as an independent data controller in relation to its ratings and rankings services.
• Shared Data Categories: Data shared may include player name, player ID, club affiliation, match results, match dates, and related sporting information.
• Lawful Grounds & UK Storage: PadelLevels relies primarily on legitimate interests to provide its worldwide rating system and stores all processed personal data on secure servers located within the United Kingdom.
• Public Profile Masking: Players who object to public processing have the right to request that their profile and personal details be masked from public view on PadelLevels systems.
• Policy Reference: PadelLevels processes personal data in accordance with its Privacy Policy: https://padellevels.com/privacy

4.2. Video Processing & Match Analytics Provider (Aiball Lovelace, S.L.)

• Integration & Purpose: On courts equipped with video recording technology, match video and player footage are processed by our specialized technical provider (Aiball Lovelace, S.L.) acting as a Data Processor on behalf of Padel Sheds to generate automated highlight clips, video replays, and match statistics.
• Automated Processing: Video extraction, rally detection, and statistical analysis are performed in an automated manner without human intervention.
• Storage & Retention:
  • Video data is stored locally on physical on-site hard drives for an automated rolling cycle of 30 days, after which it is permanently overwritten.
  • Generated highlights and match sessions saved to cloud servers remain accessible to match participants until account deletion or removal is requested.
• Participant Consent for Video Downloads: Because padel matches involve multiple players, full video downloads require all on-court participants to be in agreement. If any participant objects to a video being made downloadable, access will be restricted.
• Policy References: Video processing is managed in accordance with the provider’s Privacy Policy and Terms & Conditions.

4.3. Payment Processing (Square)

All payment processing, split payments, saved cards on file, and recurring subscription billing are handled by Square (Block, Inc.). Square operates in compliance with Level 1 PCI-DSS standards. You can review Square’s privacy practices at https://squareup.com/gb/en/legal/general/privacy.

4.4. Infrastructure & Operational Processors

• Cloud Hosting & Databases: Secure UK/EEA-based cloud infrastructure providers hosting our database, web servers, and application backends.
• SMS & Messaging Gateways: Transactional communication networks used to deliver mobile verification codes, match invites, and critical venue alerts.

5. Courtside Video Highlights and Security CCTV

5.1. Automated Match Highlights & Replays

• Courts equipped with video technology record matchplay to generate downloadable highlight clips, shot tracking, and replays accessible to registered participants in that match session.
• Videos are shared exclusively with the players who participated in the respective booking. You have the right to request the deletion of specific highlight clips linked to your profile by contacting our support team at privacy@padelsheds.com.

5.2. Facility Security CCTV

• CCTV cameras operate 24 hours a day across venue entrances, public lounges, retail desks, and court perimeters for the purposes of customer safety, theft prevention, and incident verification.
• Security CCTV footage is retained on an automated rolling cycle of 30 days, after which it is permanently overwritten, unless required for an ongoing legal investigation or insurance claim.

6. International Data Transfers

We primarily store and process your data within the United Kingdom and the European Economic Area (EEA). Where any third-party infrastructure provider processes data outside the UK or EEA, we ensure appropriate safeguards are implemented in compliance with the UK GDPR (such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses approved by the Information Commissioner’s Office).

7. Data Retention & Security

7.1. Retention Periods: We retain your personal data for as long as your Padel Sheds account remains active. If you close your account, we will delete or anonymise your personal profile within 30 days, except where financial, tax, or legal obligations require us to retain transactional history (typically 6 years under UK corporate accounting rules).

7.2. Security Measures: We employ industry-standard technical and organizational security protocols, including HTTPS/TLS encryption in transit, salted password hashing, access-controlled cloud databases, and continuous vulnerability monitoring.

8. Your Legal Rights Under UK GDPR

Under UK data protection law, you hold comprehensive rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you (a Subject Access Request).
• Right to Rectification: You can request that inaccurate or incomplete information be corrected.
• Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data where there is no compelling legal reason for its continued processing.
• Right to Restrict Processing: You can ask us to suspend the processing of your personal data under certain circumstances.
• Right to Data Portability: You can request the transfer of your structured data to yourself or a third party.
• Right to Object: You have the right to object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent (such as promotional marketing or video highlights), you may withdraw consent at any time via your account settings.

9. Exercising Your Rights & Contacting Us

If you have any questions, requests, or concerns regarding this Privacy Policy or how your personal data is handled, please contact our Data Protection Lead:

• Email: privacy@padelsheds.com
• General Support: support@padelsheds.com
• Postal Address: Padel Sheds Group Ltd, Liverpool, England, United Kingdom

Right to Lodge a Complaint

If you are not satisfied with our response to any query or believe our processing does not comply with UK data protection laws, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Website: https://ico.org.uk | Helpline: 0303 123 1113

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect operational changes, technical enhancements, or legal requirements. Any material updates will be communicated via notice on our Platform or direct email prior to taking effect. Continued use of our services following notification constitutes acknowledgement of the updated policy.