How My Pila handles your information
Last updated: [DATE]
If you have just found a page about yourself
You are probably here because someone sent you a link, or you searched your name, and found a result naming you that you did not create. My Pila collects results from padel tournaments so that players who use the site can have a fair, accurate rating. When a club or organiser sends us the results of an event, those results include everyone who played, so we hold a record of you having played in it.
We have not worked out a rating for you, and we do not show a page about you. If you have no account with us, you appear on a public results list only by your initials (for example, “J. Smith”), never your full name. There is no separate page about you at all for a search engine to find.
You did not sign up, and we did not ask you. This page explains why, and how to have it stopped. Use our rights request form. You do not need an account.
Who we are
My Pila is operated by [LEGAL ENTITY NAME], [COMPANY NUMBER], registered at [ADDRESS]. We are the data controller for the information described here. We decide why and how it is used, and we are responsible for it.
For anything about your information, contact [PRIVACY EMAIL]. [If a DPO is appointed: our Data Protection Officer is [NAME], contactable at the same address.]
What we hold
If you have played in a tournament we have results for, we may hold:
- your name, as the organiser recorded it
- the club or venue where you played
- the matches you played: who you partnered, who you played against, and the scores
Only if you have an account with us, we also hold:
- a rating and a level band worked out from those results, and its history
- your email address and account settings
- if you subscribe to Premium, your billing relationship with Stripe (see “Payments” below)
We do not ask for or want your date of birth beyond a yes/no over-18 confirmation, your address, your phone number, your health information, or anything about your background.
Who can see what
If you have not signed up, you appear on public results lists by initials only. There is no page about you at any URL, signed in or not. Not a hidden one, not a gated one, none at all.
If you have signed up but not subscribed to Premium (“Free”), other signed-in players can see your full name and your rating band (for example, “C”), not the exact number behind it, and not your full match-by-match history.
Premium subscribers can additionally see the exact rating number, how it has moved over time, and which matches caused each change, for any claimed player. This still never covers someone who has not signed up at all, and never gives a route back to an unclaimed participant’s real name.
Tournament listings are open to anyone, signed in or not, because an event is a venue, a date and a level. They name organisers and clubs, not entrants.
We share information with the clubs and organisers whose events you played in (so they can manage entries and results) and with service providers who host and run the platform on our behalf, under contract and only on our instructions. We do not sell your information, and we do not share it for advertising.
Payments
My Pila itself only ever processes one kind of payment: a Premium subscription, handled entirely by Stripe. We never see or store your card details. Stripe does, under its own privacy terms.
Tournament entry fees are a different matter entirely: they are arranged directly between you and the organiser, off-platform (bank transfer, cash on the day, or a card link the organiser provides). We do not process, hold, or see those payments. We only recognise the pattern of a payment method an organiser has entered (for example, naming a well-known card-link provider) so you know roughly what to expect. Recognising a pattern is not an endorsement of the organiser or the payee, and we hold no financial data about that transaction at all.
Why we do it
A rating is worked out from who you beat and who beat you. If we only counted matches against people who had signed up, the ratings of the people who did sign up would be systematically wrong, through no fault of theirs. So we record who played, including people without accounts. But we never rate them, never show a page about them, and never let a search engine find them.
Our legal basis
We rely on legitimate interests under UK data protection law for recording match results about people without accounts. In plain terms: we believe there is a genuine need to do this, there is no less intrusive way to achieve it, and it does not override your rights. We have written down that assessment and you can ask us for a copy. You can object at any time, and we will stop. See “Your rights” below.
How long we keep it
- If you play regularly, we keep your results while your profile is active, because your rating depends on your history.
- If an unclaimed record has had no activity for 3 years and nobody has claimed it, the legitimate interest that justified keeping it has expired.
- Rights-request records (what you asked for, and what we decided) are kept for 6 years, so we can demonstrate we handled them properly. Once a request is executed, we scrub the personal-data content from any earlier related request, but the fact that a decision was made stays on file for this period.
- Our audit log (a tamper-evident record of who changed what, used to defend a complaint) is kept for 10 years, and is never itself deleted by an erasure request (see below).
Your rights
You have the right to:
- be told what we hold about you, and get a copy (a full, machine-readable export)
- have mistakes corrected, including a result recorded against the wrong person
- restrict what we do with it while a question is being sorted out
- get a copy in a portable format to take elsewhere
- object to us holding your record at all, which we honour immediately and without argument
- have your information deleted (see “Deletion” below)
- complain to the Information Commissioner’s Office
To use any of these, use our rights request form. You do not need an account. We will normally respond within one calendar month of receiving your request. If it is complex, we may extend that by up to 2 further months, and we will tell you if so and why. We may need to check who you are before acting, particularly for deletion. That protects you, since without a check someone else could delete your record by asking on your behalf.
Deletion
Your record comes off every public and signed-in surface immediately, the moment you ask, before the permanent step runs. You do not wait for that part.
The permanent deletion happens after a short pause, normally 14 days. Deleting is permanent and cannot be undone, so we leave you time to change your mind. Tell us before then and we restore things fully. If you would rather not wait, say so and we delete everything immediately; the pause is for your benefit, not ours.
When deletion runs, we permanently remove everything that identifies you: your name and anything linking the record to you. One thing remains, and we want to be straight about it: the scores of the matches you played will stay in our records, with your name removed. This is because other players’ ratings are calculated from those matches, and removing the matches themselves would make those other players’ ratings wrong. That is something they never asked for. What remains will not say who you were; it will show that a match happened and what the score was.
We should be honest about one limitation: someone who already knew you played a particular match on a particular day could, in principle, work out which anonymised record was yours. We think that risk is low, because it needs knowledge the record itself does not supply. But it is not nil, and we would rather tell you than let you find out later.
Automated ratings
Your rating is calculated automatically from your match results. It is not a decision about you as a person, and we do not use it to deny anyone anything. Organisers may choose to run events at particular levels, but those are their decisions, not ours. If you think your rating is wrong, tell us: a person will look at it, and we can explain exactly which matches produced it.
Children
My Pila is not intended for players under 18. Account holders confirm they are 18 or over when they sign up. If you believe we hold information about a child, contact us and we will investigate promptly.
Security
We protect your information with access controls, encryption in transit and at rest, and a tamper-evident record of every change to a rating or a rights decision.
Where your information is held
[SUPABASE REGION / HOSTING LOCATION, AND, IF OUTSIDE THE UK, THE TRANSFER MECHANISM RELIED ON.]
Changes
If we change this notice we will update the date at the top. If a change materially affects you and we can contact you, we will.
Complaints
We would rather hear from you first, at [PRIVACY EMAIL]. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.