STUMPS – Privacy Policy

1. Introduction

STUMPS is committed to protecting your personal data in accordance with the UK GDPR and the Data Protection Act 2018.

2. Data We Collect

• Name and email address
• User role (coach or player)
• Booking details (date, time, session notes if provided)
• Contact details provided during booking
• Payment information (processed by Stripe only)
• Technical data (IP address, browser type, device data)

3. How We Use Your Data

• To facilitate bookings between players and coaches
• To process payments and refunds
• To send service-related communications
• To improve platform performance and security
• To comply with legal and financial obligations

4. Data Sharing

• Booking information is shared only with the relevant coach or player
• Payments are handled securely by Stripe
• We do not sell personal data
• We may share data where legally required

5. Data Retention

• Account and booking data is retained while your account remains active
• Financial records are retained for up to 6 years for legal compliance
• You may request account deletion at any time

6. Your Rights

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion (subject to legal obligations)
• Restrict or object to processing
• Data portability

7. Security

We use appropriate technical and organisational measures to protect your data. However, no system can be guaranteed to be 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or the platform.