Privacy Policy

1. Who We Are ALL

Pro Padel School ("PPS", "we", "us", "our") is an international online padel coaching certification platform operated by Javier Iglesias.

2. Data We Collect ALL

A. Account & Identity Data

• Full name, email address, country of residence
• Password (stored hashed with bcrypt — never in plain text)
• Preferred language
• Professional information: coaching certification level, years of experience, specializations

B. Membership & Payment Data

• Membership plan, currency, amount paid, subscription dates
• Stripe customer ID and subscription ID (we do not store credit card numbers — these are handled entirely by Stripe)
• Insurance provider name and policy expiry date (voluntary)
• Racket_Bud access token

C. Directory & Professional Profile

• Display name, photo (voluntary), professional bio (voluntary)
• City, country, languages spoken
• Website and social media URLs (voluntary)
• Certification number and level

D. Usage & Technical Data

• IP address (stored for consent logging and security audit)
• Browser type, device type (anonymized logs)
• Pages visited, features used within the platform
• Session timestamps

E. Communications Data

• Emails sent and received between you and PPS
• Log of membership-related emails (type, date, delivery status)
• GDPR/privacy request records

F. Consent Records

• Date, time, and IP of privacy policy consent
• Marketing consent (opt-in, separate and voluntary)

3. Why We Use Your Data ALL

4. Legal Basis for Processing EU / GDPR

Under Article 6 of the GDPR, we rely on the following legal bases:

• Contract (Art. 6(1)(b)): Processing necessary to fulfill your membership agreement, deliver courses, and activate Racket_Bud access.
• Consent (Art. 6(1)(a)): Marketing communications (you may withdraw consent at any time). Cookie consent (where applicable).
• Legitimate Interests (Art. 6(1)(f)): Platform security, fraud prevention, improving our services. We have conducted a balancing test confirming our interests do not override your rights.
• Legal Obligation (Art. 6(1)(c)): Compliance with applicable law, responding to GDPR data subject requests, tax obligations.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

5. Who We Share Data With ALL

We do not sell your personal data. We share data only with the following processors under strict Data Processing Agreements (DPAs):

Affiliated clubs can see your display name, certification level, cert number, country, and specializations only. They cannot see your email, IP address, payment details, or insurance information.

6. International Data Transfers EU / GDPR

Some of our service providers are located outside the European Economic Area (EEA), particularly in the United States. Where this is the case, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission (for Stripe, email providers)
• EU-US Data Privacy Framework (where applicable)
• Adequacy decisions (where the destination country has been deemed adequate by the EU Commission)

You may request a copy of the safeguards in place by emailing privacy@propadelschool.com.

7. Data Retention ALL

8. Your Rights EU / GDPR — Articles 15–22

If you are located in the EU or EEA, you have the following rights:

To exercise any of these rights: log in to your Membership Dashboard → Privacy tab, or email privacy@propadelschool.com. We will respond within 30 days (extendable to 90 days for complex requests, with notice).

9. Your Rights California / CCPA · CPRA

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell.
• Right to Delete: Request deletion of personal information we have collected (subject to certain exceptions).
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may confirm this at any time.
• Right to Limit Use of Sensitive Personal Information: We collect minimal sensitive information (no SSN, biometrics, or precise geolocation beyond country/city).
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a request: email privacy@propadelschool.com with subject "California Privacy Request". We will verify your identity and respond within 45 days (extendable to 90 days with notice).

Do Not Sell My Personal Information: We do not sell personal information. No opt-out link is required, but we include this statement for transparency.

10. Cookies & Tracking ALL

We do not use advertising cookies, third-party trackers, or behavioral profiling cookies. EU users are shown a consent banner on first visit. US users may opt out of analytics cookies via the footer link.

11. Children's Privacy ALL

Pro Padel School is a professional certification platform intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 16 (EU) or 13 (US). If you believe a minor has created an account, please contact privacy@propadelschool.com and we will delete the account promptly.

12. Security ALL

• All data transmitted via HTTPS/TLS 1.2+
• Passwords hashed using bcrypt (never stored in plain text)
• Payment processing via Stripe (PCI-DSS Level 1 certified) — we never store card data
• Database access restricted to application layer with prepared statements (SQL injection protection)
• Regular backups with encryption at rest
• Access logs retained for 2 years for audit purposes

In the event of a personal data breach, we will notify affected EU users and relevant supervisory authorities within 72 hours as required by GDPR Art. 33–34.

13. Changes to This Policy ALL

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to all active members
• For EU users: request renewed consent if the changes affect the legal basis of processing

Continued use of PPS services after changes take effect constitutes acceptance of the updated policy.

14. Contact & Data Protection ALL

© 2026 Pro Padel School. This Privacy Policy was last reviewed in March 2025.
This document is for informational purposes. It does not constitute legal advice.