Privacy Policy
Effective Date: July 24, 2024
Last Updated: April 2025
Applicable Globally |
Available in English
Introduction
SportStr (“we”, “our”, or “us”) is a sports academy management platform operated by Sportstr LLC, a company registered at Sharjah Media City, United Arab Emirates. We are committed to protecting the privacy and security of all individuals who use our platform — including academy owners, coaches, athletes, and parents.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use the SportStr application and associated services (collectively, the “Service”). It also describes your rights and choices regarding your data.
By accessing or using SportStr, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please discontinue use of the Service.
1. Scope and Who This Policy Applies To
This Policy applies to all users of the SportStr platform worldwide, including:
- Sports academy owners and administrators
- Coaches and training staff
- Student athletes and participants
- Parents or legal guardians of minor participants
- Visitors to our website at www.sportstr.co
Where applicable, this Policy is designed to comply with relevant data protection laws including but not limited to the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (UAE PDPL), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable laws in India, the United Kingdom, and other jurisdictions in which the Service operates.
2. Information We Collect
We collect only the information necessary to provide and improve the Service. The categories of data we may collect are:
2.1 Information You Provide Directly
- Account Information: Full name, email address, phone number, profile photo, and login credentials.
- Academy Information: Academy name, physical address, sport disciplines, program schedules, and fee structures.
- Participant Information: Names, age/date of birth, gender, emergency contact details, and relevant training or fitness notes.
- Payment Information: Billing details, payment method identifiers, and transaction records. Note: Full card numbers are processed by payment partners and are never stored on our servers.
- Communications: Messages, support requests, feedback, or correspondence you send to us.
2.2 Information Collected Automatically
- Usage Data: Features accessed, session duration, actions taken within the app, and page views.
- Device Data: Device type, operating system, app version, browser type, and unique device identifiers.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies as described in Section 10 of this Policy.
2.3 Information from Third Parties
- Single Sign-On (SSO): If you sign in via Google or Apple, we receive your name and email from those providers, subject to their privacy policies.
- Payment Processors: We may receive confirmation and partial payment details from processors such as Stripe or similar platforms.
- Analytics Providers: Aggregated and anonymised usage data from analytics platforms.
3. Legal Basis for Processing (GDPR & UAE PDPL)
For users in the European Economic Area (EEA), United Kingdom, UAE, and other jurisdictions requiring a lawful basis for data processing, we rely on the following:
- Contract Performance: Processing necessary to deliver the Service you have signed up for — such as managing your academy, scheduling, and communications.
- Legitimate Interests: Improving the platform, preventing fraud, ensuring security, and conducting analytics, where these do not override your fundamental rights.
- Legal Obligation: Processing required to comply with applicable laws, tax obligations, or regulatory requirements.
- Consent: Where you have provided explicit consent, such as for marketing communications or optional features. You may withdraw consent at any time without affecting prior processing.
4. How We Use Your Information
We use the information collected for the following purposes:
- Service Delivery: To create and manage your account, process transactions, and provide core features of the platform.
- Communication: To send transactional notifications, service updates, billing alerts, and responses to support queries.
- Platform Improvement: To understand usage patterns, fix bugs, develop new features, and enhance overall performance and user experience.
- Safety and Security: To detect, investigate, and prevent fraudulent, unauthorised, or illegal activity.
- Legal and Compliance: To fulfil legal obligations, respond to lawful requests from authorities, and enforce our terms.
- Marketing: To send promotional materials, newsletters, and product announcements — only with your prior consent and subject to easy opt-out. We do not sell your data to third parties for their marketing.
- Analytics and Research: To generate aggregated, anonymised insights that help us improve the Service.
5. How We Share Your Information
We share data with vetted third-party vendors who process it on our behalf under strict data processing agreements. These include:
5.1 Service Providers
We share data with vetted third-party vendors who process it on our behalf under strict data processing agreements. These include:
- Cloud hosting and infrastructure providers (e.g. AWS, Google Cloud)
- Payment processors (e.g. Stripe or regional equivalents)
- Analytics and performance monitoring tools
- Email and notification delivery services
- Customer support platforms
5.2 Within the Platform
Within your academy’s SportStr environment, authorised administrators and coaches may have access to relevant participant data as part of normal academy operations. We recommend academy administrators review their own data sharing obligations under local law.
5.3 Legal Requirements
We may disclose data to government or regulatory bodies where required by law, a valid court order, or to protect the rights, property, or safety of SportStr, its users, or the public.
5.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred to the succeeding entity. You will be notified via email or a prominent notice on our website at least 30 days before any such transfer.
5.5 Aggregated or Anonymised Data
We may share aggregated, de-identified data that cannot reasonably be used to identify you, for research, benchmarking, or promotional purposes.
6. International Data Transfers
SportStr is operated from the United Arab Emirates and serves users globally. Your data may be stored and processed in the UAE, European Union, United States, or other countries where our service providers maintain infrastructure.
Where data is transferred outside your jurisdiction, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms recognised under applicable law. By using the Service, you consent to such transfers in accordance with this Policy.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Specific retention periods are as follows:
- Account data: Retained for the duration of your active account, plus up to 3 years after account closure for legal and dispute resolution purposes.
- Transaction and billing records: Retained for 7 years to comply with financial and tax regulations.
- Communication and support records: Retained for up to 2 years after the resolution of a query.
- Usage and analytics data: Retained for up to 24 months in identifiable form, then aggregated or deleted.
Upon account deletion, we will delete or anonymise your personal data within 90 days, except where retention is legally required.
8. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Right of Access
You may request a copy of the personal data we hold about you and information on how it is processed.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure (“Right to be Forgotten”)
You may request deletion of your data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent, subject to our legal retention obligations.
Right to Restrict Processing
You may request that we limit how we use your data in certain circumstances, such as while a dispute is being resolved.
Right to Data Portability
You may request a copy of your data in a structured, machine-readable format to transfer to another service provider.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes at any time.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
California Residents (CCPA / CPRA)
You have additional rights including the right to know what personal data is sold or shared, the right to opt out of sale or sharing, the right to non-discrimination for exercising your rights, and the right to correct inaccurate data. We do not sell personal information as defined under the CCPA.
To exercise any of the above rights, please contact us at info@sportstr.co. We will respond to verified requests within 30 days (or as required by applicable law). We may request identity verification before processing your request.
9. Children’s Privacy
SportStr serves sports academies, which may include minor athletes. We take children’s privacy seriously and apply the following safeguards:
- The Service is not directed to children under the age of 13 for independent account creation. Children under 13 may only be registered within the platform by a parent, legal guardian, or authorised academy administrator.
- We do not knowingly collect personal data directly from children under 13 without verifiable parental or guardian consent or through the academy.
- If you believe a child’s data has been submitted without appropriate consent, please contact us immediately at info@sportstr.co and we will take prompt action to delete the data.
- Participant profiles for minor athletes should only be created and managed by verified academy administrators or parents/guardians.
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website and app to operate the Service, understand usage, and improve your experience.
- Essential Cookies: Required for the platform to function. Cannot be disabled.
- Performance and Analytics Cookies: Help us understand how users interact with the Service. Collected in aggregate and anonymised where possible.
- Functional Cookies: Remember your preferences and settings for a better experience.
- Marketing Cookies: Used only with your consent, to deliver relevant communications. You may opt out at any time.
You may control cookie preferences through your browser settings or the cookie consent manager on our website. Disabling essential cookies may affect the functionality of the Service. For full details, refer to our Cookie Policy at www.sportstr.co/cookies.
11. Data Security
We implement industry-standard technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a high risk to your rights, we will notify affected users without undue delay as required by applicable law.
12. Third-Party Links and Integrations
The Service may contain links to third-party websites, apps, or services. This Policy does not apply to those third-party services. We encourage you to review their respective privacy policies before sharing any personal data. SportStr is not responsible for the privacy practices or content of third-party services.
13. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Service. We will notify you of material changes by:
- Posting the updated Policy on our website at www.sportstr.co
Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance of the changes. We recommend reviewing this Policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us through any of the following channels:
Sportstr LLC
Sharjah Media City, United Arab Emirates
Website: www.sportstr.co
Email: info@sportstr.co
We are committed to resolving all privacy-related concerns promptly and in good faith. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.