Privacy Policy

• Account and profile — name, email, phone, address, date of birth, gender, and a profile photo if you add one. Date of birth and gender are used for league eligibility rules (age brackets, gendered competitions).
• Emergency contact details — collected at registration so your club can reach someone if you’re injured at an activity.
• Medical information — allergies, conditions and similar details you choose to provide. This is sensitive information: we only collect it with your consent, and within your club it is visible to club management only.
• Payments — processed by Stripe. We keep records of what you paid and for what, but your full card number never touches our systems. If you rent tracked gear, Stripe stores your card on file for the disclosed replacement fee.
• Sport data — registrations, teams, attendance, game stats and results entered by you or your club’s coaches.
• Family accounts and parental consent records — if you manage a child’s account, the link between your account and theirs, your relationship to them, and the child’s profile details you provide. For every registration of a player under 18 we record who performed it and the consenting parent or guardian’s name, relationship and the time consent was given.
• Lead form submissions — if you fill in a club’s enquiry form, the name, email, phone and answers you submit go to that club’s management.
• Technical data — device and usage information needed to keep the Platform secure and working.

• Running your account, registrations, teams, fixtures and payments.
• Checking league eligibility (age, gender) where a club has set rules.
• Sending transactional notifications — registration confirmations, event reminders, team assignments. You control most of these per-type in your notification settings.
• Marketing, only if you opt in. You can opt out at any time.
• Keeping the Platform secure, and meeting our legal obligations.

We do not sell personal information. Ever.

Clubs are the reason you’re here, so your club sees the information it needs to run your season: your profile and registration details, emergency contacts, attendance and stats. Within a club, access follows roles — coaches see their teams and rosters; medical information is restricted to club management.

Clubs must only use member information to run the club, and are responsible for their own privacy obligations for anything they collect or export. If you have a concern about how a club is using your information, raise it with the club, and with us if it isn’t resolved.

A club can opt in to a public page on clubsport.world. Those pages only ever show club-level information: the club’s name and branding, staff and coach names the club chooses to list, sponsors, announcements, and — if the club opts a league in — fixtures and results as team names and scores only.

Player names, photos and stats are never shown on public pages. This is a deliberate design decision for junior sport. Your game stats are private by default and you control their visibility per league in your settings.

Community sport is full of junior players, so the Platform is built around protecting them:

• Under 16 — parent-managed accounts.Children under 16 cannot create their own account. A parent or guardian creates and manages one for them from the Family page, and provides the information described above (including any medical details) on the child’s behalf. We collect that information from the parent or guardian, not from the child.
• No direct contact with managed children.A managed child’s account has no login and no email inbox of its own — every email about the child (registration confirmations, reminders, refunds) is delivered to their parent or guardian.
• Guardian access.The managing parent or guardian can view and update the child’s profile (including emergency contact and medical details) and see their registrations and gear loans. In v1 each child has one managing guardian.
• Parental consent records.Registering any player under 18 requires a parent or guardian’s permission. We record the consenting adult’s name, relationship and the time consent was given, alongside the registration, and share those details with the club where it needs them for its own duty-of-care or compliance obligations.
• 16–17 year oldsmay hold their own account. They provide their own information, and each league registration captures their parent or guardian’s permission as above.

Junior data otherwise follows the same rules as everything else — visible to the club that needs it, restricted by role within the club, and never shown on public pages.

We use a small set of service providers to run the Platform:

• Supabase — database and hosting infrastructure (hosted in Singapore).
• Stripe — payment processing (a global provider with operations in the United States).
• Resend — transactional email delivery (United States).
• Mapbox — address lookup and location search (United States).
• Cloudflare — spam protection on public forms (global).

Each provider only receives what it needs to do its job. Because some are located overseas, your information may be disclosed to recipients in Singapore and the United States. We take reasonable steps to ensure they handle it consistently with Australian privacy law. Beyond these providers, we only disclose personal information where the law requires it.

Data is encrypted in transit, access within clubs is enforced with row-level database security, and administrative access is restricted and logged. No system is perfectly secure, but if a data breach is likely to cause you serious harm we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.

We keep your information while your account is active. When you delete your account there is a 30-day grace period (in case you change your mind), after which it is permanently deleted. We may retain payment records for as long as tax and financial law requires.

You can view and edit most of your information directly in your profile and settings. For anything else — an access request, a correction, or a privacy complaint — email privacy@clubsport.world and we’ll respond within 30 days. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We’ll update this policy as the Platform grows, and the date at the top always shows the current version. For significant changes we’ll notify you by email or in the app. See also our Terms of Service.