Skip to content
OnCourt

Privacy Policy

Last updated Oct 3, 2026

Draft

This document is a draft pending legal review. The final version will replace it before launch.

This Privacy Policy explains what personal data OnCourt processes, why, who it is shared with and what rights you have. It applies under the EU General Data Protection Regulation (GDPR) and the Law of Ukraine "On Personal Data Protection".

Who is responsible

The OnCourt operator is the controller of the data needed to run your account and the platform. Each club you book with is a separate controller of its own client list: the bookings you make there, notes the club keeps about its clients, and no-shows it records.

TODO owner/legal: operator's legal name, address and, if appointed, data protection officer.

Data we collect

  • Account: your first and last name, mobile phone number, email address (optional), password (stored only as a one-way hash), language and notification preferences.
  • Bookings: the clubs you belong to, your bookings and recurring bookings (court, date, time, status, price, notes), cancellations and no-shows.
  • Club admins: your role in the club and a log of changes you make in its admin area.
  • Technical: your sign-in sessions, with the device's IP address and browser, and the cookies described in the Cookie Policy.
  • Messages: the SMS, emails and in-app notifications we send you, and their delivery status.
  • To create your account and let you book courts: performance of the contract (these Terms).
  • To verify your phone and send booking confirmations, changes and reminders: performance of the contract.
  • To send optional notifications you can switch off on your account page: your consent.
  • To keep the service secure, prevent abuse and keep a record of admin changes: our legitimate interest.
  • To meet legal obligations, for example to answer authorities' lawful requests.

TODO owner/legal: confirm the legal bases, including under the Law of Ukraine.

How long we keep data

We keep your account data while your account exists. When you delete your account, your name, phone number and email are removed and your past bookings stay with the clubs only in anonymised form. Sign-in sessions expire after a period of inactivity.

TODO owner/legal: retention periods for bookings, message logs, audit logs and backups.

Who we share data with

  • The clubs you book with see your name, phone number, email and your bookings at their club.
  • Service providers that process data on our behalf: Twilio (SMS), SendGrid (email), Cloudflare R2 (storage of club photos and logos) and Render (hosting and database).

We don't sell your data and don't use it for advertising.

TODO owner/legal: processor locations, international transfers and safeguards.

Your rights

Under the GDPR and the Law of Ukraine "On Personal Data Protection" you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You can also lodge a complaint with a supervisory authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU, your country's data protection authority.

Deleting and exporting your data

On your account page you can change your details, download a copy of your data and delete your account. For anything else, contact us.

Contact

Questions about your data: use the support contact on this page, or write to the operator at the address above.

TODO owner/legal: privacy contact address.