PadelSuite

Draft pending legal review. This text has not yet been reviewed by a lawyer and may change before its final publication. MSLARCO completes the details in brackets during that review. The Spanish version prevails in case of discrepancy.

PadelSuite Privacy Policy

Last updated: [publication date]

This policy explains what personal data PadelSuite processes, for what purpose, with whom it is shared and how to exercise your rights, in accordance with Ecuador's Organic Law on Personal Data Protection (LOPDP) and its regulations.

1. Who processes your data

  • MSLARCO ([legal name], tax ID (RUC) [number], [address], Ecuador) provides PadelSuite and is the controller of your account and player profile data (name, email, phone, level and history), which follow you across all clubs, and of the data it receives through its own website, for example when you request a demo.
  • Each club where you book, play or take classes is the controller of the data generated there (your bookings, payments, entries, notes and its school's evaluations). MSLARCO acts as the processor of that data, following the club's instructions.

Data protection officer: [officer's name and email].

2. What data we process

  • Account: name, email, password (stored encrypted), phone if you add it, language, devices with an open session and access logs.
  • Player profile: photo, city, date of birth, playing hand and position, level and history of matches and results.
  • At each club: bookings, payments and balances, tournament and class entries, rankings and, if you take classes, the evaluations and material your coach leaves you.
  • Payments: online payments are processed by the club's payment gateway (for example, Paymentez). PadelSuite does not store your full card details and does not hold that money: it only receives the result of the charge.
  • Videos: if you record your match, or the club records it with its cameras, the video and the marked moments of each point.
  • Location: only if you allow it on your phone, to show you nearby clubs. We do not store it or share it with clubs.
  • Technical use: IP address, browser and activity logs needed for security and auditing.

We do not ask for data the service does not need.

3. Data of children and adolescents

Some players at the clubs' schools are minors. Therefore:

  • The club must have the consent of the mother, father or legal guardian to upload a minor's data, where the law requires it.
  • We never use minors' data for advertising or commercial profiling, and we never sell it.
  • Videos in which minors appear are only visible to the authorized people of the match and the club.

4. What we use it for

  • Providing the service: bookings, payments to the club, scoreboard, rankings, school and whatever each club's modules enable.
  • Sending service notices: invitations, verification codes, booking confirmations and security alerts.
  • Calculating your level from the confirmed results of your matches.
  • Protecting accounts and the platform, preventing abuse and meeting legal obligations.
  • Improving the service with aggregated usage statistics that identify no one.

The legal basis is the performance of the contract, consent where applicable, compliance with legal obligations and the legitimate interest in the security of the service.

5. Whom we share it with

  • With each club where you have activity, only what is needed to serve you (for example, your name and phone on your booking). It only sees your full profile if you share it.
  • With providers we need to operate, under contract and with confidentiality and security obligations: hosting and file storage ([provider and country]), email delivery (Amazon Web Services SES), WhatsApp messages to verify your phone (Meta), real-time scoreboard (Pusher) and phone notifications.

Some of these providers are outside Ecuador. In those cases we apply the safeguards the LOPDP requires for international data transfers. We do not sell or transfer personal data to third parties for their own purposes.

6. How long we keep it

While your account is active. Original videos are kept for [period] days. When you request the deletion of your account, or a club ends the service, we delete or anonymize the data within [period] days, except what the law requires us to keep. Security logs are kept for [period].

7. How we protect it

Encrypted connections, passwords stored with one-way hashing, encrypted gateway credentials, optional two-step verification, strict separation of each club's data, permissions by profile and an audit log of important actions. If a breach affects your data, we will notify the authority and the people affected within the time limits set by law.

8. Your rights

You can exercise your rights of access, rectification, updating, erasure, objection, portability and suspension of processing, and withdraw consent at any time. The mother, father or legal guardian exercises them on behalf of a minor.

Write to us at [privacy email], or ask the club when it concerns data generated there. We will reply within the period set by the LOPDP. If you are not satisfied, you can go to the Superintendency of Personal Data Protection.

9. Cookies

The site uses the cookies needed to keep your session and your language and theme preferences. On the public page we use Google Analytics 4 to measure which parts are useful, only if you accept it in the cookie notice; if you reject it, no measurement cookie is stored. You can change your decision at any time from the "Cookies" link in the footer.

10. Changes

If we make significant changes to this policy, we will announce them by email or within the platform before they take effect.

11. Contact

For any privacy question: [privacy email].