Privacy Policy

1. Who we are

Pickleball BLR ("we", "us") is a Bengaluru-based tournament organiser. For DPDPA purposes, we act as the Data Fiduciary for the personal data we collect through this site.

2. What we collect

We collect only what we need to run tournaments and process payments:

• Account information — name, email address, hashed password.
• Profile information — phone, city, gender, date of birth, skill level, emergency contact (you choose what to fill in).
• Registration information — which tournaments and categories you register for, your registration status, partner (if applicable), waiver acceptance.
• Payment information — entry fees are paid offline (UPI / bank transfer). We do not collect or store card or UPI credentials on this site. We retain only the amount, transfer reference, and status of each payment for accounting and refunds.
• Match information — court assignments, scores, results, and stats (wins, losses, points).
• Technical information — IP address and basic browser metadata captured in security logs.

3. Why we collect it (purposes)

• To create and manage your account.
• To process tournament registrations and entry-fee payments.
• To run live scoring, brackets, and publish results.
• To send transactional emails — registration confirmation, cancellation/refund confirmation, and tournament reminders.
• To prevent abuse and meet legal obligations (audit logs, anti-fraud).
• For aggregated analytics that help us improve the product (revenue, fill rate, conversion).

4. Legal basis under DPDPA

We process your personal data on the basis of your consent — you give it when you sign up and when you tick the consent boxes during registration — and for certain legitimate uses permitted by the Act (for example, complying with a legal requirement, or providing a service you have requested).

5. Who we share it with

• Resend — to deliver transactional emails to you. See resend.com/legal/privacy-policy.
• Vercel and Neon — our hosting and database providers (data is stored in Asia/India regions where available).
• Authorised tournament admins — to manage check-in, scoring, payment confirmation, and operations on event day.
• Authorities — only when required by law or to protect rights and safety.

We never sell your personal data.

6. Where it lives and how long we keep it

We store data in India where possible. We keep account data for as long as your account is active, and for a reasonable period after closure to handle disputes, refunds, and comply with tax and accounting requirements (typically up to 8 years for financial records). Audit logs of admin actions are retained for at least 12 months.

7. How we protect it

• Passwords are hashed with argon2 — we never store them in plain text.
• Two-factor authentication (TOTP) is available, and is required for admins.
• We never collect card or UPI credentials on this site — entry fees are paid offline directly to a Pickleball BLR account.
• All admin write actions are recorded in a tamper-evident audit log.
• Traffic is encrypted in transit (HTTPS).

8. Your rights

You have the right under DPDPA to:

• Access a summary of the personal data we hold about you.
• Correct or update your data — most fields are self-service in your dashboard.
• Erase your data, subject to retention obligations described above.
• Withdraw your consent (withdrawal does not affect lawful processing already completed).
• Nominate someone to act on your behalf if you are unable to.
• Raise a grievance with us — see contact below — and escalate to the Data Protection Board if unresolved.

9. Cookies and similar technologies

We use a small set of strictly necessary cookies for authentication. We do not use cross-site advertising cookies. If we add product analytics in the future, we will update this policy and seek consent first.

10. Children

Tournaments may include junior categories. If a participant is under 18, registration must be made by a parent or legal guardian, who is responsible for the registration and waiver.

11. Changes to this policy

We may update this policy. We'll change the effective date at the top and, for material changes, notify you by email or in-app. Your continued use after the change means you accept it.

12. Grievance officer

For any data-related question, complaint, or rights request, contact our grievance officer at privacy@pickleballblr.com. We respond within 7 working days.