1. Who We Are
Bowlside (“we”, “us”, or “our”) operates the sports club management platform at bowlside.com. We are the data controller for personal data collected directly through the platform. For questions about this policy or to exercise your rights, contact us at support@bowlside.com.
2. Data We Collect
Account and club data — when you register, we collect your name, email address, and club name. Club admins may also add information about their club (type, sport, settings).
Member data — club administrators may upload details of club members (name, email, gender, handicap information). You are the data controller for this data; we process it on your behalf as your data processor.
Usage data — we collect standard server logs and usage information (pages visited, features used, browser type, IP address) to operate and improve the Service.
Payment data — billing and card details are collected and stored by Stripe, not by us. We receive only a payment confirmation and subscription status.
Waitlist data — if you sign up for a sport waitlist, we store your email address and sport preference.
3. How We Use Your Data
- To create and manage your account and club.
- To provide and improve the Service, including match scheduling, draw generation, and result management.
- To send transactional emails (match notifications, scheduling confirmations, result alerts). These are core to the Service and cannot be opted out of while you have an active account.
- To process payments and manage your subscription.
- To contact you about material changes to the Service or these policies.
- To send you product updates and feature announcements (you may opt out of these at any time).
- To comply with legal obligations and enforce our Terms of Service.
4. Legal Basis for Processing (UK GDPR)
We process your personal data on the following legal bases:
- Contract — processing necessary to provide the Service you have signed up for.
- Legitimate interests — usage analytics and service improvement, fraud prevention, and communications about the Service.
- Consent — marketing emails and cookies where required. You may withdraw consent at any time.
- Legal obligation — where required by applicable law.
5. Third-Party Processors
We share your data with the following trusted third-party services, each under a data processing agreement:
Supabase
Database and authentication infrastructure · EU / US (Standard Contractual Clauses in place)
Privacy policy →Stripe
Payment processing and subscription management · US (Standard Contractual Clauses in place)
Privacy policy →Mailchimp (Intuit)
Marketing and waitlist email communications · US (Standard Contractual Clauses in place)
Privacy policy →We do not sell your personal data to any third party.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where a longer retention period is required by law (for example, financial records may be retained for up to 7 years).
Club member data uploaded by administrators is deleted when the club account is deleted. Administrators can delete individual member records at any time.
7. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your data (“right to be forgotten”).
- Portability — receive your data in a structured, machine-readable format.
- Restriction — ask us to restrict processing in certain circumstances.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email us at support@bowlside.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Children
The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
Club administrators who add members under 18 are responsible for ensuring they have the appropriate consents and legal basis to do so under applicable law.
10. International Transfers
Some of our third-party processors are based in the United States. Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place — typically Standard Contractual Clauses (SCCs) approved by the relevant supervisory authority.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect. The current version will always be available at bowlside.com/privacy.
12. Contact
For any questions or concerns about this Privacy Policy or our data practices, please contact us at support@bowlside.com.