This Privacy Policy explains how Field Tech Ltd
(registered number [Registration Number], registered address
[Registered Address]) collects, uses, and protects your
personal data when you use the Courtly mobile application and website.
[PLACEHOLDER: Add introductory paragraph — who this policy applies to, which jurisdictions it covers (UK GDPR / EU GDPR), and a brief statement of your commitment to data protection.]
What We Collect
We may collect the following categories of personal data:
Account data — email address and password (stored securely via Supabase Auth)
Location data — approximate location used to show nearby courts, only when you grant permission
Usage data — sport preferences, saved locations, and app settings stored locally on your device
Communications — email address submitted via the waitlist or contact form
[PLACEHOLDER: Confirm the full list of data points collected, including any analytics or crash-reporting tools (e.g. Sentry, Expo telemetry). Add legal basis for each category under UK GDPR Article 6.]
How We Use It
We use your data to:
Provide and personalise the Courtly service
Show you courts relevant to your location and sport preferences
Send you a one-time email when the app launches (waitlist only)
Respond to enquiries submitted via the contact form
Maintain the security and integrity of user accounts
[PLACEHOLDER: Confirm marketing email intentions — do you plan to send ongoing communications beyond the launch email? If so, describe the opt-in mechanism and how users can unsubscribe.]
Data Sharing
We do not sell your personal data. We may share it with:
Supabase — authentication and database infrastructure provider
Netlify — hosting and serverless functions provider
Third-party booking platforms — when you follow a link to book a court, you are directed to an external platform with its own privacy policy. Courtly does not share your data with these platforms.
[PLACEHOLDER: List all sub-processors and confirm data transfer mechanisms for non-UK/EEA processing. Add any other third-party services (analytics, error tracking, etc.).]
Cookies & Tracking
Courtly uses a small number of browser technologies to deliver the service:
Google Fonts — font files are loaded from Google's CDN. This causes your browser to make a request to Google's servers, which may log your IP address under Google's own privacy policy. No cookie is set by Courtly as a result of this.
Local storage (app) — the mobile app stores your preferences (selected sports, saved locations, dark mode setting) locally on your device using AsyncStorage. This data never leaves your device and is not accessible to us.
Session cookies — if you sign in to Courtly, a secure session token is stored locally on your device via Supabase Auth to keep you signed in. This token is not used for advertising or tracking purposes.
We do not currently use any third-party advertising cookies, tracking pixels, or behavioural analytics tools.
[PLACEHOLDER: If analytics are added in future (e.g. Plausible, PostHog, Google Analytics), update this section to describe: what tool is used, what data it collects, whether it uses cookies or is cookieless, whether a consent banner is required under UK PECR / EU ePrivacy Directive, and how users can opt out.]
[PLACEHOLDER: If the landing page or web app is ever updated to include a cookie consent banner, reference it here and describe the categories of cookies users can accept or reject.]
Your Rights
Under UK GDPR you have the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing
Data portability
Lodge a complaint with the ICO (ico.org.uk)
[PLACEHOLDER: Describe how users can exercise these rights in practice — e.g. by emailing a specific address, and what the response timeframe is (UK GDPR: one month).]
Data Retention
[PLACEHOLDER: Specify how long each category of data is retained — e.g. account data held until deletion requested, waitlist emails deleted after launch, contact form submissions retained for X months. Include how users can request early deletion.]
Contact
For any privacy-related questions or to exercise your rights, contact us at:
[PLACEHOLDER: Add privacy contact email address and postal address if required. If you appoint a Data Protection Officer, include their details here.]