Privacy Policy

1. Who we are

Acapulco Padel Co Ltd ("we", "us", "our") is the data controller for the personal data described in this policy. We are a company registered in England and Wales, company number 17432102.

Contact: info@acapulcopadelco.com

Our full registered office details are available on the public Companies House register (search company number 17432102).

2. What data we collect

Contact details: name, job title, email address, mobile number, LinkedIn profile. Organisation details: company name, industry, registered or billing address, and (for invoicing) company registration and tax numbers. League participation details: team, captain/player role, preferred market/city, match and league activity. Communication and consent records: marketing consent, data processing consent, and the date/time consent was given. Payment and invoicing details necessary to bill your organisation (no card numbers collected or stored directly).

3. Why we process it, and our lawful basis

Setting up and running your company/contact record, registering your team, and delivering the league: performance of a contract, or steps taken at your request before entering one. Invoicing and payment: performance of a contract, and compliance with our legal obligations as a UK company. General business communication about a league you have registered for or expressed interest in: legitimate interests. Marketing communications about new leagues, seasons, or events: consent, only where you have opted in, and you can withdraw this at any time.

4. Who we share it with

Replit (application hosting and database provider), Resend (transactional email provider for login links and league communications), Wise (business banking provider, used for payment processing). We do not sell personal data, and do not share it with third parties for their own marketing purposes.

5. International transfers

Production systems are hosted in the EU. Where a service provider processes data outside the UK/EEA, we rely on their standard contractual safeguards (UK IDTA / EU SCCs).

6. How long we keep it

For as long as needed to deliver the service, then as required by law (financial records around six years for UK tax). Marketing consent withdrawal is honoured immediately, with a minimal record kept of the withdrawal itself.

7. Security

Encrypted storage and TLS in transit, role based access control.

8. Your rights

Access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent. Contact info@acapulcopadelco.com. You also have the right to complain to the ICO (ico.org.uk).

9. Changes to this policy

Updated as the business and systems evolve, with the date at the top updated accordingly.