Privacy Policy

1. Who We Are

RACKETREF is operated by the Professional Squash Association ("PSA", "we", "us", or "our"). We are the data controller responsible for your personal data.

This privacy policy explains how we collect, use, store, and protect your personal data when you use RACKETREF, in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

2. Data We Collect

We collect the following categories of personal data:

Account Information

• Name and email address (from PSA authentication)
• PSA profile information and player ID
• Organisation memberships and roles
• Your chosen username, if you set one

Match and Tournament Data

• Match scores, statistics, and referee decisions
• Tournament participation and results
• Player rankings and performance data

Technical Data

• IP address and browser information
• Device type and operating system
• Usage patterns and access times

3. How We Use Your Data

We process your personal data for the following purposes and legal bases:

4. Data Sharing

We may share your data with:

• Tournament organisers: Match data for events you participate in
• Broadcasters: Live score data for authorised streaming partners
• Other signed-in users: If you choose a username, other signed-in users can find you by searching for that username (your name is not searchable), and your display name is shown alongside a matching username so referees and organisers can confirm they have the right person; match results linked to your account appear alongside your username. Your email address is never shared with other users.
• Service providers: Infrastructure and hosting services
• Legal authorities: When required by law

We do not sell your personal data to third parties. Proposed usernames are checked for offensive content using OpenAI's moderation service, which may process the submitted text outside the UK; only the proposed username text is sent for this check, it is not stored by us for that purpose, and it is not used for anything else.

5. Where We Store Your Data

Your data is stored on servers located in the United Kingdom (London region) operated by Fly.io. All data remains within the UK.

If we ever need to transfer data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK data protection law.

6. Data Retention

We retain your data for the following periods:

• Account data: Until you request deletion or 3 years of inactivity
• Match data: Indefinitely for historical records (may be anonymised)
• Technical logs: 90 days

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests

To exercise these rights, visit the Your Data page or contact us at dataprotection@psasquashtour.com.

8. Cookies

We use cookies to operate the Service. For details on what cookies we use and how to manage them, please see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure authentication via OAuth, role-based access controls, and regular security assessments.

10. Complaints

If you have concerns about how we handle your data, you can:

1. Contact us directly using the details below
2. Lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint

We aim to respond to all complaints within 30 days.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or through the Service. The "last updated" date at the top indicates when the policy was last revised.