1. Who We Are

RANQD (“we”, “us”, “our”) is a software service providing tournament and league management tools for racket sports clubs - pickleball, padel, tennis, badminton, squash and table tennis. RANQD is a trading name of Paddle Sports Ltd, a company registered in England & Wales (company number 16105996), with its registered office at 128 City Road, London, EC1V 2NX. We are registered with the UK Information Commissioner’s Office under registration reference ZC239326. For data protection enquiries, contact us at hello [at] ranqd.app.

2. What Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, and club name (optional)
• League data: player ratings, match results, division membership, performance history
• Technical data: IP address, browser type, device information, access timestamps (via server logs)
• Communications data: messages you send us via contact forms or email
• Payment data: if you pay a tournament entry fee, your payment is processed by the club’s own connected payment provider (Stripe) as merchant of record. RANQD facilitates the connection but does not see or store your full card details.

3. How We Use Your Data

We process your personal data for the following purposes and legal bases:

• Providing the service (contract performance) - creating and managing your league, player accounts, and match data
• Communications (legitimate interest / consent) - responding to enquiries, sending launch notifications you requested
• Service improvement (legitimate interest) - understanding usage patterns to improve RANQD
• Organising play (contract performance / legitimate interest) - arranging members into sessions, groups and fixtures based on ratings, activity and preferences
• Legal compliance (legal obligation) - retaining records where required by law
• Tournament announcements (consent) - emailing you about a club’s new tournaments, where you have subscribed and confirmed via double opt-in (see section 4)

4. Marketing Communications & Tournament Notifications

RANQD Tournaments lets a visitor to a club’s public tournaments page subscribe with their email to be notified when that club publishes a new tournament.

• Data collected: your email address, and an optional display name.
• Lawful basis - consent (UK GDPR Article 6(1)(a), and PECR for electronic marketing): subscriptions use double opt-in. We send a single confirmation email, and no announcement emails are sent unless and until you click the confirmation link.
• Purpose: solely to email you when the specific club you chose to follow publishes a new tournament. This data is not sold, rented, or shared, and is not used for any other marketing or for any other club.
• Controller and processor: the club is the data controller for its subscriber list; RANQD (Paddle Sports Ltd) acts as the data processor, storing the list and sending announcement emails on the club’s behalf under a data processing agreement. Each club’s subscriber list is stored separately.
• Withdrawing consent / unsubscribing: every announcement email contains a one-click unsubscribe link that takes effect immediately. You may also ask the club directly to remove you. Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
• Retention: your subscription data is kept only until you unsubscribe or the club’s account is deleted, whichever happens first, after which it is deleted.

International subscribers. Tournament announcement emails are designed to meet email-marketing rules wherever you are. Our double opt-in consent and one-click unsubscribe align with the EU ePrivacy Directive, the US CAN-SPAM Act, Canada’s Anti-Spam Legislation (CASL), and Australia’s Spam Act. Every announcement email identifies the sending club, includes a valid postal address, and honours unsubscribe requests immediately.

5. Data Sharing

We do not sell your personal data. We use the following processors to run the service, each under a data processing agreement:

• Vercel - application hosting. The service runs in Vercel’s London region.
• Neon - the PostgreSQL database holding your club’s data, hosted in London.
• Upstash - rate limiting on sign-in and signup attempts, hosted in London (AWS eu-west-2).
• Resend - transactional email such as invitations, receipts and reminders, sent from Ireland.
• Stripe - payments in both directions. Your club’s subscription to RANQD, where RANQD is the merchant; and, where your club takes payments from players for tournament entry fees, the club holds the connected account and is the merchant of record. RANQD does not see or store full card details in either case.
• DUPR - the player’s DUPR ID, the match score, the date and an event label, where your club switches on the DUPR connection (United States). Names, email addresses and phone numbers are not sent. RANQD operates the connection to DUPR; your club chooses whether to use it and which of its tournaments submit. Our lawful basis for this is legitimate interests - keeping the portable rating a player relies on accurate - and you can object at any time: a player who has linked their DUPR account can unlink it in their profile, which stops any further results being sent, and anyone else can ask their club or us. A player’s DUPR rating is held by DUPR and is not changed by RANQD.
• Legal authorities - where required by law or to protect our rights.

All third-party processors are contractually required to handle your data in compliance with applicable data protection law.

6. International Data Transfers

Your club’s data is stored and processed in the United Kingdom and the European Economic Area. The one routine exception is DUPR, in the United States. Results reach DUPR only where your club has switched the connection on; RANQD operates that connection on your club’s behalf, and what is sent is the player’s DUPR ID and the score, not their name or contact details. Our lawful basis for that transfer is legitimate interests, and you can object to it at any time. Where a transfer outside the UK or EEA does occur, we rely on appropriate safeguards - Standard Contractual Clauses, or an adequacy decision recognised by the UK ICO.

7. Data Retention

We retain personal data only as long as necessary:

• Active account data: retained for the duration of your subscription plus 90 days after cancellation
• Contact form submissions: up to 2 years
• Server logs: up to 12 months
• Financial records: 7 years (UK legal requirement)

8. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure (“right to be forgotten”) in certain circumstances
• Restriction of processing in certain circumstances
• Data portability - receive your data in a machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time where processing is consent-based

To exercise any right, email hello [at] ranqd.app. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk, or your local supervisory authority if you are in the EEA.

If you have subscribed to a club’s tournament announcements, you can withdraw your consent at any time using the one-click unsubscribe link in any announcement email - which takes effect immediately - or by asking the club to remove you. As the club is the data controller for its subscriber list, requests to access or erase that data are handled by the club; RANQD will assist the club as its processor.

9. Cookies

We use cookies and similar technologies. See our Cookie Policy for full details.

10. Children’s Privacy

Children use RANQD Tournaments, and this section describes how. Organisers can run under-12, under-14 and under-18 categories. An entry to a junior event requires a parent or carer’s name and contact details, which we hold alongside the entrant’s own, and we collect a date of birth where an event has an age limit so that eligibility can be checked. An entrant’s name appears on the public draw, including a child’s. Junior draws are excluded from search-engine indexing, and a junior event stops being publicly readable two years after it ends - the organiser keeps their own complete record. Where a club has switched on the DUPR connection, a junior’s match results are sent to DUPR in the United States under that child’s DUPR ID. No name, contact details or date of birth are sent with them. A parent or carer can object at any time, to us or to the organiser. We do not knowingly collect a child’s personal data other than through an entry made or supervised by their parent or carer. If you believe we hold a child’s data that should not be here, contact us and we will remove it.

11. Changes to This Policy

We may update this policy from time to time. We will notify active users of material changes by email or in-app notice. The “Last updated” date at the top reflects the most recent revision.