Privacy Policy

We collect only what is necessary to provide the service, including:

• Account data: name, email, phone number, date of birth, gender, LINE ID, membership level, and profile picture
• LINE account data: if you choose to sign in with LINE (see section 2)
• Usage data: IP address, browser type/version, pages visited, access times, and sign-in logs
• Booking and payment data: court/coach/equipment bookings, amounts paid, booking status, and Wallet transactions
• Cookies: used for session state and preferences such as language (see section 5)

You may sign in with LINE via LINE Login. When you tap “Continue with LINE” and consent on LINE’s screen, we receive the following from LINE Corporation:

• LINE user ID: used as the primary identifier to link your LINE account to your user account in our system
• Email: used to match your LINE account with an existing account for member identity verification and account-related contact
• Display name: used as your display name in the system if you have not set one yet
• Profile picture: used as your avatar in the system

We use email from LINE only for identity verification and account linking. We do not use it for advertising, sell it, or disclose it to third parties for marketing.

We request only the scopes above (openid, profile, email). We cannot access your LINE friends, groups, chats, or messages, and we cannot send messages on your behalf.

If you do not wish to share your email, you may decline consent on LINE’s screen. You can still sign in with email and OTP as usual.

You may unlink LINE at any time from your profile page. After unlinking, we remove the LINE user ID, display name, and profile picture received from LINE, and you cannot sign in with LINE until you link again.

LINE Login is also subject to LINE Corporation’s privacy policy, which is outside our control.

We use your personal data for the following purposes:

• Identity verification, access control, and account security
• Providing court booking, coach selection, equipment rental, payments, and Wallet management
• Contacting you about your account, bookings, in-app notifications, and important service changes
• Detecting, preventing, and investigating abnormal or unlawful use
• Analyzing aggregate usage to improve the system
• Complying with law and orders from competent authorities

We do not use your personal data for purposes beyond those stated, unless you give additional consent or the law requires it.

• Contract performance: to provide booking and membership services under the terms of use
• Legitimate interests: to secure the system, prevent fraud, and improve the service
• Consent: for data you choose to provide, such as email and profile from LINE
• Legal obligation: when we must retain or disclose data as required by law

• Essential cookies: store sign-in state (tokens) so you do not need to sign in every time. Disabling them may prevent use of the system.
• Functional cookies: remember preferences such as language

You can configure your browser to refuse cookies, but some parts of the system may not work fully.

We do not sell your personal data. We disclose it only in the following cases:

• Service providers we use: e.g. hosting, identity (Supabase), payments (Stripe), and LINE Login, bound by contracts to keep data confidential and use it only as needed
• Within the organization: staff and admins see data only as their role permissions allow
• Legal requirements: when ordered by a court or competent authority, or to protect our and users’ rights and safety
• Business transfer: in a merger or transfer, we will notify you before data moves under another policy

We keep personal data only as long as needed for the purposes in this policy — while your account is active, and afterward as needed to comply with law, resolve disputes, or enforce our terms.

Usage logs are kept for a shorter period unless needed for security investigations or longer retention is required by law.

We use appropriate technical and organizational measures to protect your data, such as encryption in transit, role-based access limits, and access logging.

No transmission or storage method is completely secure. We cannot guarantee absolute security. If a personal data breach occurs, we will notify you and relevant authorities as required by law.

Under the PDPA, you have the right to:

• Access and obtain a copy of your personal data
• Request correction of inaccurate or outdated data
• Request deletion or destruction when data is no longer needed or you withdraw consent
• Request temporary suspension of use
• Object to collection, use, or disclosure
• Request data portability to another controller
• Withdraw consent at any time without affecting prior processing
• Lodge a complaint with the Personal Data Protection Committee if you believe we do not comply with the law

Exercise these rights by contacting us as in section 12. We will respond within 30 days of receiving your request.

This system is available to general members. If you are under 20, you should obtain consent from a parent or legal guardian before registering or providing personal data. If we learn that a minor’s data was collected without such consent, please contact us so we can delete or handle it appropriately.

We may update this policy from time to time. The new version will be posted on this page with the last-updated date. For material changes, we will notify you in advance by email or in-app notice.

For questions about this policy or to exercise your data subject rights, contact us at:

• Data controller: Greenwich Tennis Academy
• Email: greenwichtennis.academy@gmail.com