Privacy Policy
Who we are
Pegboard ("we", "us") is a service operated by Mike Stoker trading as ePegboard for badminton and racquet-sport clubs. We act as the data controller for the personal information described below, except for club payment records, which belong to the club (see Club payments). You can reach us through the feedback page.
What we collect
- Club-admin accounts: name, email address, hashed password, and the club(s) you administer.
- Player accounts: your name, email address and, if you add one, a profile photo. When you join a club, your photo is copied to your member record there, unless the club already holds a photo for you. Your photo stays until you remove it.
- Member records added by club admins: name, optional profile photo, optional email address and phone number, rating, attendance, and game history.
- Members invited to the app: when a club admin grants a member access to the app, we retain that member's email address to issue the invite, deliver the sign-in link, and authenticate future logins.
- Usage data: session logs, error logs, and IP address captured for security and diagnostics.
- Club payments: when a club takes payments online, who booked, paid or owes, and for someone paying by a link without an account, their name and email. See Club payments.
Why we process it
- To run club sessions, schedule games, and maintain rating history - the core service you asked for.
- To authenticate users and protect accounts.
- To diagnose problems and improve the service.
Our lawful bases under UK GDPR are contract (providing the service you signed up for) and legitimate interests (keeping the service secure and functional). Clubs are responsible for obtaining any consent required from their members before adding them to Pegboard.
What other members of your club can see
Pegboard is a shared record of your club's play, in the same spirit as a ladder or a results board on the club noticeboard. If you play at a club that uses Pegboard, your name, match results, ratings (including how they change over time), and playing history are visible to other members of the clubs you play at. This is what makes the ratings and session recaps useful to everyone in the club, and we rely on legitimate interests as our lawful basis for showing this club-internal information to your clubmates.
This information is not published publicly by name to search engines. A club's public page shows its sessions, not individual players' stats by name.
If you would prefer your data not to be shown to your clubmates, you can ask us and we will handle your request individually. We plan to add a self-service setting for this; until then we honour these requests manually.
How long we keep it
We keep club and member data for as long as the club's account is active, plus a short period afterwards to allow for reactivation. You can request earlier deletion at any time. When a profile photo is removed or replaced, we delete it within two days, once no account or member record still uses it. Club payment records are kept for longer, because clubs must keep their accounts: see Club payments.
Who we share it with
We do not sell personal data. These organisations receive it so that the service works:
- Where the app runs. On a server we rent from IONOS, in the UK or the EU. IONOS provides the server as our processor and acts only on our instructions.
- Email. IONOS also sends the app's emails: session and invite emails, sign-in links, payment and refund emails and payment confirmations. For each email it processes the recipient's email address and the email itself, which can include a player's and the club's name, as our processor, on our instructions.
- Stripe, when a club takes payments online. Stripe processes each payment for the club and receives what it needs to do that, as an independent controller (see Club payments).
- Your club, which can see its own members' bookings and payments.
We do not share your club's data with anyone else, unless the law requires us to. We do not currently use any third-party analytics, error-tracking, advertising, or marketing tools. If that ever changes we will update this page and, where practical, notify club admins by email or in the app.
Club payments
Clubs will be able to take payments online through ePegboard: session bookings, passes, monthly plans, payment requests and fees owed on the night. It is not switched on for any club yet. When it is, the following applies.
- The club is in charge of its payment records. Who booked, paid or owes at a club, and the names and emails of people who pay by a link, are the club's records. The club is their controller. ePegboard keeps them for the club and uses them only to run its bookings and payments, on the club's instructions, under the club's terms with us.
- Stripe processes the payment. Card and bank details are entered on Stripe's own pages and never reach ePegboard. Stripe receives the amount, what it is for, and the payer's email for the receipt. Stripe is responsible, as an independent controller, for card and bank details, identity checks on the club's officers and fraud screening, under Stripe's privacy policy.
- Paying by a link. If you pay without an account, the name and email you give go to the club and to Stripe to take the payment and send your receipt. Nothing is sent to the person you paid for.
- How long payment records are kept. Clubs must keep their accounts for six years, so payment records are kept for six years after the end of the club's financial year in which the last payment they relate to was made. Then the names and emails of people who paid by a link are removed. Members' payment records stay with their member record for as long as the club keeps it. If we don't know a club's financial year, we assume the latest year end possible, so records are never removed early.
- Removing a member. The club's reports of past sessions read from its members' payment records. When a club removes a member, the member record is kept, so past sessions and payments still read correctly, and any account linked to it is unlinked. To have your name removed completely, ask the club or contact us; we handle these requests individually.
- Our own records. ePegboard is the controller of its own records about clubs that take payments: the club's account and its connection to Stripe, our fee on each payment, the club's acceptance of our terms, and security logs. Stripe's notifications to us carry no personal details, and we delete our record of them after 90 days.
- Your rights. To see, correct or delete your payment records, ask the club first, as their controller. We'll help the club answer. You can also contact us through the feedback page.
Your rights
Under UK GDPR you can ask us to access, correct, delete, restrict, or port your personal data, and you can object to our processing. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We use session cookies to keep you signed in. We do not use advertising or analytics cookies in the beta.
Changes to this policy
If we change this policy materially we will update the "Last updated" date above and, where practical, notify club admins by email or in the app.