Privacy Policy

1. Overview

TennisPlay is built and operated by CSMT3CH (“we”, “us”, “our”). We take privacy seriously and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Three promises sit at the heart of this policy:

• We do not sell your data. Ever. To anyone.
• Club data belongs to the club. The data a club and its players enter into the platform is the club’s intellectual property, not ours.
• We only use data to run the platform. Nothing you enter is used for advertising or unrelated purposes.

2. Our role

TennisPlay is provided to tennis clubs as a service. For most player and member data, the club you play at decides why and how that data is collected — we process it on the club’s behalf to operate the platform. For account and platform-level data (such as login credentials and usage logs), we act in our own right as the platform operator.

3. What we collect

• Account details — name, email address, phone number, and login credentials (managed securely via AWS Cognito; we never see or store your password in plain text).
• Booking information — courts, coaches, sessions, groups, packages and memberships you book, including dates, times and participants.
• Payment information — payments are processed by Stripe. We receive transaction confirmations and payment status, but your full card details are held by Stripe, never by us.
• Club configuration data — courts, rates, schedules, coaching levels and membership plans entered by club administrators.
• Technical data — device, browser and usage information collected automatically to keep the platform secure and reliable.

4. How we use personal information

• to create and manage accounts and authenticate logins;
• to take, manage, confirm and remind you about bookings;
• to process payments, memberships, packages and refunds;
• to send service notifications by email or SMS (booking confirmations, changes, cancellations);
• to provide support to clubs and players;
• to keep the platform secure, prevent fraud and meet legal obligations; and
• to improve the platform using aggregated, de-identified usage insights.

5. AI features

TennisPlay includes AI-assisted search that lets you describe what you want in plain language — for example, “a court on Saturday morning” — and turns it into a booking search. Your query is processed only to fulfil your request. We do not use your personal information or your club’s data to train AI models, and AI features never share your data with third parties for their own purposes.

6. Who we share data with

We share personal information only with the service providers needed to run the platform, and only for that purpose:

• Your club — club administrators and relevant coaches can see the bookings and membership details needed to run their club.
• Stripe — for secure payment processing.
• Amazon Web Services — for hosting, authentication (Cognito) and email/SMS delivery, in the Sydney (ap-southeast-2) region.
• Cloudflare — the demo request form uses Cloudflare Turnstile to block spam, which processes technical information such as your IP address and browser characteristics.

We may also disclose information where required by law. We never sell, rent or trade personal information.

7. Storage and security

Data is hosted on Amazon Web Services infrastructure in Australia (Sydney region). Safeguards include encrypted connections (HTTPS/TLS), managed authentication with AWS Cognito, role-based access controls so users only see what their role permits, and regular backups. No system is perfectly secure, but we design and operate the platform to protect your information at every layer.

8. Retention and deletion

We keep personal information only as long as needed to provide the service and meet legal obligations (such as financial record-keeping). When a club leaves TennisPlay, its data is exported to the club on request and then deleted from our production systems within a reasonable period. Players can request deletion of their account at any time.

9. Your rights

You may:

• request access to the personal information we hold about you;
• ask us to correct inaccurate or out-of-date information;
• request deletion of your account and data;
• opt out of non-essential communications at any time; and
• complain to us about a privacy matter — and if you are not satisfied with our response, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Cookies

We use cookies and similar technologies that are strictly necessary for the platform to work — keeping you signed in, remembering your preferences and securing your session. We do not use third-party advertising or cross-site tracking cookies.

11. Changes and contact

We may update this policy from time to time; material changes will be notified via the platform or by email, and the “last updated” date above will change.

Privacy questions or requests? Email support@tennisplay.com.au. See also our Terms & Conditions.