This Privacy Policy explains how CourtPass and the facility operator you book with (together, “we”) collect, use, store and disclose your personal information. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Information we collect
- Account details: your name, email address and phone number, and, if you sign in with Apple or Google, the identifier that service gives us (not your password).
- Booking activity: the sessions and courts you book, attendance and access history.
- Payment information: processed by our payment providers (Stripe and Airwallex). We do not store your full card number — only a provider reference and the outcome of a charge.
- Facility access data: the access PIN issued for a booking and the time it is used at a door.
- CCTV footage: some facilities operate CCTV in monitored areas; where they do, signage is posted on-site.
- Children’s information, where you enrol a child in an academy: their name, date of birth, teams and jersey number, attendance, results and stats, and the answers you give on event and enrolment forms, which can include emergency contacts and medical notes. A parent or guardian provides this; children do not hold CourtPass accounts. It is visible to the academy’s staff and the child’s guardians.
- Incident reports: if a coach or the venue records an injury or other incident, what happened and whether medical help was needed. The child’s guardians are told.
- Messages: the chat messages you send, and any photos, videos, voice notes or files you attach. They are visible to the people in that conversation and to the academy that runs it.
- Court scoring: if you score a tournament game with a PIN, the name you type and the scores and stats you enter.
- Device and diagnostic data: a push-notification token for your device, and crash and performance reports from the apps. Crash reports carry your CourtPass user ID but not your name or email.
How we use your information
- To create and manage your account and process your bookings and payments.
- To grant you access to booked facilities (issuing and validating access PINs).
- To send you booking confirmations, reminders, and service or safety notices.
- To meet our legal, regulatory and security obligations.
Disclosure
We share your information with the facility operator you book with, our payment providers, and the access-control and communications service providers needed to deliver the service. We do not sell your personal information. We may disclose information where required by law.
Storage and security
Our primary database and application servers are hosted in Sydney, Australia, and access is restricted to authorised personnel. Some of the service providers we rely on — for payments, email and SMS delivery, file storage, error monitoring and hosting of parts of our websites — process or store information outside Australia. Traffic between your device and CourtPass is encrypted in transit.
Your password is stored only as a one-way hash and cannot be read by us. Access PINs are stored in a readable form so they can be checked at the door; each PIN is unique to a single booking and only works during that booking’s access window. Treat your PIN like a key and do not share it. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.
Your rights
You have the right to access and correct the personal information we hold about you, and to request its deletion. When you delete your account, you are signed out everywhere and your contact details are erased at once; booking and payment records and the record of what you consented to are kept against the de-identified account. You can export or request deletion of your data from your account settings, or from our account deletion page, which explains what is removed and what we must keep. Deletion is subject to records we are required to retain by law (for example, financial transaction records).
Contact
For privacy questions or to make a complaint, contact us at privacy@courtpass.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).