Data Processing Terms

The club is the data fiduciary: it decides whose data it records, why, and what it sends them. FrontCourt is the data processor: we store and process that data only to provide the application to the club, on the club's instructions as expressed through its use of the application and in writing.

• Process the club’s data only to run FrontCourt for that club — never for our own marketing, and never sold or shared with advertisers.
• Keep each club’s data separated from every other club’s inside the database itself, encrypt it in transit, and limit our own staff’s access to what running and supporting the service needs.
• Keep the data confidential, and bind anyone who processes it for us to the same.
• Use only the sub-processors listed below, and tell clubs by email before adding one.
• Help the club answer requests from the people whose data it holds — to see, correct or erase their records.
• Tell the club without undue delay if we become aware of a breach affecting its data, with what we know and what we are doing, so the club can meet its own obligations to notify.
• On the club’s written request after it stops using FrontCourt, export its data and then delete it — except tax invoices and the accounting records behind them, which we keep for the six years Indian GST law requires. Backups age out within three months.

What a club's public page and a venue finder listing show is the club's own choice and instruction, made in its settings. Being listed in the venue finder at app.frontcourt.pro/venues is off until the club ticks the box, and unticking it takes the club out at once. A listing shows the club's name, city, sports, opening times, first photo or logo, and its listed price if the club shows prices. Neither the page nor a listing shows the club's customers or who has booked.

• Have a lawful basis — including any consent the law requires, and a parent’s or guardian’s consent for a child — for the data it enters.
• Give its customers the notice the law requires about how their data is used.
• Keep its own logins secure, and remove access for staff who leave.
• Send promotional messages only to people who have agreed to receive them.

• Railway — hosting, database and file storage, in Singapore.
• Zoho ZeptoMail — sending the app’s emails, in India.
• Razorpay — payments, where the club takes them online through its own Razorpay account.

Because the servers are in Singapore, the club's data is stored outside India. By accepting these terms the club agrees to that transfer.

Write to hello@frontcourt.pro.