Privacy Policy

Last updated: January 2025

1. Who We Are & Roles

Tucumah LTD is the data processor providing the app. The individual sports clubs using the app are the data controllers responsible for determining why and how personal data is processed under the GDPR.

2. Data We Process

On behalf of clubs, we process:

  • Member names and contact details;
  • Attendance data;
  • Fee/payment records.
  • Limited payment data (e.g., transaction identifiers, amounts, billing details). We do not store full card details.

3. Legal Basis for Processing

We process personal data strictly on instructions from clubs. Clubs must determine the legal basis under GDPR (e.g., consent, contractual necessity, legitimate interest).

4. Purpose and Use of Data

Your data is processed solely to provide:

  • Member registration;
  • Attendance tracking;
  • Payment processing and invoicing;
  • Managing disputes, chargebacks, and transaction reporting.

In connection with payment processing, Tucumah LTD may deduct amounts owed by the club (such as transaction fees or chargebacks) from future payouts in accordance with our Terms of Service.

We do not use data for marketing or sell/share it beyond necessary service providers.

5. Data Storage & Security

Data is stored securely using industry-standard protection (e.g., encryption, restricted access).

We retain data only as long as needed to provide the service.

Upon termination or upon request, data can be deleted or returned to the data controller (club).

6. Data Transfers

If data is transferred outside the UK/EEA, we will ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

7. Third‑Party Processors

We use regulated payment service providers to process transactions securely. These providers are independent controllers of certain financial data under payment regulations, but Tucumah LTD remains the data processor for member and transaction records entered into the app.

8. Data Subject Rights

Members (and other data subjects) have rights under GDPR including:

  • Right of access;
  • Right to rectify or erase data;
  • Right to restrict or object to processing;
  • Right to data portability.

Requests must be made to the club (data controller), and we will assist clubs in responding.

9. Updates to This Policy

We may update this Privacy Policy. Changes will be posted here; continued use of the app constitutes acceptance of any updates.

10. Contact

For questions about data protection or this policy, contact the club (controller) directly. We, as processor, can be reached at: privacy@tucumah.com.