This Privacy Policy describes how FourBalls (Pty) Ltd ("FourBalls", "we") collects, uses, and shares information when you use our Service. We comply with the Protection of Personal Information Act (POPIA) of South Africa.
1. Information we collect
We collect the following types of information:
- Account info: name, email, phone, and organisation details you provide at sign-up.
- Event data: events, players, captains, sponsors, scoring, registrations, and payment confirmations that you create or upload.
- Course data: profile information, facilities, pricing, calendars, and bookings.
- Payment info: when courses subscribe, Stripe handles card details — we never see your full card number. We store only the customer/subscription identifiers Stripe gives back.
- Usage data: server logs (IP, page paths, timestamps) and aggregate analytics to monitor performance and prevent abuse.
2. How we use it
- Run the Service — login, event pages, scoring, emails.
- Send transactional emails (registration confirmations, event reminders, payment receipts, booking notifications).
- Send occasional product updates and announcements — you can unsubscribe at any time.
- Investigate and prevent fraud, abuse, and service disruption.
3. Sharing
We share personal information only when:
- You explicitly direct us to — e.g. when an organiser sends a captain a confirmation email, that captain's details flow accordingly.
- With service providers that operate the platform: Supabase (database + auth), Stripe (payments), Resend (email), Vercel (hosting). Each of these have their own privacy policies and we share the minimum data needed.
- When required by law or to protect the safety of our users.
We do not sell your information to advertisers or data brokers.
4. Cookies
We use cookies for authentication (so you stay logged in) and for limited analytics. We do not run third-party advertising cookies.
5. Data retention
Account data persists for as long as your account exists. Event data persists for 24 months after the event date so historical results remain accessible. You can request deletion at any time — email privacy@fourballs.co.za.
6. Your rights under POPIA
You have the right to access, correct, and request deletion of your personal information, and to object to processing for direct marketing. To exercise these rights, email us at privacy@fourballs.co.za and we'll respond within 30 days.
7. Security
We host data in encrypted databases, use HTTPS for all traffic, and follow industry-standard practices to protect your information. No system is perfectly secure — if we ever suffer a breach affecting your data, we'll notify you and the Information Regulator as required by POPIA.
8. Changes
We'll update this policy from time to time and post the revised version here with a new "Last updated" date. Material changes will be announced by email.
Questions? Email privacy@fourballs.co.za.