Privacy Policy

1. Introduction

Thirdshot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our pickleball court booking platform and services (the "Service").

This Privacy Policy complies with the Personal Data Protection Act 2012 (PDPA) of Singapore and applies to all users of our Service in Singapore.

By using our Service, you consent to the collection and use of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

When you register for an account or make a booking, we collect:

• Contact Information: Name, email address, phone number
• Account Credentials: Email and password (encrypted)
• Payment Information: Payment method details processed through our secure payment gateway (HitPay). We do not store your full credit card numbers
• Booking Information: Court bookings, booking history, preferences

2.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, features used, time spent on pages
• IP Address: Your Internet Protocol address
• Cookies: See Section 8 for details on cookies

2.3 Information from Third Parties

If you sign in using third-party authentication (e.g., Google), we receive basic profile information from that service in accordance with their privacy policies.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Process and manage your court bookings
• Process payments and issue receipts
• Send booking confirmations and reminders
• Manage your account and provide customer support
• Communicate with you about your bookings

3.2 Service Improvement

• Analyze usage patterns to improve our Service
• Understand user preferences and optimize court availability
• Develop new features and services
• Troubleshoot technical issues

3.3 Communication

• Send transactional emails (booking confirmations, reminders, receipts)
• Send important service updates and announcements
• Respond to your inquiries and support requests
• Send promotional emails about our services (you can opt-out anytime)

3.4 Legal Compliance

• Comply with legal obligations under Singapore law
• Prevent fraud and ensure platform security
• Enforce our Terms of Service
• Respond to legal requests from authorities

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our Service:

• Payment Processing: HitPay for secure payment transactions
• Email Services: Resend for transactional and reminder emails
• Hosting Services: Vercel for web hosting and Supabase/Neon for database hosting
• Authentication: Supabase for user authentication

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to:

• Comply with Singapore legal obligations
• Protect the rights, property, or safety of Thirdshot, our users, or the public
• Prevent fraud or security issues
• Respond to court orders or law enforcement requests

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Password Security: Passwords are hashed and encrypted before storage
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment gateways
• Access Controls: Access to personal information is restricted to authorized personnel only
• Regular Security Audits: We regularly review and update our security practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations (e.g., tax and accounting requirements)
• Resolve disputes and enforce our agreements

Booking Records: We retain booking and payment records for at least 7 years to comply with Singapore accounting and tax regulations.

Account Information: If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights Under PDPA

Under Singapore's Personal Data Protection Act (PDPA), you have the following rights:

7.1 Right to Access

You have the right to request access to your personal information that we hold. You can view most of your information in your account settings.

7.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly in your account settings.

7.3 Right to Withdraw Consent

You can withdraw your consent for us to collect, use, or disclose your personal information, subject to legal or contractual restrictions. However, this may affect our ability to provide services to you.

7.4 Right to Data Portability

You can request a copy of your personal information in a structured, commonly used format.

7.5 Right to Object to Marketing

You can opt-out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

To exercise any of these rights, please contact us at privacy@thirdshot.sg. We will respond to your request within 30 days as required by PDPA.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Service:

8.1 Essential Cookies

These cookies are necessary for the Service to function and cannot be disabled:

• Authentication cookies (keep you logged in)
• Security cookies (protect against fraud)
• Session management cookies

8.2 Analytics Cookies

We use analytics cookies to understand how users interact with our Service and improve user experience. These cookies collect anonymous usage statistics.

8.3 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Service.

9. Third-Party Links

Our Service may contain links to third-party websites or services (e.g., payment gateways, social media). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your personal information may be transferred to and processed in countries outside of Singapore where our service providers are located. These countries may have different data protection laws. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated Privacy Policy on our Service
• Updating the "Last Updated" date at the top of this policy
• Sending an email notification for material changes

Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Complaints

If you have concerns about how we handle your personal information, please contact us first at privacy@thirdshot.sg. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore: