Privacy Policy

Who is responsible for your personal data?

If you have questions about this Privacy Policy or how we process your personal data, please contact us using the details above.

What personal data we may collect

Depending on how you use PaddockFlow, we may collect:

• Identity and contact data — name, email address, phone number, club or team affiliation
• Account data — login details, role, and user profile information
• Booking and event data — requested slots, assigned slots, event participation, inspection status, notes, and related operational data
• Communication data — messages sent through contact forms or support requests
• Technical data — IP address, browser type, device information, log data, and basic usage information
• Cookie and analytics data, where applicable

Why we process your personal data

We may process your personal data for the following purposes:

• To provide access to the PaddockFlow platform
• To manage events, bookings, slot assignments, inspections, and related operations
• To communicate with users, clubs, teams, officials, and administrators
• To provide customer support and respond to enquiries
• To improve, maintain, and secure our website and services
• To comply with legal obligations
• To establish, exercise, or defend legal claims where necessary

Legal bases for processing

We process personal data only when we have a valid legal basis, including:

• Performance of a contract — when processing is necessary to provide PaddockFlow services
• Legitimate interests — for example, to improve, secure, and administer the platform
• Consent — where required, for example for certain cookies or marketing activities
• Legal obligation — where processing is required by law

Who we may share personal data with

We may share personal data with:

• IT, hosting, authentication, analytics, and infrastructure providers
• Clubs, event organisers, or authorised administrators using the platform, where relevant to the service
• Professional advisers such as legal, accounting, or insurance providers
• Public authorities where required by law

We do not sell personal data.

International transfers

If personal data is transferred outside the EU/EEA, we will ensure that appropriate safeguards are in place as required by applicable data protection law.

How long we keep data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the service, meet legal obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the type of data and the reason it was collected.

Your rights

Under applicable data protection law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to certain processing
• Request data portability, where applicable
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

To exercise your rights, contact us using the details in section 1.

Cookies and similar technologies

We may use cookies and similar technologies to operate the website, improve functionality, understand usage, and enhance user experience.

Where required by law, we will request your consent before placing non-essential cookies. More information will be provided in our Cookie Notice.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

Third-party services

Our website or platform may include links to or integrations with third-party services. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy notices.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page together with the revised effective date.

Contact