Privacy Policy

Effective date: 29 May 2026

CourtPass (the "App", "we", "us", or "our") is operated by Enform Pty Ltd (ABN 19 657 432 712), of 11 Connor Drive, Burnside Heights, VIC 3023, Australia. Enform Pty Ltd is the entity responsible for your personal information (the data controller). This Privacy Policy explains what personal information we collect when you use the CourtPass web and mobile applications, how we use it, who we share it with, where it is stored, and the choices and rights you have. By creating an account or using CourtPass, you agree to the practices described here.

CourtPass primarily serves clubs and players in Australia and New Zealand. We handle your personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and the New Zealand Privacy Act 2020. If you access CourtPass from the European Economic Area or the United Kingdom, additional rights described in section 9 may apply to you.

1. Information we collect

We collect information you provide to us directly, information collected automatically as you use the service, and information we receive from third parties.

1.1 Information you provide

• Account & profile data: your name, email address, phone number, and (optionally) a profile photo. You may upload a profile photo from your device's photo library or take one with your camera.
• Payment information: when you make a booking or purchase a membership, your payment is processed by Stripe. Stripe collects and processes your card details directly; on mobile you may also pay using Apple Pay or Google Pay, which tokenise your card through Stripe. CourtPass does not store full card numbers or CVV codes. We retain limited transaction records (such as amount, date, club, and a payment reference). If you use the optional card-scanning feature, your camera is used only to read card details for entry into Stripe's payment form; we do not store the scanned image.
• Communications & support: when you contact us or report a problem, we collect the content of your messages and any information you choose to include.

1.2 Information collected automatically

• Precise location: with your permission, we use your device's precise location to show you nearby clubs and courts. We only access location while you are using the App (we do not collect background location). You can disable location access at any time in your device settings; some discovery features may be limited if you do.
• Booking & usage data: the clubs, courts, events, and memberships you book or interact with, your favourites, and basic activity used to operate and improve the service.
• Device & technical data: information such as device type, operating system, app version, and IP address, collected automatically to keep the service secure and functioning.
• Logs: system and access logs, including timestamps and error/performance data, used to operate, secure, and debug the service.
• Cookies & similar technologies: on the CourtPass website we use strictly necessary cookies (for example, to keep you signed in and secure your session). See section 3.

1.3 Information from third parties

• Sign-in providers: if you sign in using Google or Apple, we receive basic profile information (such as your name and email) from those providers to create and secure your account, in line with their and your privacy settings.
• Payment provider: Stripe confirms the outcome of payments and provides limited transaction details so we can fulfil your booking or membership.

2. How we use your information

• To create and manage your account and authenticate you.
• To find and display nearby clubs and courts based on your location.
• To process bookings, memberships, and payments.
• To communicate with you about bookings, account activity, and support requests.
• To operate, maintain, secure, and improve the App.
• To comply with our legal obligations and enforce our terms.

We collect and use your personal information because it is reasonably necessary to provide the service you have asked for, to meet our legal obligations, and for our legitimate business interests in operating and improving CourtPass. Where the law requires your consent (for example, device location access), we ask for it and you can withdraw it at any time.

3. Cookies and similar technologies

On the CourtPass website we use cookies and similar technologies. We do not use advertising or cross-site tracking cookies.

• Strictly necessary: required for the site to function, such as keeping you signed in and protecting your session. These cannot be disabled.
• Functional: remember your choices and preferences to give you a smoother experience.

You can manage or block cookies through your browser settings, though some parts of the site may not work properly if you do.

4. Mobile apps and app stores

CourtPass is available as a mobile app through the Apple App Store and Google Play.

• The App asks for device permissions in context — location, camera, and photo library — and only for the purposes described in this policy. You can grant or revoke any of these permissions at any time in your device settings.
• Apple and Google act as platform providers for app distribution, updates, and (where you use them) Apple Pay or Google Pay. Their handling of your data is governed by their own privacy policies.
• The data-collection summaries shown on our App Store ("App Privacy") and Google Play ("Data Safety") listings reflect the practices described in this policy. CourtPass does not use your data to track you across other companies' apps or websites, and does not share your data for advertising.

5. Third parties we share with

We do not sell your personal information. We share it only with the service providers and parties who help us run CourtPass:

• Stripe — payment processing (including Apple Pay and Google Pay).
• Hetzner — cloud hosting and infrastructure where the service and your data are stored.
• Google & Apple — sign-in / authentication, and (on mobile) app distribution and payment.
• Clubs you book with — the relevant booking details so they can fulfil your reservation.

These providers may only access the information they need to perform their function and are required to protect it. We may also disclose information where required by law, or to protect the rights, safety, and security of our users and the service.

6. Where your information is stored and transferred

CourtPass is hosted on Hetzner infrastructure, and some of our service providers (such as Stripe, Google, and Apple) operate internationally. This means your personal information may be stored or processed outside Australia or New Zealand, including in the European Union and the United States. Where we transfer your information overseas, we take reasonable steps to ensure it is handled consistently with this policy and protected by appropriate safeguards and contractual commitments.

7. Data retention

We keep your personal information only for as long as we need it for the purposes described in this policy:

• Account & profile data: for as long as your account is active. After you delete your account, we remove or anonymise it within a reasonable period.
• Transaction records: retained for longer where we must keep them to meet legal, accounting, or fraud-prevention obligations.
• Logs & technical data: retained for a limited period for security and troubleshooting, and may be kept longer in aggregated or anonymised form.

8. Security

We use reasonable technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS) between your device and our servers.
• Access controls and authentication that limit who can access personal data.
• Storing payment card details with Stripe rather than on our own systems.
• Ongoing monitoring, patching, and review of our systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you have rights over your personal information. In Australia and New Zealand you can ask to access and correct the information we hold about you. If you are in the EEA or UK, you may also have rights to erasure, to restrict or object to processing, to data portability, and to withdraw consent. You can:

• Update your profile details in the App at any time.
• Delete your account in-app — you may permanently delete your CourtPass account and associated personal data from within the App's profile settings. This action is irreversible. You can also ask us to delete your account by emailing legal@mycourtpass.com.
• Disable location, camera, photo, and notification permissions in your device settings.
• Contact us at legal@mycourtpass.com to access, correct, or otherwise exercise your privacy rights.

We may need to verify your identity before acting on a request. If you are not satisfied with how we handle your information, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or to the New Zealand Office of the Privacy Commissioner at privacy.org.nz.

10. Children's privacy

CourtPass is intended for users aged 15 and over. Consistent with the Australian Privacy Act and the Children's Online Privacy Code, we do not knowingly collect personal information from a child under 15 without the consent of a parent or guardian. If you are under 15, please do not use CourtPass without the involvement of your parent or guardian. If you believe a child under 15 has provided us with personal information without that consent, please contact us at legal@mycourtpass.com and we will take steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the effective date above and, where appropriate, notify you of material changes.

12. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at legal@mycourtpass.com.

Enform Pty Ltd (ABN 19 657 432 712), 11 Connor Drive, Burnside Heights, VIC 3023, Australia.