Home Privacy & legal GDPR & Data Protection

GDPR & Data Protection

Last updated on Aug 16, 2026

Quick answer: Tennis Ladder is built for UK GDPR compliance — data hosted with Cloudflare, minimal collection, junior names masked, no marketing use, and full support for access/erasure requests via your club organiser or platform support.

How responsibility is split

  • Your club is the data controller for its ladder — it decides who's in its leagues and can see its data.
  • Tennis Ladder (the platform) processes that data on the club's behalf: hosting, standings, notifications and support.

Where your data lives

The app and database are hosted on Cloudflare's platform. Emails are sent via Mailgun/Resend. Support and analytics run on our own self-hosted infrastructure. We use these providers purely to run the app — they act on our instructions and don't use your data for their own purposes.

Data minimisation

We collect only what a ladder needs: name, email, optional phone/ratings, and match records. No marketing lists, no profiling, no selling of data — ever.

Juniors

Junior players get extra protection: their names are masked from public view, and we hold a parent/guardian's contact details rather than the child's. See Juniors and safeguarding for the full picture.

Your rights (and how to use them)

Under UK GDPR you can ask for:

  • Access — a copy of the data we hold about you
  • Rectification — fixing anything that's wrong
  • Erasure — deleting your data when you leave
  • Restriction / objection — limiting how it's used
  • Portability — your data in a reusable format

Contact your club organiser or use the in-app support chat and we'll action it promptly. You can also complain to the ICO if you're unhappy with how data has been handled.

See also: Privacy Policy, Cookie Policy.