Privacy Policy

Last updated: September 2026

1. Who We Are

AllONDECK HUB ("we", "us", "our") is a tennis platform connecting players, coaches, tournaments and opportunities across Africa, starting in Nigeria. AllONDECK HUB is registered in New Mexico, USA and in Nigeria, and is the data controller responsible for your personal information. Our website is at allondeck.org. We are registered with the Nigeria Data Protection Commission (NDPC) under Registration ID NDPC/DCP/14321. For any privacy or data-protection question, contact us at hello@allondeck.org.

2. Information We Collect

We may collect the following types of personal information:

• Account information: name, email address, country, and role (player, coach, parent, etc.) when you register.
• Player profile data: age, location, playing level, UTR rating, height, playing hand, and any biographical information you choose to submit via the Talent or Grassroots Showcase forms.
• Coach profile data: name, location, certifications, coaching experience, contact details, and any information submitted via the Coach Marketplace form.
• Booking information: name, email, phone number, and session preferences submitted via coaching booking forms.
• Newsletter subscriptions: email address when you subscribe to our mailing list.
• Payment information: we use Flutterwave for secure payment processing. We do not store credit card or bank account numbers on our servers.
• Usage data: pages visited, time on site, browser type, and device information (via standard analytics tools).

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our platform and services.
• Create and manage your account and player/coach profile.
• Process coaching bookings and membership subscriptions.
• Send you transactional emails (booking confirmations, welcome messages).
• Send our weekly newsletter if you have subscribed (you may unsubscribe at any time).
• Publish your player or coach profile on our talent showcase if you have submitted one.
• Respond to enquiries and provide customer support.
• Comply with our legal obligations.

4. Public Profile Information

If you submit a player profile, grassroots profile, or coach listing, the information you provide may be published publicly on our website and visible to coaches, scouts, academies, and other visitors worldwide. Please only submit information you are comfortable sharing publicly. You may contact us at hello@allondeck.org to request removal or amendment of your profile at any time.

5. Legal Bases for Processing

Where required by law (including the Nigeria Data Protection Act 2023), we rely on one or more of the following legal bases to process your personal data: your consent (which you may withdraw at any time); the performance of a contract with you (e.g. running your account or a booking); our legitimate interests in operating and improving the platform; and compliance with a legal obligation. For children, processing relies on the consent and involvement of a parent or guardian.

6. Data Sharing and Processors

We do not sell your personal data. We share it only with the service providers that help us run the platform, and only as needed:

• Supabase — database, authentication and file storage.
• Netlify — website hosting and serverless functions.
• Resend — transactional and newsletter email delivery.
• Flutterwave — secure payment processing and coach payouts (we do not store full card or bank numbers).
• Dojah — optional identity / age verification (KYC), where you choose to verify.
• UTR (Universal Tennis Rating) — ratings and tournament results.
• Google (Analytics / Tag Manager) — site analytics.
• Legal obligations — where required by law, regulation or legal process, or to protect the safety of a child or any person.

Each provider is bound by its own privacy terms and processes data on our behalf under appropriate safeguards.

7. International Data Transfers

We are transparent about where your data lives. Our primary database is hosted in the United States (Oregon, us-west-2), and our application hosting, transactional email and email forwarding are also operated from outside Nigeria. Payment processing and identity verification are handled by providers operating in Nigeria and internationally.

The Nigeria Data Protection Act 2023 permits personal data to be transferred outside Nigeria where an adequate legal basis exists. We rely on the following bases under Part IX of the Act:

• Necessity for the performance of our contract with you — your account, profile and bookings cannot be provided without hosting them.
• Your consent, where you have given it for a specific purpose, such as making your profile publicly visible or opting in to recruitment.

Transferring data abroad does not reduce your protection. The following safeguards apply wherever your data is processed:

• Data is encrypted in transit — HTTPS is enforced site-wide, HTTP is permanently redirected and HSTS is applied — and encrypted at rest by our hosting provider using AES-256.
• Access is restricted at the database level: Row Level Security is enabled on every application table, anonymous write access is revoked, and administrative access requires two-factor authentication.
• Data processing agreements are in place with our processors. Our hosting, database and email providers each incorporate a data processing agreement — including standard contractual clauses where applicable — into the service agreements we have accepted with them. We share personal data with them only for the purposes described in this policy.
• We run automated security testing of our access controls and monitor the platform continuously for faults and security events.

Your rights travel with your data. Wherever it is processed, you keep every right set out in section 10 — access, correction, deletion, restriction, objection, portability and withdrawal of consent — and you may exercise them by contacting privacy@allondeck.org. You also retain the right to lodge a complaint with the Nigeria Data Protection Commission, with whom we are registered under Registration ID NDPC/DCP/14321.

8. Cookies

We use cookies and similar local-storage technologies for: (a) essential functions needed to run the platform — keeping you signed in, remembering your preferences and securing your session (these cannot be switched off); and (b) non-essential functions, including Google Analytics (via Google Tag Manager) to understand how the platform is used, and Google AdSense advertising, which helps keep the platform free. On your first visit we show a cookie notice where you can choose "Accept all" or "Essential only"; you can change your choice at any time by clearing this site's data in your browser, and you can manage ad personalisation via Google Ad Settings.

9. Data Retention

We keep your personal data only for as long as we need it:

• Active accounts: retained while your account is active.
• After deletion: when you delete your account or ask us to erase your data, we remove it from our live systems within 30 days and from backups within 90 days.
• Records we must keep: some records (e.g. payment and transaction records, and safeguarding records) are kept longer where the law requires — typically up to 6 years for financial records.

Account data stored in your browser's local storage stays on your device and can be cleared at any time. To request deletion, email privacy@allondeck.org.

10. Your Rights

Depending on your location, and under the Nigeria Data Protection Act 2023, you may have rights including:

• The right to access, correct, or delete your personal data.
• The right to object to or restrict certain processing.
• The right to data portability.
• The right to withdraw consent at any time (e.g. unsubscribe from newsletters).

To exercise any of these rights, email hello@allondeck.org. If you are in Nigeria and believe we have not handled your data properly, you also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

11. Children's Privacy & Safeguarding

Many of our players are children (under 18), and protecting them is a priority. We only register and manage a child's profile with the verifiable consent and involvement of a parent or guardian, and junior registration collects a date of birth and guardian email to confirm age and parental responsibility.

• We minimise the data we collect about children and do not publish a child's contact details.
• A child's profile visibility, images, and any sharing with coaches or scouts are guardian-controlled and require guardian consent.
• Messaging between players and coaches is mediated and visible to guardians.
• We do not knowingly collect data from a child without guardian consent. A guardian can access, correct or delete their child's data at any time by emailing hello@allondeck.org.

For how we keep young players safe more broadly, see our Child Safeguarding page. To report a safeguarding concern, contact safeguarding@allondeck.org.

12. Security

We take reasonable technical and organisational measures to protect your personal information — including encryption in transit and at rest, least-privilege access controls, and automated security scanning. However, no method of internet transmission is 100% secure. Passwords stored via our login system are encoded in your browser's local storage - we strongly recommend using a unique password.

Data breach notification. If a personal data breach occurs that is likely to affect your rights and freedoms, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of it, and will inform affected users without undue delay where required.

13. Third-Party Links

Our website may contain links to third-party sites (e.g. Flutterwave, ITF). We are not responsible for the privacy practices of those sites.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our platform constitutes acceptance of the revised policy.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• 📧 hello@allondeck.org
• 🔒 Data Protection & Privacy: privacy@allondeck.org
• 🛡️ Safeguarding: safeguarding@allondeck.org
• 🌐 allondeck.org
• 📍 Registered in New Mexico, USA & Nigeria