Pitch Booking — the club & pitch management platform · Last updated: 7 July 2026
Pitch Booking ("the platform", "we") provides club-management software that sports clubs use to run pitch bookings, teams, match-day stats, availability, memberships, volunteering, fundraising and tournaments. This policy explains what personal data the platform handles, why, and your rights.
Each club that uses the platform decides what information to put into it (its members, its player rosters, its records). For that club data, your club is the data controller and we act as its data processor. For the account and technical data needed to operate the platform itself (sign-in accounts, security logs), we are the controller. Questions about data your club entered should go to your club secretary first; anything else, contact us at the address below.
| Data | Why |
|---|---|
| Account details — name, email, phone, club role | Sign-in, contact lists, permissions |
| Bookings, availability, rota & club content (announcements, messages, images) | The club features you use |
| Player roster entries — a player's name, squad number, position, match appearances, goals and similar stats. Rosters routinely include children, entered by the club with parental consent obtained by the club | Team management and match-day stats. Players do not have logins; parents/guardians can be linked read-only to their own child only |
| Membership & payment records — plans, amounts due/paid, payment references | Club fee collection. Card payments are processed by Stripe; we never see or store card numbers |
| Volunteer-compliance records (e.g. vetting/safeguarding status and expiry dates) | Kept by clubs for their legal safeguarding duties; visible only to the person concerned and authorised club officers |
| Device push tokens | Sending the notifications you enable |
| Technical logs — sign-in events, app errors | Security, support and reliability |
Data is stored in a managed Supabase (PostgreSQL) database hosted in the EU, protected by per-club row-level security — one club can never read another club's data. Sub-processors: Supabase (hosting), Stripe (payments), Google Firebase (push notification delivery). All traffic is encrypted in transit (TLS).
We don't sell personal data, we don't use it for advertising, and we don't track you across other apps or websites.
Club data is kept while the club's account is active and deleted or returned when a club leaves the platform. Technical logs are kept for a short rolling window. Clubs can edit or remove roster and member records at any time.
You can ask for access, correction or deletion of your personal data (GDPR Articles 15–22). Signed-in users can delete their own account inside the app (Menu → your profile → Delete my account), which permanently removes the sign-in account and personal profile. Parents or guardians can ask their club to correct or remove a child's roster entry; the club can do this immediately in the app. You can also complain to your supervisory authority (in Ireland, the Data Protection Commission).
Data questions: contact your club secretary, or the platform operator via the email address on your club's invite emails. We'll respond within 30 days.
If this policy changes materially we'll notify clubs in-app before the change takes effect.