Privacy Policy

Last updated: March 08, 2026

This Privacy Policy explains how The Hoops Geek ("we", "us", "our") collects, uses, discloses, and protects your information when you use our websites, mobile applications, and related services (collectively, the "Services").

This Privacy Policy forms part of our Terms & Conditions. In the event of a conflict between this Privacy Policy and our Terms & Conditions, this Privacy Policy controls for privacy and data protection matters only. Governing law, venue, and dispute resolution are set out in our Terms & Conditions. Refund-specific terms are set out in our Refund Policy.

Controller and Processor Roles

For most account, billing, and product operations, The Hoops Geek acts as the data controller. Where a school, club, team, coach, or organization uses the Services to manage athlete or student data, that organization may act as controller, and we act as a processor/service provider on its behalf for the data and instructions it provides to us.

Information We Collect

We collect the following categories of information:

Identity and account data (name, email, login identifiers, organization/team role).
Athlete, team, and profile data you submit (for example, roster and training-related information).
Commercial and transaction data (subscription status, invoices, and payment metadata).
Technical and usage data (IP address, device/browser data, logs, and feature interactions).
Support and communications data (messages, requests, and troubleshooting details).

We may collect information you provide directly, including account details (such as name and email), profile and team information, content you create in the Services, support communications, and payment and subscription information. We also collect limited technical and usage data, such as device, log, and interaction information, to operate, secure, and improve the Services.

How We Use Information

We use information to provide and maintain the Services, process subscriptions and billing, authenticate users, communicate service updates, respond to support requests, improve reliability and performance, and protect the Services from misuse, fraud, or abuse.

Legal Bases for Processing

Depending on your location, we process personal data under one or more of the following legal bases:

Performance of a contract (for example, account access, subscriptions, and service delivery).
Legitimate interests (for example, security, product improvement, and abuse prevention).
Compliance with legal obligations (for example, accounting, tax, and law-enforcement response where required).
Consent, where required by law.

Cookies and Analytics

We and our service providers may use cookies, similar technologies, and analytics tools to understand usage, improve performance, and measure product quality. Some cookies are necessary for operation of the Services, while others help us understand usage and improve the product. You can control cookies through your browser settings. Blocking some cookies may affect functionality.

Minors and School/Team Use

If a user is under 18, access must be supervised or authorized by a parent/guardian, coach, school, or organization. Users under 13 are not permitted to use the Services directly. Where Services are used through schools or teams, the relevant organization is responsible for obtaining any required permissions and consents.

Coaches, schools, and organizations using the Services are responsible for ensuring they have appropriate authorization to provide athlete or student information.

We do not knowingly collect personal information directly from children under 13 outside a school, team, or parent/guardian-authorized context. If you believe a child has provided personal data to us in a way that violates this policy, contact us and we will investigate and, where appropriate, delete the data.

Student Data and School Requests

If you use the Services through a school, district, or team organization, requests regarding student records (including access, correction, deletion, or export) should generally be directed first to the school or organization administrator. We support our institutional customers in responding to valid requests as required by applicable law and contract.

Third-Party Service Providers

We do not sell or rent personal information. We may share information with trusted service providers that help us operate the Services, subject to contractual safeguards and legal requirements. Providers may change over time, but currently include examples such as:

These providers process personal data on our behalf as data processors/service providers and are contractually required to protect personal data and use it only to provide services to us.

Authentication and account services (for example, Auth0).
Payment and subscription processing (for example, Paddle).
Product analytics (for example, Mixpanel).
Media delivery and storage (for example, BunnyCDN and AWS S3).
Marketing and transactional messaging tools (for example, ActiveCampaign and email delivery partners).

We may also disclose information when required by law, to enforce our rights, or to protect users and the public.

Data Retention

We retain personal data only for as long as needed for the purposes described in this policy, including legal, accounting, and security obligations. We may retain de-identified or aggregated information that cannot reasonably identify you.

Retention periods vary by data type and purpose. For example, we may retain account and service records for the life of the account plus a limited period, transaction and invoice records for required legal and tax periods, and security logs for fraud prevention and incident analysis.

Account Closure and Data Deletion

You can request account closure and deletion of personal data by contacting support@thehoopsgeek.com. We may retain limited information as necessary to comply with legal obligations, resolve disputes, enforce agreements, and prevent fraud or abuse.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

These measures may include role-based access controls, encryption in transit, logging and monitoring, and vendor security reviews appropriate to our size and risk profile.

International Processing

Depending on where you use the Services, your information may be processed in countries other than your own, including the United States. Where required, we apply appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses approved by the European Commission or equivalent legal safeguards.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict use of your personal data, or object to certain processing. To make a request, contact us at support@thehoopsgeek.com. We may request information to verify your identity before fulfilling requests. We aim to respond within the time required by applicable law.

Where applicable, you may also have the right to data portability, withdraw consent (where processing is based on consent), and lodge a complaint with your local data protection authority. If you are in Portugal, you may contact the Portuguese supervisory authority (CNPD).

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. If changes are material, we may provide additional notice where required. Your continued use of the Services after updates means you accept the revised policy.

Data Controller and Contact

The data controller for the Services is Andreas Rauh, Rua Dom Manuel II 11, 2655-378 Ericeira, Lisbon, Portugal. If you have questions about this Privacy Policy or data protection requests, contact support@thehoopsgeek.com.