Privacy Policy
Last updated: May 04, 2026
This privacy policy explains what personal data Posty collects, why we collect it, and what your rights are. We've tried to write this in plain English. If anything is unclear, contact us at hello@posty.win.
This document is provided in English. A Latvian translation may be made available; if so, the English version remains the authoritative version in case of any discrepancy.
Who we are
Posty is a software service for managing padel club activities, including session registration, tournament organization, and communication with members. Posty is operated by Toms Siļķe, an individual based in Latvia. You can reach us at hello@posty.win.
For the purposes of EU data protection law (GDPR), Toms Siļķe is the data controller for the personal data described in this policy.
What data we collect
We collect the following categories of personal data:
Account information that you provide when you sign up or use the service:
- Your name
- Your email address
- Your phone number (if you provide one)
- Authentication data, including a unique Google account identifier if you sign in with Google
Club and activity data generated by your use of the service:
- Which club(s) you are a member of
- Your role within a club (player, coach, or administrator)
- Your skill rating, awarded by club administrators
- Sessions and tournaments you have registered for
- Partners you have selected for sessions
- Results recorded by club administrators
WhatsApp integration data when your club uses Posty's WhatsApp bot:
- Your membership in WhatsApp groups that the bot has been added to
- Messages exchanged between you and the bot directly (for example, verification responses)
- Your phone number, used to link your Posty account to your activity in club WhatsApp groups
Technical data collected automatically when you use the service:
- IP address and approximate location (country/region)
- Browser type and device information
- Pages visited within the service and timestamps
- Session cookies necessary for the service to function
Why we use your data, and our legal basis
Under GDPR, we need a lawful basis for each type of processing. Here is what we do and why:
To provide the service (legal basis: performance of a contract). Most of what we do with your data falls here. Storing your account, registering you for sessions, showing your name to other members of your club, sending notifications to your club's WhatsApp group — these are all necessary parts of providing Posty as a service.
To authenticate you and keep your account secure (legal basis: performance of a contract, legitimate interest). We use your email or Google account to verify it's actually you signing in. We use cookies to keep you signed in.
To improve the service (legal basis: legitimate interest). We use analytics tools to understand which features are used, identify bugs, and improve usability. Where possible we use privacy-respecting analytics that do not track you across websites.
To communicate with you about the service (legal basis: performance of a contract). We send transactional emails (sign-in links, account notifications) and, when your club uses the WhatsApp integration, automated messages relating to your registrations.
We do not use your data for advertising. We do not sell your data. We do not share it with anyone except the third parties listed below, who help us run the service.
Your club and your club's administrators
Posty is used by padel clubs to manage their activities. When you join a club:
- Club administrators see your name, contact details, role, and rating, and can update your role and rating
- Club administrators see your registrations, partner selections, and results within their club
- Coaches assigned to sessions you participate in see your name and registration details
- Other club members see your name and your rating in club leaderboards and registration lists
Club administrators use this information to operate their club — manage memberships, organize sessions and tournaments, and communicate with members. For these purposes, the club acts as a separate data controller in relation to your data within their club. The club is responsible for how administrators within the club use your data, including any communication they initiate with you outside of Posty's automated features.
If you have concerns about how a specific club uses your data, contact the club's administrator directly. If you have concerns about Posty itself, contact us at hello@posty.win.
Who we share your data with
To run Posty, we use third-party service providers acting on our behalf. They process your data only to provide their part of the service, under contracts that require them to handle it according to GDPR.
The categories of providers we work with are:
- Cloud infrastructure and database hosting — to store your data and run the service
- Authentication providers — to securely sign you in, including Google if you use Google Sign-In
- Email delivery — to send you sign-in links and other transactional emails
- WhatsApp — when your club uses the WhatsApp integration, the bot interacts with WhatsApp's service. Posty's bot is a regular WhatsApp account; messages sent to and from it are subject to WhatsApp's own terms and privacy practices
- Analytics — to understand product usage and identify problems, using privacy-respecting tools where possible
We choose providers that take EU data protection seriously and that offer EU-region hosting where possible. A current list of specific providers is available on request — email us at hello@posty.win.
International data transfers
Some of our providers are based outside the European Economic Area, even when they host data within the EU. Where your personal data is transferred outside the EEA, we rely on legal mechanisms approved under GDPR — typically the European Commission's Standard Contractual Clauses — to ensure your data continues to be protected to GDPR standards.
How long we keep your data
- Account data: for as long as you have an active account, plus up to 30 days after you delete your account, after which it is permanently removed.
- Activity data (registrations, results, ratings): retained while your account exists. After deletion, anonymized records may be kept for club statistics.
- Technical logs: typically 30–90 days, depending on the provider.
- Email delivery logs: approximately 30 days, after which only aggregate counts remain.
Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct information that is wrong
- Delete your account and associated personal data
- Export your data in a portable format
- Object to processing based on legitimate interest
- Restrict processing in certain circumstances
- Withdraw consent where we rely on consent (most of our processing does not rely on consent)
You also have the right to lodge a complaint with a supervisory authority if you believe we have mishandled your data.
How to exercise your rights
To make any kind of data request, email us at hello@posty.win. We aim to respond within 30 days.
To protect your data from unauthorized requests, we may need to verify your identity before acting — usually by confirming details of your account, or by asking you to send the request from the email address on file. If someone else is making a request on your behalf, we may ask for written authorization.
If you are not satisfied with how we handle your request, you can contact the Latvian Data State Inspectorate (Datu valsts inspekcija):
- Address: Elijas iela 17, Rīga, LV-1050, Latvia
- Phone: +371 67223131
- Email: pasts@dvi.gov.lv
- Website: dvi.gov.lv
If you reside in another EU/EEA country, you may also contact the data protection authority in that country.
Cookies
Posty uses cookies that are strictly necessary for the service to function (for example, to keep you signed in). These do not require your consent under EU law.
If we add analytics or other non-essential cookies in the future, we will update this policy and present a cookie consent banner at that time.
Children
Posty is intended for use by padel club members, which may include young people. We do not knowingly collect personal data from children under 13. If you are between 13 and 17, you should only use Posty with the permission of a parent or legal guardian, who is responsible for understanding and agreeing to this policy on your behalf.
If you believe a child under 13 has provided us with personal data, contact us at hello@posty.win and we will delete it.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this policy reflects the most recent change. For significant changes, we will notify you by email or through the service.
Contact
For any questions about this policy or about how we handle your data, contact us at hello@posty.win.