Privacy Policy

Effective Date: 1 July 2025

Last Updated: 1 July 2025

1. Who We Are

Shfflr is operated by Shfflr.com. We act as a Data Controller when determining the purposes and means of processing your personal data, and as a Data Processor when handling data on behalf of sports clubs and other organisations and businesses.

2. What Personal Data We Collect

Identity & Contact Data:
- Name, username, email, phone number
- Date of birth, gender, nationality
- Profile image
- Role (e.g. participant, organiser)
Performance & Usage Data:
- Match stats, training sessions, attendance
- Fitness and wellness data (optional)
- App interaction logs, device information, IP address
Communications:
- In-app chat, feedback, support messages
Location Data:
- If enabled, real-time GPS location (for features like tracking training routes)

3. Legal Bases for Processing (GDPR)

We process your data under the following legal bases:

Consent (e.g., sharing health or GPS data)
Performance of a contract (e.g., managing user accounts)
Legal obligation (e.g., tax, fraud prevention)
Legitimate interests (e.g., improving our services, app security)

4. How We Use Your Data

We use your data to:

Provide and improve our app
Authenticate users and manage access
Connect club members (e.g. participants, organisers, etc)
Monitor training and performance
Send relevant notifications
Ensure compliance with legal requirements

5. Data Sharing and Transfers

We may share your data with:

Club administrators and coaches (limited to relevant team data)
Service providers (hosting, analytics, support tools)
Authorities if required by law
Third parties with your consent

International Transfers:

Data may be transferred outside your country. We implement safeguards like Standard Contractual Clauses (SCCs) or rely on countries with adequate data protection laws (per GDPR Article 45).

6. Your Rights

Depending on your location, you may have the right to:

Access - Request a copy of your data
Rectify - Correct incorrect or incomplete data
Erasure - Ask us to delete your data (“Right to be Forgotten”)
Restrict - Limit how we use your data
Object - Object to processing based on our legitimate interests
Portability - Receive data in a machine-readable format
Withdraw Consent - Opt out of consent-based processing at any time

To exercise your rights, contact us at support@shfflr.com.

7. For California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California users may:

Request disclosure of data collected and how it's used
Request deletion of personal information
Opt out of sale of personal information (we do not sell data)
Not be discriminated against for exercising these rights

To submit a CCPA request, please email support@shfflr.com.

8. Data Retention

We retain data only as long as necessary:

For user account activity
To comply with legal obligations
To resolve disputes and enforce agreements

If you request deletion, we will securely erase your data unless we are legally required to retain it.

9. Data Security

We use appropriate technical and organizational safeguards, including:

Encrypted communications (TLS)
Secure cloud storage
Role-based access control
Regular audits and vulnerability testing

Despite these measures, no method of transmission is 100% secure.

10. Children’s Privacy

We do not knowingly collect personal data from children under the age of 13 (or under the age of digital consent in your jurisdiction) without parental consent. Clubs and other organisations and businesses must ensure proper consent is obtained when onboarding minors.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted in the app and noted with a new “Effective Date.” If required by law, we’ll seek your consent to changes.

12. Contact

For questions, complaints, or to exercise your data rights, contact us:

Email: support@shfflr.com
Address: 85 Great Portland Street, London W1W 7LT, UK

85 Great Portland Street, London W1W 7LT, UK

Download